Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30fa6564-67ef-378f-b0af-bca728c74251.roa
File:                     30fa6564-67ef-378f-b0af-bca728c74251.roa (raw, json)
Hash identifier:          +MN3UCk8fPz82A2hgdQdrmpNEuugFhOsWKh2EYpbz2E=
Subject key identifier:   49:39:45:39:C4:B4:77:13:D2:39:9E:23:66:F6:85:45:8C:D5:BE:24
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA77B3F349D909D0689200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30fa6564-67ef-378f-b0af-bca728c74251.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.107.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:77:b3:f3:49:d9:09:d0:68:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=16b22cf8-801d-423f-8dc8-81a199441926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:73:c5:05:89:46:d2:3e:0b:36:ff:0a:59:b5:
                    db:ef:6f:30:46:0c:88:6a:33:76:6a:90:c9:e4:cc:
                    6f:08:76:f7:0f:07:0f:41:08:fc:44:e7:7d:bd:f2:
                    d7:cc:3c:44:89:8e:a4:05:e4:da:62:48:2b:8d:48:
                    e0:c8:d3:4e:e1:1a:25:2b:4b:d5:bb:fa:38:f1:9b:
                    2e:1d:3a:f1:a5:75:c0:2e:e2:22:b7:23:11:bf:5e:
                    6f:9e:85:4c:4c:d3:b7:33:80:61:41:4b:38:fb:3c:
                    77:56:82:fa:5e:66:56:2e:77:e0:4e:c9:d6:4f:cc:
                    a6:d2:31:1c:1b:02:e6:f0:8c:8f:97:0d:9b:15:a2:
                    28:57:48:c1:8a:db:3b:3f:46:2d:09:22:f6:f7:03:
                    ed:78:d9:a2:08:7f:ae:14:f4:12:cb:3e:7d:c3:89:
                    de:45:1f:e8:47:24:cb:74:9f:83:bb:ac:53:3e:1c:
                    b4:ac:bd:9a:e2:0d:75:b3:aa:67:c3:1b:1b:4b:bf:
                    1c:ac:e1:61:75:5b:aa:05:a7:77:a2:45:d7:a8:06:
                    85:e6:ff:40:59:48:62:48:95:53:f1:d7:fb:72:8d:
                    cd:0e:f4:2f:b1:b4:da:c4:85:07:18:5d:2a:97:29:
                    65:9a:90:e1:d0:bd:75:f5:f3:2d:e6:a1:4e:ea:b0:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:39:45:39:C4:B4:77:13:D2:39:9E:23:66:F6:85:45:8C:D5:BE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30fa6564-67ef-378f-b0af-bca728c74251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:56:a4:1d:62:61:e4:4f:e3:e1:0e:a0:2f:1f:78:3e:a6:a9:
         92:a7:ac:3a:b3:c7:9e:67:40:03:70:b7:4c:1d:44:8f:44:16:
         be:30:73:a2:c6:01:37:39:1d:a0:f4:b2:66:04:3d:d4:ad:6b:
         00:09:28:9a:8e:4e:f3:de:b9:ce:ee:89:43:2a:4a:ef:da:39:
         19:a3:3c:01:00:c4:de:dc:46:81:2d:40:8d:a7:5a:03:e1:5a:
         13:b3:5e:ec:f1:f3:0c:a0:37:a6:6c:e7:61:7c:07:c6:55:2b:
         39:d9:52:d9:55:8f:42:b5:49:c1:db:1d:5f:53:35:03:ef:8f:
         e4:bd:33:d4:7a:37:bc:2d:5f:b8:98:97:7e:3f:e9:44:5f:34:
         07:62:e7:4e:97:6d:83:b3:f9:dd:0c:9c:df:46:27:16:4a:1d:
         c2:fd:1c:2e:b1:b0:a7:28:66:85:50:de:a9:a8:19:04:44:bc:
         a6:e1:a1:65:c7:d4:d2:52:82:d4:1b:ba:bb:18:17:be:3e:be:
         dc:f3:28:d7:16:0f:ed:37:9e:54:be:d2:2f:7a:39:55:5e:38:
         8c:c2:fc:ef:2f:00:15:39:d9:0b:de:3d:6e:4b:b2:01:17:c9:
         e6:f3:34:b6:31:48:ee:ac:5b:a3:61:08:7f:9d:03:5f:9c:09:
         ee:64:09:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:38 2025 by rpki-client