Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d4a4b3-d151-34bd-b814-bbe6e5882309.roa
File:                     38d4a4b3-d151-34bd-b814-bbe6e5882309.roa (raw, json)
Hash identifier:          ci81TuBP3AJjK4khMxvD8AMcjMF/531mF8LfPPnGLBw=
Subject key identifier:   FC:F0:A4:91:EC:C7:A1:D7:3B:36:4D:32:D0:2A:C6:8F:CC:98:48:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB1946C29EA3EA794C0980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d4a4b3-d151-34bd-b814-bbe6e5882309.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.107.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:19:46:c2:9e:a3:ea:79:4c:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1ec799a4-3873-4cfc-aaa4-b0823c1b0dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:c9:a8:9b:a7:53:3d:2f:c6:0b:bc:a2:54:
                    d8:72:80:7a:ca:d4:87:af:68:b7:46:64:8c:dc:c6:
                    d5:4d:a3:c0:e4:58:81:21:a0:97:56:5e:2a:4f:2a:
                    86:ec:48:cf:84:ee:01:d2:f4:93:92:26:8e:be:62:
                    a0:41:6c:0d:de:e8:44:d7:6f:a5:ab:43:ce:a2:ad:
                    97:97:0e:54:87:e1:66:9b:5c:73:38:2f:73:c4:7d:
                    72:c5:69:af:c0:80:a4:c0:28:42:59:b1:83:95:5b:
                    18:94:7d:00:72:8a:f2:32:53:98:40:16:12:d1:8f:
                    a8:0a:de:0e:ed:f8:c4:8c:64:47:19:c7:c7:41:31:
                    98:be:51:8a:fa:d4:c0:98:33:49:8a:7a:59:76:6b:
                    d9:b1:e1:46:27:c5:4e:9a:1b:15:7e:72:85:ef:a6:
                    0a:f9:96:31:4d:1f:df:3d:e0:88:fb:06:33:ca:54:
                    b9:70:8a:3a:a4:de:05:22:8b:64:fb:d3:c3:27:f4:
                    e9:69:85:3a:63:da:d1:60:b7:98:f0:43:48:23:f2:
                    97:2b:49:64:b7:b4:07:17:22:c0:a2:b8:f1:7d:58:
                    3c:ed:c6:6b:27:3f:25:45:35:2d:ed:52:42:69:0c:
                    93:de:aa:03:a6:e7:43:b1:9f:4a:d0:ac:09:54:d9:
                    02:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F0:A4:91:EC:C7:A1:D7:3B:36:4D:32:D0:2A:C6:8F:CC:98:48:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d4a4b3-d151-34bd-b814-bbe6e5882309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f2:8a:8b:6d:32:96:32:e2:02:26:5f:b8:7e:38:18:09:a1:
         f2:92:d8:6f:54:56:3d:78:17:4d:d7:ab:1d:89:1f:fd:a8:9b:
         42:02:c5:e7:c8:57:dc:be:2f:9c:79:fb:da:d6:2e:55:ec:48:
         ca:7a:0f:24:0d:53:10:12:5f:70:47:69:33:f1:e1:71:93:5d:
         df:4e:96:4c:72:4c:fd:e1:47:24:45:94:0d:ac:dc:27:ac:97:
         59:cb:1a:2a:46:fb:64:05:2b:90:87:81:7c:3d:d4:46:0d:9f:
         31:c9:7e:6f:e6:53:09:6a:49:82:75:64:6a:cb:e9:1e:9a:d3:
         ab:96:a2:24:6c:1b:1d:d5:06:7c:4b:ec:3e:11:2a:4c:a5:90:
         1e:16:ac:e6:fe:3a:38:43:8b:b1:f3:c0:d3:d9:4b:cc:f7:79:
         dd:57:75:12:54:d2:87:d0:57:94:c3:16:f9:86:c4:df:2f:d6:
         d5:14:e4:6c:f5:a3:d7:dd:1e:7d:fa:a0:13:e2:21:ab:68:2a:
         68:05:d5:25:b6:e4:89:a7:0d:27:0f:40:58:db:12:03:6d:a0:
         86:ba:7b:5e:58:b1:15:b6:83:a3:6f:3d:e6:c6:55:f1:91:94:
         c6:fa:57:d8:fa:0d:7c:7d:8e:1b:bc:44:69:7b:ff:6b:99:b5:
         c9:d8:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:17:55 2025 by rpki-client