Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d2e352-57a3-3fbc-9a7d-102383a7012d.roa
File:                     38d2e352-57a3-3fbc-9a7d-102383a7012d.roa (raw, json)
Hash identifier:          M6s0fz6v/YCC//Hq8pbdqz6p00Z83JeYubqBUXpLmgs=
Subject key identifier:   76:CD:CD:E3:6F:3E:D4:95:2F:6A:EF:6B:23:41:57:49:32:E3:07:63
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA72F7CA3D811B2395BDC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d2e352-57a3-3fbc-9a7d-102383a7012d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:72:f7:ca:3d:81:1b:23:95:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=e1a030cd-ca5e-4407-ba72-8e12093a9dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:de:89:6a:f0:32:c7:10:09:9e:cd:79:a4:
                    c7:29:60:c4:4c:87:d4:6d:27:3e:54:ed:ad:c9:03:
                    d2:aa:c6:d5:d5:12:c8:d5:ef:80:95:43:88:cb:b8:
                    4f:25:09:98:2f:e6:68:50:aa:38:c4:a2:0c:d8:1f:
                    e3:b7:62:18:9f:30:09:e1:d5:44:1d:53:48:19:0b:
                    d5:7e:8e:4a:6e:13:1e:d6:68:b3:81:d2:72:bf:12:
                    a6:a0:bd:9f:35:14:ce:08:a7:c8:bd:6e:41:fe:87:
                    28:2c:05:10:c1:b1:f8:83:eb:e4:cd:65:6a:aa:ad:
                    bb:d7:49:78:54:15:d6:82:2e:bb:1f:fc:ea:fd:22:
                    30:e5:37:d4:f1:63:ed:f1:b8:e2:72:03:e1:a6:ed:
                    48:7f:1b:c1:ca:53:77:0b:b2:49:fa:29:71:75:6d:
                    91:be:8f:59:e6:47:0c:1e:2a:ad:bf:79:5c:3e:53:
                    2f:33:8f:e7:e9:72:0d:56:eb:c4:41:32:b3:30:6c:
                    44:5d:12:4b:8f:18:02:d9:45:bb:14:7b:85:3f:e8:
                    ae:ab:11:ad:1e:2d:1f:7f:49:be:a7:05:ad:2f:19:
                    b4:39:0f:4a:fb:96:46:7f:40:ff:a8:a4:c0:85:fd:
                    2f:17:b2:90:64:6e:b1:16:01:a7:8f:ae:99:55:15:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:CD:E3:6F:3E:D4:95:2F:6A:EF:6B:23:41:57:49:32:E3:07:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d2e352-57a3-3fbc-9a7d-102383a7012d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:20:da:3e:9f:b1:9a:99:53:73:01:58:d6:78:79:cc:09:3f:
         dc:ab:6a:82:ea:24:64:26:ae:d8:38:ca:11:99:31:27:d0:04:
         66:25:24:23:76:fd:2b:ee:60:b6:ee:26:b9:6a:7d:3d:35:55:
         92:79:e7:45:8d:c3:e5:2a:a4:b4:ce:b4:52:f1:c7:d9:1c:cc:
         4c:b9:75:e0:73:4f:8f:b9:29:3a:c8:9b:e2:ef:b6:24:d1:1a:
         c0:53:f2:a1:74:e6:35:b3:b2:b7:6b:e8:dd:47:96:7a:79:b3:
         3f:54:29:16:d4:f8:80:5c:ff:c9:2c:f0:5a:14:85:f7:01:37:
         21:d9:f7:5e:48:c9:cb:0f:c8:42:20:a7:6b:5e:bd:76:44:df:
         6d:86:15:c4:1c:8d:35:34:55:09:5a:c6:48:10:04:4d:8d:e3:
         52:57:45:93:b1:97:80:86:e3:6d:93:55:7a:2d:4d:87:ba:73:
         c5:b8:37:21:0f:82:95:dc:7c:18:41:c7:4b:82:6b:96:5c:0b:
         74:61:88:f5:04:93:2b:1d:80:3a:06:f0:4f:12:7c:c1:95:5a:
         99:e5:5a:2f:ca:26:8d:2a:e5:50:45:1d:c8:41:d1:66:a1:e1:
         81:76:33:a5:b7:fc:de:82:31:d6:9b:6b:c2:5c:a1:40:3a:82:
         d6:29:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:23:35 2025 by rpki-client