Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa
File:                     f4915199-1761-3ed4-9601-4c4aa26b25da.roa (raw, json)
Hash identifier:          p0v34r9oq2a/A9k6uuhBbG4qJJCnW/w1hQSDfMzXV4c=
Subject key identifier:   8B:BA:72:91:CC:DA:45:3C:47:4B:EC:A8:87:FC:85:B3:58:DA:49:0F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D9D135909C53FACD93A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:9d:13:59:09:c5:3f:ac:d9:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=2d9b7a05-3807-49f4-9fb7-9aff1bc97bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:a1:36:36:76:f8:b5:c0:66:23:b2:6d:b9:
                    12:64:6c:c4:b6:22:2f:ee:4b:3b:9e:e4:44:60:db:
                    ec:c7:fd:82:57:ba:18:95:92:32:d4:aa:4a:a0:5a:
                    e2:87:dd:2d:34:7d:e5:0c:bc:a3:fc:d7:c3:a8:09:
                    94:c3:86:8a:1c:99:a3:4b:89:4a:5a:c6:ba:c9:e6:
                    cc:bc:cf:dd:15:b0:74:50:86:dd:e6:5e:6e:86:bf:
                    93:38:9e:82:35:f8:44:a6:00:52:70:63:be:ff:01:
                    e5:cc:0e:0c:56:52:04:7e:3e:7c:ed:ea:0d:4b:b8:
                    7b:20:f0:d8:78:03:5a:a0:f1:92:65:8b:fa:89:60:
                    70:77:97:c6:a3:6d:39:36:7c:c7:22:47:ad:a8:2c:
                    af:dd:c6:2c:08:b8:2b:74:a4:ea:7b:aa:ba:3f:90:
                    e8:ff:69:4e:3e:3d:de:52:bb:e6:1e:ba:5a:19:4e:
                    46:a2:33:c6:91:a0:3e:e4:c9:49:3b:19:91:5f:de:
                    91:85:fd:f4:a2:8c:ec:66:7d:57:3e:0c:91:fe:43:
                    11:95:f3:72:f3:37:07:27:d1:27:86:f6:93:ea:80:
                    50:c7:7c:dc:46:10:67:4a:57:1e:10:c3:8f:08:6b:
                    66:4b:53:18:d2:04:9e:fa:61:12:11:04:e3:7f:4a:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:72:91:CC:DA:45:3C:47:4B:EC:A8:87:FC:85:B3:58:DA:49:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:84:26:15:ca:de:b3:03:c7:2f:db:dc:f1:a9:ea:0b:24:
         50:7c:09:9e:97:23:63:29:d7:50:94:44:1d:77:41:88:3d:e7:
         9f:f4:ce:c7:84:c1:5c:b6:4d:b2:a1:18:ce:80:0e:fb:ed:57:
         8e:e2:4f:0b:6c:03:3e:67:49:90:ca:07:b8:ed:b9:58:69:b0:
         ee:09:6a:ef:ee:1a:b0:13:ac:74:f7:78:9f:61:f5:31:de:c3:
         54:4d:8f:ce:ce:6c:83:18:5e:45:68:20:e5:67:33:44:a7:00:
         63:ec:2d:78:dd:bb:70:bd:75:d1:60:02:7b:fa:90:a5:b2:ad:
         14:d3:e8:e5:6b:c3:8b:c9:ac:b2:b3:ef:b7:d3:54:6a:50:95:
         91:c2:e1:f3:8a:30:07:72:ed:01:c0:2a:97:d3:c1:1a:85:cf:
         1a:6b:f4:9c:c1:ff:dc:0f:7f:1a:39:0f:bc:6c:0e:1d:01:d4:
         40:32:4e:f1:a9:38:4c:3d:df:4b:7b:c4:40:b9:d2:19:c5:59:
         57:14:60:fc:ba:3b:9d:fe:b9:6d:dc:5c:51:46:da:6f:d6:0c:
         92:fe:81:77:f3:b3:c4:2a:4a:dd:8d:e9:f5:83:f5:8b:3f:78:
         3a:7a:7c:4d:a2:a2:19:54:b6:97:f5:0b:8a:ab:be:67:0c:e5:
         e5:9d:a6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:49 2024 by rpki-client on console-ams.rpki-client.org