Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffbd7604-3b7a-328f-a9bf-bb41aa85fb08.roa
File:                     ffbd7604-3b7a-328f-a9bf-bb41aa85fb08.roa (raw, json)
Hash identifier:          t1KcU96TeLIhlYUHHjv0Zy9SV+fvaDNVrd9mLg+lO1Y=
Subject key identifier:   02:DA:34:08:D5:79:E5:67:AE:41:F7:1D:BB:52:86:87:39:C3:2B:2F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A4E0EE01E4D073C760A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffbd7604-3b7a-328f-a9bf-bb41aa85fb08.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.105.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:4e:0e:e0:1e:4d:07:3c:76:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ebc1dfa2-3b9f-4273-9aca-32e7948c69c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:ed:23:65:e9:96:dc:5a:87:2a:2c:81:72:
                    ed:85:76:54:c6:a0:f3:04:07:0f:8d:b2:7b:40:ae:
                    94:b5:06:b6:01:ca:2d:ad:21:17:2a:92:f4:de:25:
                    10:0e:8f:95:8b:76:e3:32:ca:42:93:8d:71:cc:c1:
                    ab:11:59:6d:52:38:e5:58:77:12:98:66:cd:ab:1a:
                    28:ff:17:59:9f:b3:be:28:65:d1:f7:83:0c:d5:69:
                    ef:e8:ac:38:21:18:32:74:a5:04:3f:7e:f8:99:9c:
                    05:79:1b:5f:5a:f0:04:db:c2:41:da:dc:42:58:87:
                    1c:b3:83:c8:af:6e:55:4c:e8:ec:ca:3f:01:bf:a1:
                    7e:92:e6:df:ec:45:a4:36:8c:e7:c2:67:9d:3e:20:
                    a8:aa:8c:f7:41:86:a6:ae:6f:cb:95:0d:84:37:c1:
                    d0:a8:10:24:0c:ec:6c:2c:12:a6:ef:24:57:c8:5f:
                    1f:06:58:bf:bc:16:7e:54:00:4e:61:13:19:7c:e3:
                    ed:92:d0:02:32:c5:1b:3d:ce:e5:2e:1c:fc:b1:b8:
                    69:d6:a7:cc:c2:30:ff:b8:1c:60:de:fc:1e:59:4b:
                    35:62:f6:ac:19:b5:0a:a9:2a:4a:74:fe:16:69:ab:
                    50:f3:3b:ad:84:80:63:35:b9:8f:fd:cd:8d:6e:72:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DA:34:08:D5:79:E5:67:AE:41:F7:1D:BB:52:86:87:39:C3:2B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffbd7604-3b7a-328f-a9bf-bb41aa85fb08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:75:9d:e3:03:01:80:7e:2e:ef:c3:96:a5:0f:c8:67:3e:
         a5:b7:00:90:c4:00:29:d3:b5:d8:66:11:1d:fd:ee:f1:78:c5:
         c8:9e:a7:88:eb:8e:90:75:3b:04:a1:f9:a9:2f:5b:2c:23:d0:
         9a:96:f8:eb:ce:46:49:04:8f:00:3b:22:37:43:37:f7:b2:ef:
         5e:02:03:4d:f0:60:17:ed:98:c2:82:91:fd:a7:18:33:85:d8:
         18:53:3e:27:d1:1a:52:d1:b7:a6:f6:ed:56:4d:9c:08:04:95:
         21:4c:60:02:9e:ea:22:93:90:ed:d8:b6:fa:03:1e:d2:aa:53:
         9a:5c:8b:63:32:19:26:e8:d8:3c:2e:da:22:f2:13:9e:7c:e6:
         4a:97:98:72:a8:7f:57:29:f5:35:83:9a:74:32:ed:59:90:95:
         6b:b7:da:04:a9:13:bf:2b:f2:07:ec:96:0a:24:2a:27:ce:d1:
         ad:3e:4f:95:97:aa:56:f1:cf:f0:f6:99:66:67:be:63:75:b2:
         ba:c7:46:e9:f5:5b:44:f2:70:74:fd:4f:8d:5b:e2:53:8b:e1:
         6a:df:81:4e:78:21:ea:0e:4f:54:69:38:54:06:72:61:02:be:
         a1:0e:63:f1:90:11:e1:8e:d3:73:46:4b:62:93:07:23:16:16:
         f8:63:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:22 2024 by rpki-client on console-ams.rpki-client.org