Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d390a2b-afcc-3f42-81e2-3e4166d4194a.roa
File:                     4d390a2b-afcc-3f42-81e2-3e4166d4194a.roa (raw, json)
Hash identifier:          OYVwEknIojO0mJUdbshm/ClX/YFWj2sb+zQ9+3s/JWw=
Subject key identifier:   28:26:8E:61:DA:D3:EC:6B:14:AA:90:9D:70:A9:68:EF:6F:1A:75:4E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7097009A494E999DD180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d390a2b-afcc-3f42-81e2-3e4166d4194a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:70:97:00:9a:49:4e:99:9d:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=411aa0f1-18d1-4d54-bda3-d28c398b9bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:c7:d4:f3:93:94:54:2f:d5:8d:bf:69:b9:
                    e9:73:01:fb:ac:ca:ef:26:e0:10:2f:8f:a7:a7:fc:
                    91:9c:2a:10:ba:d7:a2:5e:56:63:bd:40:c7:e4:ca:
                    78:b1:05:a1:b7:68:42:c5:6b:31:17:be:e7:07:25:
                    c6:8b:66:68:43:2c:9e:77:85:62:d7:db:81:d0:ba:
                    3a:63:87:c9:be:90:a7:f8:60:cc:c3:ee:e5:1a:6a:
                    0d:c8:84:84:9f:29:f1:01:02:49:f0:01:2b:62:f0:
                    11:f0:e5:1b:20:76:33:22:c7:a8:cb:d0:e6:3b:ee:
                    42:40:83:c2:98:26:0b:0e:6a:b1:e3:28:67:ec:e4:
                    c9:d0:6e:4e:38:38:ac:16:9a:09:98:04:5b:94:2b:
                    eb:fe:a9:a3:0e:cf:4e:d6:75:fc:e4:80:8e:f9:09:
                    98:80:f8:d1:5b:59:78:5c:5f:39:bc:10:40:f8:34:
                    ed:15:c1:40:51:42:c7:a5:a5:6b:2f:73:26:d7:69:
                    0e:0b:9e:08:73:67:b2:62:0b:2d:f0:25:a4:ba:0f:
                    64:d1:5c:3a:46:88:a1:36:ac:fb:14:fe:15:4e:fd:
                    df:99:23:39:36:c0:28:0f:ff:7a:72:d5:76:0c:2e:
                    7a:73:1c:ab:72:20:33:5a:b1:f8:0d:bf:6e:64:49:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:26:8E:61:DA:D3:EC:6B:14:AA:90:9D:70:A9:68:EF:6F:1A:75:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d390a2b-afcc-3f42-81e2-3e4166d4194a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:17:f3:ed:3d:eb:4a:d1:a8:ed:a6:ac:fe:2e:b2:ee:b8:1f:
         2e:f1:26:93:74:be:8f:6a:bb:8a:d0:ed:9d:96:8b:6b:b0:43:
         91:d6:9b:ee:2f:91:60:af:a6:85:f2:a7:57:30:d5:d4:21:22:
         92:8e:da:7a:f6:d8:7e:f2:8d:7c:d5:93:f3:43:23:96:7b:04:
         5f:5b:8c:18:4f:58:76:41:12:8f:ae:af:9b:2c:c0:cf:de:f9:
         37:a6:44:70:26:ee:27:d9:09:d2:32:ac:7f:91:f5:bf:35:52:
         25:bd:29:ff:2d:1c:93:08:82:fe:1e:80:3d:ad:f5:ab:bf:62:
         9c:2d:47:b3:ea:1f:58:4c:71:c9:25:8e:23:0d:6c:dd:f1:2f:
         e7:85:b9:dc:e8:13:7a:28:99:1c:48:42:c6:88:e2:b4:34:89:
         a0:04:0c:60:ac:a5:88:cf:e3:c9:90:4c:d4:96:ef:cf:02:5e:
         1e:35:76:1f:d4:a3:92:ab:c7:c2:d6:c4:08:f5:82:42:91:8a:
         5c:14:9d:23:3b:33:b4:6d:0d:4a:8d:8b:a3:d5:b5:b9:67:35:
         e7:90:3f:78:2c:93:18:01:86:24:b5:0e:ee:0a:fb:19:35:da:
         b8:b3:41:d6:92:90:56:17:d4:aa:03:c5:ad:d2:bf:bf:0a:93:
         6a:69:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:25:36 2025 by rpki-client