Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd997654-ec3b-3a87-8090-8042cc2663b0.roa
File:                     fd997654-ec3b-3a87-8090-8042cc2663b0.roa (raw, json)
Hash identifier:          PhmwWJ4sFw09oVNnFu2ijZjXKQdIQCMH7x6qCmAIv6E=
Subject key identifier:   2A:B4:0F:D7:6D:BA:9B:25:C3:F6:7B:8B:64:B5:89:E0:39:85:85:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E0D4BFFB78BCF8E271680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd997654-ec3b-3a87-8090-8042cc2663b0.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.104.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:0d:4b:ff:b7:8b:cf:8e:27:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=5a676b5a-15d6-4b74-a855-92f218d5218a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:f7:e0:6d:17:fd:d3:b5:9c:4c:ea:b0:7e:
                    d5:07:35:fc:2f:4d:d0:f0:c6:54:aa:ce:2b:54:95:
                    9e:5c:42:8c:79:f3:e9:2b:b9:50:02:ba:a6:73:69:
                    91:9c:c3:c0:5f:d3:01:27:6f:2a:e5:83:09:5f:3b:
                    fd:c5:9c:12:19:82:d4:9a:cd:8f:b7:d1:a4:a8:a5:
                    59:19:80:93:86:bc:18:7a:6b:71:43:85:3e:9c:cd:
                    cc:39:5d:47:0a:58:df:ca:0f:2e:45:b5:8c:e5:db:
                    07:22:89:df:c2:26:37:b4:11:f9:04:43:f2:69:b7:
                    0e:2b:fd:1e:71:73:91:f1:13:95:6f:39:32:ef:4f:
                    fd:74:05:3e:fc:0b:23:e3:17:2b:e6:b0:e6:fb:9f:
                    d4:35:46:ab:8a:e4:8c:df:ce:31:d5:50:9f:ef:87:
                    74:86:e6:fc:d7:27:35:6a:94:d6:ac:86:6f:27:14:
                    bf:52:d9:33:c6:06:2b:cf:b1:f8:75:ed:16:d1:42:
                    e6:30:13:56:2a:f1:00:34:03:cf:36:47:f6:24:cf:
                    78:05:a9:5c:31:2d:87:5a:70:d1:5a:3a:f6:75:ce:
                    26:e1:e6:65:bc:14:64:69:96:4c:5c:39:0b:dc:ec:
                    6f:e5:f9:21:6e:5b:7a:80:3d:7a:69:b4:f8:02:43:
                    b9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B4:0F:D7:6D:BA:9B:25:C3:F6:7B:8B:64:B5:89:E0:39:85:85:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd997654-ec3b-3a87-8090-8042cc2663b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:73:21:24:44:11:b1:c6:09:45:59:f7:34:f6:6b:8f:9b:72:
         2b:da:9f:2a:50:49:e0:9b:1f:06:c7:0d:80:d3:cb:a8:d9:d0:
         eb:12:18:8d:90:ac:48:4b:28:ca:a9:a8:a0:9a:26:43:8e:d7:
         e8:8a:91:38:0e:31:07:6a:8a:e5:00:13:6a:79:df:cc:bd:2c:
         14:d1:c1:ad:19:24:bb:16:3b:73:b9:d0:02:20:8e:b4:b0:bc:
         17:91:5e:58:c3:58:cb:07:10:ec:45:ff:dd:de:f9:4c:37:cb:
         63:a2:e5:0a:99:56:18:88:19:1b:d4:05:9f:2c:e3:26:ae:2b:
         32:0a:45:06:f5:44:26:0d:46:98:5f:cc:a0:55:9b:37:b3:4d:
         19:f8:7a:06:e2:c8:b8:2f:47:50:42:27:86:99:1c:fd:d3:4d:
         04:42:f8:e5:74:3d:86:98:b0:fa:57:30:85:1c:1f:1e:5b:18:
         ef:1a:e1:32:4c:50:57:38:e0:69:7a:ce:67:44:ce:7c:53:ac:
         1d:aa:ec:70:65:ee:cc:92:1c:8d:4e:f5:13:e5:f7:93:75:5e:
         4c:5f:18:be:85:3b:34:b4:bf:14:47:50:f8:31:51:0b:9f:3a:
         ff:bb:01:2e:63:58:6a:bf:6e:28:55:54:2d:5f:ae:e7:cb:cf:
         77:5b:4f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:35 2024 by rpki-client on console-ams.rpki-client.org