Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23afc144-63a7-3909-956e-b2f421c1fd14.roa
File:                     23afc144-63a7-3909-956e-b2f421c1fd14.roa (raw, json)
Hash identifier:          Y80SnncFZHzmZhOsYQofjKgAR8E6CwNr8hPsRQ2tJTE=
Subject key identifier:   BD:D3:9A:27:E9:52:61:7E:95:69:5D:25:7B:CE:38:24:1C:9B:8B:3B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAEFFDFFBA3597CEC75580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23afc144-63a7-3909-956e-b2f421c1fd14.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ef:fd:ff:ba:35:97:ce:c7:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d1c5225f-1fbb-4d34-9755-f7818be97641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bb:57:df:68:f1:4e:08:e6:b2:f9:b3:1b:a9:
                    f9:3b:18:9c:e4:e8:da:b5:c7:3a:b6:c9:db:8e:98:
                    2a:bc:1d:50:c8:de:19:a4:ec:ee:cd:94:30:fd:f9:
                    9d:a7:e0:a9:03:fd:0d:67:ea:f5:f7:84:04:2d:71:
                    76:34:3b:dd:8e:10:6d:1a:45:c8:d0:c2:6c:26:ba:
                    c2:b9:e5:66:a5:4f:80:30:8e:90:5b:b8:58:e6:96:
                    f7:45:29:b8:98:8d:97:c9:e3:81:bf:d4:bf:ac:79:
                    40:04:5d:dc:4f:1d:b3:08:91:59:06:f7:6b:8c:89:
                    fc:8a:6d:a2:7c:df:70:a6:12:e1:22:86:51:d1:ca:
                    ce:73:63:f8:18:9e:1f:c9:9f:c1:05:c9:49:16:e4:
                    b2:86:27:ef:69:62:ab:42:3b:6d:f8:af:b1:5d:c4:
                    88:5c:d6:94:0d:75:3b:e3:95:c0:2c:96:7e:4d:4b:
                    f2:9a:a8:fd:e9:41:dd:47:86:37:0f:73:ce:cf:52:
                    24:dd:3e:f9:d5:57:3a:1c:93:0b:2b:87:cf:44:c7:
                    28:b1:ef:fd:f6:90:75:da:c2:c5:3f:81:1c:26:08:
                    f3:6f:7d:04:46:ce:59:5a:6c:aa:06:9f:16:52:65:
                    6a:64:21:b7:c1:01:bf:37:f7:df:3e:5e:c6:75:f3:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D3:9A:27:E9:52:61:7E:95:69:5D:25:7B:CE:38:24:1C:9B:8B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23afc144-63a7-3909-956e-b2f421c1fd14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:f3:86:1f:e7:6d:da:dc:9b:66:18:99:14:10:e9:13:a4:ca:
         ad:3b:0e:b0:ac:7c:6e:7e:51:37:0e:87:ba:4b:52:28:15:2f:
         69:c8:ba:83:e0:6f:0a:6f:c1:27:be:37:55:e4:57:45:aa:02:
         b0:fc:9c:69:3c:9c:7f:8b:b3:a4:5f:9c:c9:75:a6:18:53:7c:
         70:5e:90:e4:f6:ac:2c:e2:54:eb:27:ed:97:57:11:cf:47:8c:
         b1:6e:49:e8:d3:28:79:62:73:e5:e1:8b:90:34:05:3f:59:b3:
         49:13:00:9f:8e:b6:ad:39:4b:ea:7e:28:2e:6f:52:7a:8a:6a:
         0f:e2:ec:4f:f9:75:bb:c6:bd:87:28:da:d2:56:90:71:4a:7f:
         2a:b0:a8:01:d4:d6:51:2d:ef:34:94:ee:81:d4:08:44:2e:be:
         ea:61:ba:23:5c:a4:7f:dc:75:8f:e6:a3:a4:14:14:c9:8a:68:
         7e:e4:5c:0e:66:7b:e4:29:f2:a0:33:36:b7:93:06:1b:76:fc:
         25:bc:69:fa:30:c4:66:98:58:59:c2:01:c2:f1:20:ca:85:c3:
         6a:29:86:9c:55:6d:3a:7c:46:db:3a:12:fa:a6:79:52:f8:6b:
         6b:7a:11:7a:7b:de:1b:81:ae:cd:aa:02:e2:99:86:3c:60:88:
         c8:2f:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:11:39 2025 by rpki-client