Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e0e96ac-98a8-3868-98ee-2d50084bdb7f.roa
File:                     1e0e96ac-98a8-3868-98ee-2d50084bdb7f.roa (raw, json)
Hash identifier:          Tw8Zxgh//5TlcleaALq+N0wNXBJqDWeM8YaGhdEd9JA=
Subject key identifier:   9C:37:26:7C:6C:C9:32:A4:C8:A2:63:0C:B9:91:F3:84:BF:71:90:44
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAF299DE9D7E1736378280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e0e96ac-98a8-3868-98ee-2d50084bdb7f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:f2:99:de:9d:7e:17:36:37:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7d21cb54-1aad-47c3-8c77-4b0fb620f3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:7c:6c:17:0d:e2:d4:53:de:87:b6:bf:1b:
                    25:5f:5e:b2:a6:eb:9e:ae:a7:c4:7e:86:e0:19:bd:
                    26:2c:7f:44:70:c5:ae:40:a8:f1:46:93:f1:44:c7:
                    e3:f3:74:36:71:db:fc:2d:07:38:d2:87:5a:d4:d0:
                    06:53:7e:ca:93:b5:95:6d:36:2e:20:77:ba:e1:24:
                    aa:fa:7d:d8:5a:43:34:6d:da:95:7e:e5:b9:ba:20:
                    f5:61:d7:31:06:bf:75:cf:db:eb:33:92:25:da:df:
                    81:23:68:bd:aa:e8:89:ee:44:67:0c:ff:13:7c:50:
                    81:ee:16:50:82:30:f7:7b:d9:aa:44:d0:0a:4c:e3:
                    2e:02:61:55:b2:19:e9:28:f4:c4:ec:e9:10:3a:b8:
                    9d:d1:53:6d:25:59:00:7c:1e:a7:05:c9:15:ef:e1:
                    27:5b:7c:4a:0d:23:fc:8b:0b:d9:2f:53:9c:bd:9c:
                    f8:cb:6c:1b:53:54:8e:d2:ac:ce:8c:93:da:fd:b1:
                    65:f6:3b:d3:a7:5d:ba:bb:5d:8b:2e:9b:4a:59:18:
                    d4:3c:b2:26:9d:24:38:0f:3f:b3:a3:59:36:cc:94:
                    80:cc:2b:00:b3:98:76:bf:1b:14:8e:e0:27:2f:d4:
                    92:d6:e7:7f:8c:36:d2:d5:53:72:ee:e9:3f:ff:4a:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:37:26:7C:6C:C9:32:A4:C8:A2:63:0C:B9:91:F3:84:BF:71:90:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e0e96ac-98a8-3868-98ee-2d50084bdb7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:68:2c:58:6b:d5:b3:70:a1:fa:f3:a2:f0:c9:52:b4:fa:62:
         ac:76:25:c4:a5:7c:77:8b:f7:a1:b8:5b:22:2f:1a:3e:03:a5:
         b0:e5:09:bb:24:60:0d:a2:59:d1:51:01:9e:43:11:63:24:21:
         2f:ec:bc:ea:39:c4:d9:b6:81:c8:7e:7b:a7:34:a0:9c:73:d2:
         2c:a8:d3:97:ed:74:a0:19:e1:45:36:04:ed:f3:8d:9f:ba:5b:
         6c:41:90:a5:ae:6e:ca:79:46:14:98:af:55:6b:ae:30:b1:49:
         a6:5d:7d:a4:07:69:2b:92:c8:df:1d:5f:8f:f7:33:c3:a1:a1:
         9a:0d:71:bd:0b:e9:39:4f:f8:a1:74:27:44:96:c7:da:9c:6c:
         eb:ee:9f:1e:fa:3e:ab:c4:20:48:8b:eb:df:24:22:23:7e:6d:
         7b:e6:92:83:eb:8d:60:d7:8e:5f:bc:a7:43:7a:36:5a:b9:6f:
         b2:66:78:f6:b0:f6:1f:9a:1a:75:3c:bc:14:c3:e2:12:82:79:
         56:25:04:28:c6:c3:48:54:2d:3e:47:06:e8:4a:1b:dc:06:f7:
         3c:94:67:5d:ce:66:92:3c:46:46:0a:9f:87:12:1c:2f:7d:04:
         28:b5:68:84:f8:83:da:5a:1c:ec:a5:a0:9f:24:ef:34:33:8c:
         fa:df:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:06 2025 by rpki-client