Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5199a4af-d712-3371-9898-5298213b6497.roa
File:                     5199a4af-d712-3371-9898-5298213b6497.roa (raw, json)
Hash identifier:          SskyhEEFpE7nOJBcETqonqFZW1vMsGfhAiLTrXHL+mk=
Subject key identifier:   E1:C5:50:66:29:E9:D4:4F:31:04:F9:DF:7C:AA:03:B4:25:BC:EB:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAF304A1A8A7E69E69A380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5199a4af-d712-3371-9898-5298213b6497.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:f3:04:a1:a8:a7:e6:9e:69:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=dc0d141b-bcc7-428a-8596-6846acab06cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:98:ea:46:b8:38:1d:a4:a5:bf:87:7e:ce:
                    6c:28:2f:46:df:9c:32:67:a5:c4:02:80:ce:0d:01:
                    f0:34:15:e0:08:5c:2e:55:47:1c:2f:24:21:b6:e6:
                    0d:08:25:55:7f:2d:84:97:c0:ff:f8:4d:f9:d1:e2:
                    5c:d2:6d:a0:31:95:00:5e:4e:a8:a6:60:15:63:2c:
                    e7:5f:73:4b:fb:ab:86:4e:8c:02:33:1a:08:b9:07:
                    a3:34:cd:98:eb:52:54:b5:c7:fb:8c:05:21:ae:bb:
                    27:24:e1:ff:69:b9:e9:0d:e4:80:a5:a5:43:05:72:
                    81:fc:9b:b6:df:78:17:58:4c:c9:09:64:fc:0b:4b:
                    43:1b:6c:12:8b:74:54:76:bd:d6:a6:c5:3c:90:62:
                    4a:3b:86:99:95:b5:f1:2d:c9:06:58:16:32:c1:30:
                    9d:66:9b:b0:07:f3:a9:70:de:8b:40:3c:48:73:8e:
                    7a:9f:9b:71:2c:29:95:ca:6a:dd:f0:95:99:85:04:
                    6d:e0:6f:02:e5:1c:7c:d0:0a:0c:b4:54:ac:c2:d0:
                    81:e7:ea:a6:bb:2d:8b:87:9c:76:db:41:8b:e6:99:
                    6c:e2:0f:d2:c3:22:d5:ac:e6:35:54:91:55:9c:dd:
                    f7:cd:5f:01:da:91:07:47:e5:01:1b:f3:d8:3b:78:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C5:50:66:29:E9:D4:4F:31:04:F9:DF:7C:AA:03:B4:25:BC:EB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5199a4af-d712-3371-9898-5298213b6497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:46:af:81:20:7f:a4:41:d3:5a:10:20:e2:1c:57:b6:ed:cb:
         ba:a5:42:73:6f:d1:cf:51:79:ed:51:b2:db:f2:f4:b4:d3:de:
         31:cd:f3:92:91:64:f0:88:73:6f:b2:e6:c7:88:c7:b5:b8:bd:
         3a:df:e5:c0:2b:62:ca:4f:e7:4f:8e:89:19:70:3e:ef:1b:26:
         aa:a7:fb:9c:f9:da:42:50:9d:b7:22:4d:50:4b:07:49:8b:98:
         63:f3:60:6c:25:a0:df:1c:04:ec:63:0b:92:0c:94:d5:18:8e:
         ee:c8:04:df:8a:36:d0:ad:e5:a7:64:8c:22:70:c0:e0:34:66:
         51:66:c2:a2:b1:ae:50:47:3d:b4:bf:39:53:36:a3:7e:d5:12:
         22:08:5b:20:12:9f:42:55:a4:12:cd:89:4f:07:e5:31:11:15:
         0e:47:26:5a:a8:32:4b:16:05:4d:e2:56:de:4f:92:23:92:95:
         68:de:59:e0:f2:8f:26:b0:6a:c6:1c:d7:4e:2b:56:5b:2b:39:
         ad:6f:8d:7c:d1:cb:d9:95:92:ea:9a:69:93:9b:f0:8b:cd:7e:
         54:10:2a:b9:ef:bf:f4:fe:e6:b0:5a:bd:f6:e2:8c:fd:b3:13:
         47:3e:93:d8:4d:26:97:7d:e4:a3:ee:ba:14:b7:4e:6a:f0:36:
         5c:5d:83:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:30:09 2025 by rpki-client