Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f8fd6a7-dd66-307f-96e7-52e979309bef.roa
File:                     1f8fd6a7-dd66-307f-96e7-52e979309bef.roa (raw, json)
Hash identifier:          10s/Ia1gBWyxCE7OpMKtO1QAxuAx4BmIJVPxj7yJDIg=
Subject key identifier:   64:38:3A:D8:F4:1F:32:44:A5:A2:C0:43:97:22:EC:BF:D8:AD:7F:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB071ECCD4DB07687AC900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f8fd6a7-dd66-307f-96e7-52e979309bef.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:07:1e:cc:d4:db:07:68:7a:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=afbe84fd-58e4-47b8-9c72-a65217c7c7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:20:81:a4:65:95:cc:71:a4:91:68:fd:a8:
                    5a:83:ad:87:97:f0:9b:e6:39:b6:19:1d:41:80:ab:
                    e2:e6:a0:83:62:67:71:bf:1a:88:e7:46:61:ea:6d:
                    c1:b9:2c:76:d7:10:2c:9e:60:c5:b2:6c:d7:b9:73:
                    f4:3b:cf:9d:80:de:66:6d:3d:a0:fd:7f:34:95:b1:
                    36:75:60:e8:2b:a0:ea:04:e0:49:de:c3:ea:ee:a2:
                    d1:5c:04:7f:54:bf:0a:05:19:7a:23:81:59:56:ec:
                    71:c7:71:b3:cf:8a:df:89:81:cb:c8:9a:da:d9:63:
                    cf:77:64:2b:a6:fb:48:80:4c:18:02:b8:5e:d9:fe:
                    57:a1:ea:01:b8:b6:05:6c:1e:5d:c2:d2:b4:58:4a:
                    8f:bb:66:7a:a0:28:11:9e:91:0a:4b:11:75:44:5c:
                    31:5d:40:3e:cd:ba:fb:e1:a3:ac:2c:dc:98:94:47:
                    45:12:e2:81:5b:65:87:02:3d:e1:01:00:31:10:96:
                    fc:e2:64:ae:7c:11:b5:fb:c2:2f:7d:ea:d9:17:e4:
                    b5:4d:30:c8:45:49:06:ff:4b:df:af:c2:63:9f:4f:
                    64:36:e9:6d:96:5e:40:e9:e7:09:d2:14:a5:2a:de:
                    6c:79:fa:4b:21:fc:9d:21:6e:68:8a:ea:d0:c8:ef:
                    54:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:38:3A:D8:F4:1F:32:44:A5:A2:C0:43:97:22:EC:BF:D8:AD:7F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f8fd6a7-dd66-307f-96e7-52e979309bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:8a:0d:0b:7f:51:6d:0a:d7:d3:30:d7:d8:36:36:56:a5:
         2c:98:6a:4f:e8:d1:53:e5:d5:14:05:3c:d1:d6:67:4d:aa:0e:
         7c:1b:29:63:cf:20:14:36:85:f2:9d:8d:1e:d6:8f:5f:e8:46:
         c9:de:f9:7e:84:ec:37:b3:12:6e:e2:38:ce:a8:65:45:c2:95:
         aa:71:b0:91:79:a1:e6:ff:a4:3e:08:fe:6a:ef:cb:eb:44:ac:
         d9:e3:42:0a:a1:0c:ba:0b:6e:77:48:fc:11:c1:fc:d6:03:3b:
         3e:e1:08:91:a0:93:b6:77:f7:a3:e5:83:6b:5c:17:4b:4b:d7:
         51:ba:a2:c1:af:be:e6:7e:e5:d8:35:54:36:d0:ff:4e:05:9c:
         ef:88:8f:f1:23:1b:ec:f1:7f:d3:5a:d7:61:b3:a4:f8:1a:d0:
         ee:27:30:da:c2:f7:54:11:e4:fa:30:95:a8:54:df:33:45:35:
         f9:e6:dd:b2:42:53:1c:57:8b:fe:6e:2f:c8:e6:51:f3:ff:5f:
         32:0c:6c:28:1f:11:54:04:e1:93:88:c1:e6:cf:0c:8a:b1:da:
         04:5a:5b:3f:ee:d1:60:6d:68:38:99:9f:f9:23:41:b7:ca:fd:
         79:8e:bb:e1:69:44:97:ac:40:96:18:21:ae:e4:c9:83:38:f0:
         20:77:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:03:59 2025 by rpki-client