Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea393cb9-bdac-3799-a898-ca0310f8de6d.roa
File:                     ea393cb9-bdac-3799-a898-ca0310f8de6d.roa (raw, json)
Hash identifier:          yRmL1yHWqaeTY0fIW668CztSeTl4+eMwo0/VR6gtLmE=
Subject key identifier:   C4:CC:F4:24:11:4B:BA:59:D4:66:18:24:10:51:FE:6C:DF:62:CC:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E1AF597FB11C91FD50BF8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea393cb9-bdac-3799-a898-ca0310f8de6d.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:1a:f5:97:fb:11:c9:1f:d5:0b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=d933fbe7-6670-4d52-be7f-90d5d99d5fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:db:66:ec:25:f4:1f:b9:8f:6e:eb:10:d2:
                    31:64:ec:88:ef:5c:ec:8e:b9:63:ed:23:af:5c:db:
                    c3:2c:c8:58:02:ec:88:38:03:b5:85:62:65:5a:f1:
                    ae:89:fa:ed:55:ce:95:d7:d4:dc:86:8b:e0:d9:f6:
                    9c:3f:28:d1:15:07:33:67:3d:a8:fb:0f:aa:8a:1e:
                    d3:72:1d:5e:84:b4:43:45:c8:7d:b7:1d:df:95:25:
                    39:86:91:6e:a7:14:20:a7:c0:57:13:4c:77:80:92:
                    f1:d7:f9:aa:7c:0e:5c:7f:e1:94:23:36:9f:da:c3:
                    d1:ae:dc:04:6b:7d:f7:ee:38:3c:9c:48:de:ab:49:
                    62:b5:e9:67:83:99:6e:46:96:7b:75:0b:90:60:5e:
                    dd:45:05:f4:0d:c0:da:e6:c1:1a:a2:32:93:da:3b:
                    50:95:3a:8a:43:61:10:f9:ca:ed:65:b1:78:65:c1:
                    33:8a:d7:b1:19:0b:ec:7e:85:e4:78:ed:67:7f:0a:
                    5b:2c:30:a7:71:20:9f:c5:ef:aa:78:a8:d4:ff:5e:
                    ab:9f:d4:af:e4:51:3a:ff:59:37:f4:f3:ff:22:36:
                    f3:a0:a3:65:9c:6f:15:01:d3:5a:8c:54:c8:11:59:
                    01:57:a6:7a:dd:04:23:d0:6f:30:30:6e:02:da:64:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CC:F4:24:11:4B:BA:59:D4:66:18:24:10:51:FE:6C:DF:62:CC:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea393cb9-bdac-3799-a898-ca0310f8de6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:4f:e2:7b:03:a7:45:16:4f:66:ee:1e:b4:ef:ba:7c:56:92:
         1e:5f:c9:da:16:db:5e:22:86:66:83:78:74:63:d0:5c:67:97:
         c4:91:cb:75:3c:ba:9b:29:49:e1:70:4c:5c:7a:a3:9c:6d:87:
         75:fd:1f:0f:d4:02:a1:b4:dd:58:76:c6:5a:2b:04:42:8d:79:
         12:8d:38:9f:00:1b:12:10:41:11:c5:ce:6b:8c:4c:43:88:c5:
         bd:ee:90:d8:d2:04:c9:64:d1:c2:8c:b1:34:a6:1c:0e:04:49:
         34:55:3b:ab:31:6c:8a:d2:0b:3a:f3:71:da:ee:0b:23:d4:ee:
         67:8c:65:39:66:a7:97:d0:72:46:77:0c:96:b4:5c:38:fc:8d:
         0a:83:8b:49:b0:77:30:7f:b7:04:0c:d6:eb:fa:36:06:c3:d6:
         ff:32:7f:40:1f:39:93:00:27:90:f0:80:ca:ae:c0:ef:34:14:
         ae:5c:4a:05:d1:86:13:6e:76:6d:b8:be:07:67:3d:a2:a7:56:
         96:8a:28:f1:ae:c3:b1:d7:21:90:38:f4:9a:e8:6a:03:3d:11:
         eb:97:43:49:e4:0a:70:a0:eb:20:82:69:b2:4c:98:08:44:dc:
         da:c2:f7:14:3a:5f:20:30:42:15:2e:d0:3d:a6:58:df:77:82:
         1b:00:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:39 2024 by rpki-client on console-ams.rpki-client.org