Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e844520d-8c4b-3f04-a133-d727c51f33dd.roa
File:                     e844520d-8c4b-3f04-a133-d727c51f33dd.roa (raw, json)
Hash identifier:          OLZSKEgKYlSpE7BvWJ0AVUagE1ZLZjl9NcDbVmJ1H60=
Subject key identifier:   5B:FF:D2:49:84:6E:46:0C:EE:05:60:8F:3E:DF:BE:24:B5:B5:B5:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D92DD57CAAB6141E96900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e844520d-8c4b-3f04-a133-d727c51f33dd.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.104.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:92:dd:57:ca:ab:61:41:e9:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=718946bc-b497-45f9-9bba-31f8c5d0c35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:8c:58:b3:fa:dc:f7:8f:bc:59:23:d7:b5:
                    f7:90:dd:94:3f:c2:c2:52:48:c6:58:88:67:a8:c0:
                    bd:95:56:b5:cf:65:b5:ea:44:82:ed:bf:16:00:80:
                    43:25:97:da:80:8b:c1:06:7d:14:af:c5:ef:81:24:
                    f7:d3:50:17:94:c1:9e:39:66:43:b3:43:89:43:61:
                    ce:29:74:d6:87:b6:ce:e9:b4:62:aa:9d:d7:a2:e3:
                    77:74:55:b8:c1:59:02:0f:00:0d:37:b6:db:f1:63:
                    f4:c2:75:6c:57:0e:7b:f2:53:a6:fe:48:9a:03:8c:
                    ec:15:56:1e:b3:1e:bd:f9:46:bd:6c:2f:1d:14:70:
                    f0:8d:7a:b5:7c:35:da:66:c0:cb:e9:56:a4:0b:a5:
                    90:ed:0d:7d:bd:78:d4:2b:81:4a:d1:c3:5b:33:67:
                    86:e5:16:a7:3b:fa:6a:fc:4a:b3:16:4e:65:38:4d:
                    42:af:9a:ce:a7:68:e7:5f:4e:8b:33:ea:39:f4:46:
                    d5:c2:e2:b8:ab:05:e3:d0:54:0c:d5:3c:7e:80:23:
                    cb:c0:0b:25:44:97:6d:fe:dd:fb:bb:7d:59:b5:9d:
                    e3:bc:7a:c4:2a:06:b4:03:21:d1:ca:a2:09:7c:4a:
                    8f:1f:98:83:bd:d5:41:3e:d1:57:dc:6c:15:85:7b:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:D2:49:84:6E:46:0C:EE:05:60:8F:3E:DF:BE:24:B5:B5:B5:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e844520d-8c4b-3f04-a133-d727c51f33dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:be:fc:2a:83:14:bd:e8:90:88:4f:f5:f7:03:61:47:f1:0f:
         4e:02:0f:93:7d:ce:53:25:dc:28:88:30:af:88:a8:c5:9d:fd:
         fa:81:ad:40:0f:99:89:19:2c:bc:b9:28:c4:a5:b9:d9:cc:07:
         b9:1a:e5:de:fa:4b:1c:98:e0:fb:ac:37:10:43:ae:85:c2:94:
         de:ba:38:5c:d8:fa:2e:11:21:eb:6c:ea:53:2c:87:0b:c7:b4:
         73:c3:d7:71:07:0c:d7:4d:8f:44:41:8c:83:f7:27:3e:d3:4e:
         c3:d3:0e:e0:86:d0:17:82:d1:14:6f:99:78:78:88:3c:a8:3d:
         ca:42:99:94:df:6c:28:8a:4e:f9:73:93:2e:42:94:98:74:ef:
         ce:77:c3:50:f1:90:25:1e:03:66:73:34:9d:ed:d2:34:14:4d:
         2b:c4:dd:96:ea:29:8c:28:82:8b:64:c5:b1:ae:f6:03:98:ad:
         22:67:93:5c:91:80:e0:2f:5f:d8:5d:23:96:c2:10:e9:70:e8:
         42:2d:38:77:39:b5:65:b8:d2:31:be:a6:52:64:6e:94:3a:7c:
         35:df:12:08:6f:4e:b1:d7:ee:6d:b8:7d:45:c9:d3:d8:c8:dc:
         10:ca:39:ed:f9:9e:f6:f8:39:22:82:d5:e3:da:0d:4f:9e:c1:
         bc:a0:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:48 2024 by rpki-client on console-ams.rpki-client.org