Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71b5567-a4eb-3fc8-8baa-535a9a3df0ab.roa
File:                     f71b5567-a4eb-3fc8-8baa-535a9a3df0ab.roa (raw, json)
Hash identifier:          7pkeo7DYnlOIsxL7JHC1ljIuSjna7VI8g/xgNen0fCc=
Subject key identifier:   C8:7D:A3:8B:E3:E5:48:AF:D6:F2:C4:C0:23:1D:A9:69:7B:50:18:C2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A47F03274D8B96801B500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71b5567-a4eb-3fc8-8baa-535a9a3df0ab.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.104.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:47:f0:32:74:d8:b9:68:01:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=853529df-7008-4031-bfeb-13c9f282d5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:86:e5:f8:0d:13:39:f3:aa:5f:9e:b6:9a:
                    48:90:b7:d1:4f:69:e2:f4:55:d7:1a:37:7e:ef:04:
                    19:b9:04:f0:99:45:2b:19:9d:69:fa:b0:00:15:8c:
                    57:79:a9:5e:4a:69:63:4d:2d:70:7b:0b:9b:e1:61:
                    04:5b:af:f5:c4:35:e2:08:f2:42:9a:b9:73:71:79:
                    0d:13:4c:6a:c3:3f:9d:d5:01:eb:32:87:aa:2c:be:
                    ed:f2:a7:be:80:fa:63:15:f6:4f:99:27:85:12:de:
                    85:fc:4f:4f:b9:e0:00:32:24:4e:8f:04:de:d1:93:
                    2d:c9:41:78:54:e0:98:50:7f:7c:a9:f3:30:2d:69:
                    39:9c:b4:fc:35:a8:88:5a:92:05:47:a8:aa:60:8a:
                    5f:87:1a:ea:b6:47:01:31:fc:95:64:dd:cc:ac:70:
                    e2:ce:7f:a4:5d:54:2c:b6:59:f0:6f:e1:28:c7:95:
                    d1:f9:a3:6c:b6:b0:21:94:6e:5c:ee:14:3a:bd:e0:
                    b8:31:68:0f:3b:9b:53:f5:f2:8f:e6:4e:fe:c1:1b:
                    8d:91:44:85:15:9c:b7:bc:7e:2c:56:43:d5:cb:90:
                    5c:e8:27:4c:56:6f:77:12:42:96:f8:19:c4:81:ca:
                    86:6f:e3:98:bb:1d:46:14:7c:52:51:fd:6c:b5:83:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:A3:8B:E3:E5:48:AF:D6:F2:C4:C0:23:1D:A9:69:7B:50:18:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f71b5567-a4eb-3fc8-8baa-535a9a3df0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:90:0e:73:a8:52:33:79:0d:d4:cd:3f:2b:1b:64:ae:14:71:
         ea:e4:3c:36:57:3c:c4:de:c0:2c:f7:6f:80:05:e1:43:be:dd:
         2f:ab:eb:16:3a:b8:d8:53:46:a0:27:e5:97:9b:80:0a:18:7b:
         b3:31:ba:6b:31:b1:68:32:30:7a:74:d1:ba:3d:dd:01:c8:d1:
         39:60:03:36:6a:99:06:86:ec:10:33:dd:0e:58:61:09:7c:66:
         5c:59:96:22:8e:08:1e:50:30:82:af:9a:12:71:d9:68:f6:be:
         72:98:5e:40:23:32:3c:0d:d3:f2:19:dd:b1:18:c0:2c:70:99:
         d8:69:78:d1:12:62:37:ac:d5:0d:df:e2:d4:d5:6a:34:b4:f5:
         d9:a2:01:c3:04:5d:7a:a3:50:e4:6f:7f:fc:09:ac:f0:53:71:
         ca:4c:27:1e:f9:c9:55:61:8d:19:d1:5c:21:57:8f:33:4e:0c:
         99:11:36:a8:7d:19:94:30:d4:c3:16:b1:c5:52:8d:59:3f:64:
         d0:cb:2c:72:0f:c6:26:dd:d0:19:0f:af:a4:cd:8d:4a:c0:c6:
         e4:72:e2:bf:36:60:db:c0:b2:38:ec:ce:13:4d:e5:66:60:4f:
         d5:77:d7:a0:a0:bd:9f:96:15:ab:bd:ba:ba:52:47:89:f3:bb:
         89:69:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:15 2024 by rpki-client on console-ams.rpki-client.org