Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b60684f-2a66-3ff0-9f3c-7699049d4e2b.roa
File:                     1b60684f-2a66-3ff0-9f3c-7699049d4e2b.roa (raw, json)
Hash identifier:          SlF4+BkSquEvETpxMd8TMRBywG1VfTdSJ9AP9ms8FOU=
Subject key identifier:   67:CD:43:3A:82:F1:E0:D2:1D:DA:25:D2:DB:5D:3C:B4:A4:BA:2D:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA66B7BC13CD3E921A0C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b60684f-2a66-3ff0-9f3c-7699049d4e2b.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:66:b7:bc:13:cd:3e:92:1a:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5d8d0b6c-732b-4a72-a130-52231d2c9648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:94:c6:0a:bc:bf:b2:d1:df:67:7a:c7:66:
                    73:9c:5d:17:0d:c4:be:0a:9f:30:35:5b:ae:aa:dd:
                    a4:ec:9b:36:49:c3:49:91:cc:9f:71:10:bf:9d:7e:
                    cd:02:1d:3e:8a:1c:08:de:ad:fa:f5:d7:59:d5:e7:
                    b4:61:b0:21:81:8d:ee:57:f0:0f:7c:67:c2:85:11:
                    14:36:81:50:4d:9e:47:2c:f7:4a:8d:21:00:3b:a0:
                    a3:d8:8f:e5:f9:b5:be:a0:16:25:70:11:f9:2d:b4:
                    a7:4b:ba:7c:b2:13:87:a2:a4:78:ed:c0:d1:f4:3d:
                    b1:59:22:fd:9e:c3:e1:e9:b2:3c:9d:30:ea:73:4e:
                    71:03:c1:ac:a0:10:99:de:dc:f8:97:7e:e2:d4:84:
                    bd:b6:42:f4:f9:68:78:21:75:e8:68:98:f0:a3:7a:
                    ab:8b:47:8a:db:3f:ca:e2:dd:20:d8:fe:29:0f:a1:
                    84:6d:4a:e9:c7:0d:36:7a:37:f3:ec:eb:17:32:23:
                    78:29:65:a2:8d:6e:20:88:43:3d:24:d4:04:11:63:
                    44:4f:a1:bf:67:8b:01:7c:1b:02:e0:b8:c7:3e:bc:
                    65:b0:a6:b9:96:82:dd:7a:b4:cb:78:a4:7e:e6:74:
                    29:97:a0:9e:ad:db:ee:58:de:d3:8d:90:e4:79:85:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CD:43:3A:82:F1:E0:D2:1D:DA:25:D2:DB:5D:3C:B4:A4:BA:2D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b60684f-2a66-3ff0-9f3c-7699049d4e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:2e:cc:08:6c:17:02:9d:4d:45:49:40:60:cc:b9:8d:5d:9f:
         47:d2:88:76:89:0a:24:a7:cd:6b:35:32:82:dc:ce:a2:bf:fb:
         a1:3e:f6:2f:e6:ee:c8:2c:c4:44:66:4d:69:7c:6e:f8:1d:ce:
         74:4a:c2:9e:51:6a:39:3d:bf:9a:da:49:bb:40:24:15:7d:51:
         a4:dd:5e:e3:eb:e3:56:88:56:ae:95:cc:bf:c5:b2:6c:bd:83:
         47:3a:b8:66:b3:a5:fd:04:7f:93:67:14:c7:fd:2c:22:56:fb:
         18:7c:ae:28:78:15:1f:52:87:5e:40:86:57:88:b0:d8:6a:d0:
         df:17:f8:a7:1b:63:d7:fe:f9:dc:ca:d8:7e:1d:da:0b:e4:4a:
         ad:d4:2b:b6:18:f6:0c:4b:14:2b:18:71:bb:d5:69:ac:43:89:
         9b:63:66:f4:9c:2e:9b:b3:10:4a:9e:12:85:33:4a:65:8f:a6:
         c0:3c:6f:cf:a4:b3:77:ad:4b:f9:62:eb:69:45:3b:95:0b:8f:
         e3:82:4d:66:09:f3:0a:2a:42:0a:36:77:63:b2:61:ce:6e:a5:
         19:b7:d7:27:d6:29:9b:21:64:4d:fd:12:d1:92:1f:fa:c4:de:
         a7:8c:b1:38:cb:07:19:12:9f:5d:54:2d:6b:70:20:f3:37:0d:
         d2:f5:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:30 2025 by rpki-client