Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb4d917d-d3e3-31cf-86d3-e8b4d4b619ce.roa
File:                     fb4d917d-d3e3-31cf-86d3-e8b4d4b619ce.roa (raw, json)
Hash identifier:          lFX75RjikMr++XLGqDfdXGRCTH1c2G0qzmgt7FQ4Vys=
Subject key identifier:   26:1A:DF:ED:BF:90:1D:85:BD:C6:BC:06:C1:DC:0D:A2:2F:8C:84:E8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D9F4C85EBBFCAD6BA53C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb4d917d-d3e3-31cf-86d3-e8b4d4b619ce.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:9f:4c:85:eb:bf:ca:d6:ba:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c5468fdd-eb94-43d3-b3f4-c496c8a20e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:8c:46:fe:a9:cf:68:a5:00:c4:c7:ab:97:
                    ff:3a:3a:86:0d:65:19:f7:5e:eb:9a:08:9d:34:6f:
                    b6:af:ca:96:45:0d:11:89:ea:f4:b1:9e:74:0b:86:
                    93:49:f6:82:19:49:c7:5e:d3:2e:ea:2e:40:90:96:
                    ba:bd:48:2d:89:c3:6b:49:9b:86:42:71:db:5a:a8:
                    47:fb:1e:3c:6f:ab:a7:a2:c4:6e:8f:a2:11:0a:2f:
                    9c:2c:83:0c:49:88:c3:2a:aa:4f:4c:d4:8b:7b:25:
                    a2:95:24:68:b6:6a:a1:74:66:17:b4:10:a4:51:f4:
                    b4:1b:25:a1:53:9a:c8:d3:0b:f3:54:29:bd:43:df:
                    18:b8:ed:fb:99:f7:f4:99:aa:f2:df:76:5f:59:15:
                    81:8e:75:5e:89:f6:75:be:d4:78:34:e6:75:ce:ae:
                    83:62:44:08:f2:0c:10:2b:00:86:48:5e:be:82:da:
                    66:81:7b:72:4c:64:7d:61:8c:79:f0:21:eb:4f:3e:
                    e9:d7:5d:16:9e:0c:ca:ac:c9:a6:b6:42:c2:ec:d8:
                    77:c0:b0:c5:f8:35:4a:74:e5:fa:27:c7:97:62:59:
                    7d:96:36:4c:e5:33:78:1a:31:fb:78:f0:09:5f:79:
                    dd:6c:f4:3a:3a:31:27:f8:40:ea:09:6c:66:72:96:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1A:DF:ED:BF:90:1D:85:BD:C6:BC:06:C1:DC:0D:A2:2F:8C:84:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb4d917d-d3e3-31cf-86d3-e8b4d4b619ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:28:23:4d:dd:70:9a:cc:77:f3:4a:09:43:ea:5a:11:56:
         71:54:1f:75:c3:c2:39:af:b4:a8:76:b8:b5:a0:bf:3c:52:ff:
         d0:f3:1a:a5:0b:b2:3f:b7:fe:f8:64:72:e0:f8:d9:58:25:b8:
         03:f7:4a:d7:83:17:2c:2b:69:c7:99:99:d9:05:58:f2:01:76:
         26:9f:3b:2a:ce:b8:00:30:61:8b:03:70:7a:40:cb:38:9e:bc:
         af:0a:50:4f:b0:a3:0a:a4:97:6a:81:ec:f9:5b:00:c1:3e:52:
         db:7b:77:bd:9b:66:36:64:d6:5a:2d:21:b4:ff:21:35:35:dd:
         2f:4a:49:f8:0c:44:78:9b:77:29:0e:81:ff:8e:47:cb:d1:c0:
         d0:6e:3f:98:17:3b:2a:f5:70:23:c9:c3:9a:ec:95:12:b4:6f:
         1c:c8:e3:ff:da:e9:7d:44:eb:96:51:a1:c5:cc:03:22:74:17:
         ef:55:4d:de:f7:4e:ec:d5:24:ca:a6:a6:2d:18:61:1a:aa:ea:
         0f:06:ad:d2:3d:64:4b:e1:c8:d3:48:48:d0:32:25:0c:17:96:
         2f:7c:1a:c3:77:de:fe:82:d3:f2:0f:c9:10:42:fe:21:72:87:
         08:29:48:bc:7e:e7:a1:68:e8:69:ec:25:ed:13:ce:9d:8c:3b:
         98:35:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:35 2024 by rpki-client on console-ams.rpki-client.org