Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61134406-09b0-3bbf-a395-a29b96d5b74f.roa
File:                     61134406-09b0-3bbf-a395-a29b96d5b74f.roa (raw, json)
Hash identifier:          JqCSz7+sHuTtRGRqdrTjUEp3Gmh9z7vxDr080bkYv0E=
Subject key identifier:   AA:EC:5A:FD:53:EA:DB:70:9E:BC:93:C4:E2:77:81:0D:A4:AA:B5:22
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAF32274229467B3EE5000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61134406-09b0-3bbf-a395-a29b96d5b74f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:f3:22:74:22:94:67:b3:ee:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=93ddd183-88b4-4723-a690-1417683247d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b4:b9:dc:2c:93:78:c9:1d:d5:a6:26:06:f1:
                    39:80:9a:c2:be:8f:a0:de:f0:81:1c:26:b0:a0:01:
                    de:f4:11:6f:23:e0:47:ef:48:d5:54:59:a8:a3:c1:
                    5f:aa:a2:22:4d:f9:c5:be:66:ad:a4:bd:fd:2e:5f:
                    d5:d6:7c:eb:ec:b0:78:66:90:b5:12:dd:c5:e2:76:
                    40:70:0f:01:ea:82:9c:a3:78:2b:10:7c:82:2e:23:
                    c8:77:55:19:f0:68:d0:a4:b2:69:65:89:71:06:89:
                    39:48:14:95:ef:c1:20:a2:8b:5f:9b:ae:19:ee:bd:
                    f6:99:0f:51:f4:69:2c:61:92:42:dc:f4:11:b6:4b:
                    f2:9f:b9:43:ad:b6:1a:a9:b3:02:c8:6d:8f:3c:35:
                    06:b0:4b:72:dc:05:43:c0:92:d3:16:4e:3f:b9:d9:
                    b2:f6:8a:85:e4:31:bc:cd:ae:0d:cb:bd:99:25:3f:
                    63:a8:7b:7b:fd:9c:dc:9e:a9:5a:d0:52:09:0e:51:
                    60:14:21:af:c0:11:92:e2:5c:09:6e:62:f9:5e:94:
                    ad:8b:91:27:db:2c:ed:3c:7d:c4:f2:70:58:35:7e:
                    93:ae:1b:e6:46:1c:3c:49:d9:50:2e:78:bb:02:d4:
                    19:ec:2d:df:ec:76:89:c7:8d:8e:c9:dd:3f:11:66:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EC:5A:FD:53:EA:DB:70:9E:BC:93:C4:E2:77:81:0D:A4:AA:B5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61134406-09b0-3bbf-a395-a29b96d5b74f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:65:82:12:0a:5f:a3:92:2a:20:92:f7:28:df:38:5e:2d:e2:
         91:97:5b:31:2d:38:84:d2:f4:07:a0:ab:1d:de:86:63:08:91:
         00:77:77:75:37:3f:92:12:42:b3:c4:df:fe:02:01:5c:37:23:
         78:54:22:c6:1b:05:d6:b6:63:97:5e:35:4c:e0:c8:a8:1c:c6:
         c8:b1:f3:2f:18:a5:7f:dd:34:df:7c:d7:5d:75:96:27:7a:ce:
         4a:d1:61:bc:11:4b:e0:8b:ef:f9:83:ff:60:bc:10:b7:37:97:
         4a:81:b3:be:a7:18:75:ee:0c:be:67:8b:76:8e:52:32:64:7c:
         8e:1e:5e:e0:78:b2:fe:19:8b:a5:59:3f:57:b9:91:31:35:ec:
         7f:44:9b:db:88:f8:5e:ed:89:ee:89:32:b4:ea:c9:4e:74:3f:
         11:4b:d2:22:b6:dd:d1:02:a8:6d:b8:2b:ca:af:63:a8:97:90:
         e6:6c:be:61:21:0c:b5:ce:1d:70:4a:dd:ac:90:53:09:3b:d0:
         54:cd:11:05:6e:86:e2:43:4b:ee:ba:40:22:c3:e3:3f:22:f8:
         2e:4b:83:43:e0:ec:17:65:e6:c4:b1:c6:24:3e:07:88:72:8f:
         38:1d:22:a4:3b:1c:0c:12:4f:fa:c7:1e:79:71:8b:06:43:d3:
         a2:00:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:22 2025 by rpki-client