Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa
File:                     449091b6-bc68-39cb-9f21-212909ed0619.roa (raw, json)
Hash identifier:          izemlYVuFx75kjJH16J0FMnq1LMtL7f6cqqv8eeNj2A=
Subject key identifier:   C0:48:97:DA:EB:EC:AC:A6:93:88:D9:83:00:37:F3:9C:C4:23:5D:FD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAD9E9802115428B5B5E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     16491
IP address blocks:        75.104.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d9:e9:80:21:15:42:8b:5b:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=23c8c7ff-089d-4428-93be-c5a3a4783072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:4d:30:e2:d5:e9:31:af:53:81:6b:98:a6:
                    b5:43:59:62:4d:f5:97:e2:5b:cf:d7:c9:3d:a2:90:
                    4c:f3:40:e0:79:c2:6b:d0:70:f1:5a:d7:34:f9:4a:
                    ab:16:3a:dc:01:1d:fb:93:c2:bc:d6:2c:85:2d:84:
                    79:fa:97:f3:82:2e:07:e5:a8:cd:38:d9:c9:85:12:
                    31:6e:a0:f1:2e:47:ed:46:cd:e7:df:26:ee:b2:eb:
                    81:82:6e:87:19:5a:2a:ab:52:eb:eb:16:de:fb:7e:
                    af:ab:a1:dc:d4:4b:61:09:41:02:c2:c6:9c:67:e6:
                    29:a4:d8:5c:ee:bb:f4:f5:7a:33:4f:b6:eb:5e:40:
                    90:ae:cb:56:2b:65:63:07:96:66:a9:a0:f2:a5:9d:
                    b3:23:87:74:4e:12:d2:a4:6f:ec:68:6a:5d:c9:de:
                    07:89:83:0e:80:00:23:7e:06:58:da:ac:8a:06:ac:
                    d4:27:d2:4f:56:fc:a5:c5:df:78:1e:69:11:e8:05:
                    35:71:a2:b7:26:a1:24:fc:b6:3d:88:ac:ed:d4:cf:
                    21:4d:6b:51:24:68:de:eb:6d:92:55:3b:d1:e0:ca:
                    73:b9:23:a2:34:83:53:39:f9:63:81:e5:d9:85:68:
                    3a:99:0c:34:36:f0:16:17:eb:8d:07:ef:99:cd:68:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:48:97:DA:EB:EC:AC:A6:93:88:D9:83:00:37:F3:9C:C4:23:5D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:2d:07:2d:5f:8c:a8:60:81:4b:f0:98:ec:ee:3f:6c:e8:
         78:e3:b4:3f:24:e8:32:24:ff:3e:65:51:e2:2b:db:6b:c6:49:
         79:ff:cd:04:11:93:0f:40:50:fd:68:51:c2:f5:6a:b0:1b:8a:
         0b:c3:7b:d6:d0:e7:4a:be:c3:94:13:cb:84:87:cf:44:b7:88:
         b5:57:07:2a:81:fb:a3:59:d7:2e:2f:9e:bc:8b:e3:c5:3e:86:
         4b:14:44:9d:a8:f6:76:94:14:e2:fd:13:d6:3a:ca:1f:ff:76:
         62:00:d2:f4:3f:49:df:14:65:86:fd:1f:75:91:b1:10:4b:1d:
         dd:52:eb:ed:fa:8d:50:15:5f:77:ce:fd:92:a2:75:67:57:fb:
         74:3f:79:f2:7b:5a:96:90:31:e9:41:ba:0b:89:37:b7:a5:bb:
         d3:91:3f:d9:4f:89:87:6f:72:ac:eb:91:33:a9:b1:8b:d0:1c:
         b4:01:77:7d:e7:0e:59:a8:ef:87:3e:3d:cf:ad:0a:27:80:82:
         ed:18:5f:03:a7:03:33:e8:6b:39:7b:15:f5:79:7e:03:49:fd:
         90:76:b1:5d:9c:77:cd:bd:6b:25:41:c2:1a:74:b3:64:12:a9:
         64:c7:c6:36:5d:10:e5:e8:03:7b:c8:fa:4f:98:1b:bf:40:4d:
         cd:ca:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:09:18 2025 by rpki-client