Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c030e90-723e-344a-9e18-83fd28ecabc8.roa
File:                     4c030e90-723e-344a-9e18-83fd28ecabc8.roa (raw, json)
Hash identifier:          kVHq+LBtCLcL1vRPSFHHYxkLkj344eir/0GHh6msHq8=
Subject key identifier:   0B:C4:DD:47:C2:19:D9:7A:8E:B3:4C:D6:48:51:A6:25:B2:3B:46:49
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB172EAA58973C8A7CF200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c030e90-723e-344a-9e18-83fd28ecabc8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.107.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:17:2e:aa:58:97:3c:8a:7c:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=cd66f04a-3253-487d-9376-a65d9c93ff5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:c1:9d:0a:a3:e5:86:a0:75:30:c4:51:e4:
                    56:2c:ea:07:02:74:21:17:3c:f5:2e:15:f9:31:c1:
                    98:59:21:cd:ee:7b:ba:7c:b9:6b:04:96:d3:23:e7:
                    0b:58:d4:77:c1:97:37:d9:2e:da:a0:56:d1:e5:88:
                    fb:4d:a6:1b:aa:dd:ca:a7:81:61:97:45:52:a9:86:
                    c9:06:17:66:d7:5c:11:a3:42:d0:52:e8:ab:37:91:
                    d9:f6:6d:f1:12:e1:27:bd:ae:99:73:05:2a:75:d3:
                    90:82:b8:f3:3e:75:31:99:e5:8c:98:67:a4:f4:72:
                    fe:c6:4c:1c:1a:92:77:33:57:92:85:22:63:72:a0:
                    8f:bc:ad:7e:5a:e8:07:87:a1:bc:40:c9:15:d2:03:
                    b1:8c:cc:12:14:75:db:2a:f0:4c:1e:50:b1:0c:31:
                    88:89:62:16:64:c9:fa:23:a6:03:25:2b:ed:92:a7:
                    5d:bb:83:d2:26:e6:49:0f:8c:03:99:70:ef:2c:06:
                    70:c6:32:8b:56:a7:c4:17:01:a3:c9:bb:65:60:7d:
                    48:85:57:b5:5b:8e:fd:23:b7:b8:80:5d:48:25:af:
                    86:99:eb:bc:9e:54:1b:1d:e4:6b:7a:16:fa:63:9c:
                    29:f8:c1:2c:a5:31:38:ef:1f:0d:9a:e5:72:03:06:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C4:DD:47:C2:19:D9:7A:8E:B3:4C:D6:48:51:A6:25:B2:3B:46:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c030e90-723e-344a-9e18-83fd28ecabc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:de:ea:26:1d:53:b0:e9:49:9c:4f:6d:1e:92:be:46:36:07:
         71:d3:b5:37:c7:a4:f6:79:62:85:f6:07:f7:68:7f:02:89:d2:
         29:c1:92:e0:7d:9a:20:75:82:b7:8f:06:f4:7c:07:60:55:c7:
         d9:dc:5a:e9:e7:47:d8:18:26:13:09:a7:f6:46:bb:34:f3:56:
         b2:26:bf:a0:8c:7b:ef:f1:57:97:59:7a:80:fd:24:e3:97:f4:
         55:20:c7:5e:ec:ab:36:c3:f0:22:5d:1f:f5:65:9b:b2:2f:59:
         d2:a9:4e:e5:c1:25:1e:2a:09:16:cb:53:f0:cb:c1:b2:00:1a:
         f0:5d:f1:8d:09:6b:75:fb:f1:fb:7c:78:75:15:78:68:7b:20:
         51:79:1a:41:cd:52:62:23:b5:5b:f6:63:50:87:eb:dc:e0:e7:
         e2:f7:ff:de:02:6e:25:88:56:e4:c8:fd:36:91:5d:08:ee:1f:
         c4:1a:a3:25:11:eb:de:27:8e:83:85:29:a0:5a:8c:31:40:5f:
         52:48:b6:2d:7f:63:66:37:b9:ae:9b:0c:2e:8b:00:3c:ab:e1:
         9f:90:bb:9f:91:92:b7:bb:3a:8f:fb:10:6f:cb:ee:10:00:7c:
         26:27:3b:dd:ed:82:a0:a5:89:32:91:97:6d:4a:cc:35:cb:d2:
         b3:2c:db:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:34:04 2025 by rpki-client