Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f795eac8-df5b-32dd-937e-02802f3408f5.roa
File:                     f795eac8-df5b-32dd-937e-02802f3408f5.roa (raw, json)
Hash identifier:          MSJEm1Zeh2cnsBphd9gUEoDMLCv0zUG+stxBHTTPdV8=
Subject key identifier:   66:C7:D2:A1:62:A4:9A:5E:D5:5D:31:99:A7:13:B7:B0:67:15:77:69
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A44F005E85983D22B7670
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f795eac8-df5b-32dd-937e-02802f3408f5.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.104.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:44:f0:05:e8:59:83:d2:2b:76:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=4852a132-4be0-4ac3-85cb-926cece4e7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:53:83:63:4b:f0:39:ef:b9:8c:bd:e8:e2:3c:
                    7d:45:51:bb:90:62:9c:83:fe:37:66:76:c6:fb:ad:
                    90:0a:8b:2a:33:59:97:01:b5:74:6d:94:1d:c9:8a:
                    8a:7a:54:76:64:2b:82:7b:83:11:fd:fc:1e:d3:e1:
                    56:b7:8a:33:a4:f8:80:e2:48:d0:ba:b6:8a:d9:f6:
                    db:c2:13:7e:88:f8:dc:eb:fd:8d:f1:c3:6b:8e:73:
                    ca:c2:a9:d1:5f:ca:50:0b:1a:a8:f6:71:9d:e2:72:
                    14:15:3c:53:b3:c8:32:cc:55:bb:ea:6e:17:af:2f:
                    e1:ea:db:de:51:34:64:17:bb:4d:16:b6:c0:2f:e9:
                    e3:af:f5:ec:ed:47:2c:1d:5a:fb:63:2b:93:4a:c1:
                    fb:d6:38:92:da:98:18:ce:58:31:33:78:72:b0:62:
                    d4:34:bd:17:4a:5d:0a:4b:e2:3e:12:05:fe:18:17:
                    b6:54:f5:3d:1c:3f:6c:1e:9e:16:6f:f5:01:c4:b6:
                    65:f2:a0:f5:8f:7a:48:12:a6:4a:ca:66:8b:9f:81:
                    18:64:d3:4a:5e:fd:63:31:68:49:a4:df:b4:47:22:
                    56:9e:37:a7:d1:69:1f:2e:89:4d:08:5c:f9:94:2f:
                    44:6d:d3:a7:79:26:84:ec:cb:cd:f5:10:51:6f:52:
                    a0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C7:D2:A1:62:A4:9A:5E:D5:5D:31:99:A7:13:B7:B0:67:15:77:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f795eac8-df5b-32dd-937e-02802f3408f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0c:33:85:57:e2:30:23:ba:64:54:ab:8b:74:b2:c6:72:93:
         84:a9:91:b6:b9:00:3c:ad:8e:ff:d8:7b:16:b6:56:ec:5c:e0:
         7f:a1:d5:c1:7f:0b:2f:22:93:cf:c9:a1:d1:ef:12:65:c7:b0:
         d3:4f:6c:ac:1a:65:24:a9:e2:bc:77:4a:26:8f:3a:99:28:9f:
         3b:25:f7:7a:43:74:4c:38:9c:65:07:86:ad:d4:ec:94:57:8a:
         06:4b:ef:9a:e6:37:b6:21:01:b9:8f:7e:2e:e9:0d:b8:6e:dd:
         b3:d4:66:37:e2:cb:43:13:61:74:09:20:d9:bc:8f:8b:70:d0:
         33:69:2b:cc:26:f5:50:3c:62:0b:d9:a2:2c:31:2f:ed:d0:af:
         18:8c:f0:23:16:04:ff:66:49:0b:bd:ed:d0:c2:02:af:28:15:
         76:80:23:c9:72:10:ac:e8:eb:99:9e:a7:ea:0f:d4:14:5a:d3:
         e3:20:75:1e:b2:db:2f:a6:8d:63:1b:7b:14:95:28:e1:58:45:
         d8:bd:dc:2e:87:fc:9c:83:4d:59:e0:ef:5b:76:87:42:f5:b2:
         99:19:51:8c:17:4e:e3:32:1e:d4:a4:44:8c:60:4e:2a:36:a1:
         6c:6e:a6:70:db:fd:27:e7:9f:e0:cc:c0:3c:f3:aa:f1:df:4a:
         4c:63:c4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:15 2024 by rpki-client on console-ams.rpki-client.org