Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61b9e36a-0c0f-39c4-a679-3845970fc192.roa
File:                     61b9e36a-0c0f-39c4-a679-3845970fc192.roa (raw, json)
Hash identifier:          fzL4LmR3+Ieh5zS3M7OhTbZ+vFwpKg50wWU+0X/vrrE=
Subject key identifier:   14:E0:32:32:F3:A6:37:B5:C9:1A:41:4A:E0:B2:16:FB:7A:EB:2F:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB1639A06D2D5E53973280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61b9e36a-0c0f-39c4-a679-3845970fc192.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.107.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:16:39:a0:6d:2d:5e:53:97:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=117265f1-d232-4289-ad6f-5fd71537e8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:3c:33:ce:19:49:e5:2e:b0:1a:16:c3:8c:
                    f8:54:90:46:43:30:9a:f1:3c:5d:b5:97:33:f5:56:
                    8d:24:46:d2:72:20:b7:5b:30:b0:2c:6c:e7:bd:d1:
                    06:35:2d:96:c0:c2:d9:23:fb:08:9d:12:cc:73:1d:
                    a7:ea:c4:8f:b1:30:3f:0f:b8:a2:f1:60:cf:08:9a:
                    c1:e5:9d:27:93:6a:a3:79:73:cb:85:8f:92:71:11:
                    6c:9c:82:61:30:a3:2d:54:b5:53:40:a8:d9:0f:36:
                    9c:ba:b7:15:78:c1:34:ce:69:a0:5d:d5:68:e2:2f:
                    87:d8:e4:8b:87:9f:7d:98:b3:18:dd:36:88:a4:91:
                    c5:02:a2:53:fd:b7:8e:a6:a8:4c:e0:31:d0:0c:13:
                    0b:24:2d:29:2b:e7:66:fa:89:c0:f4:66:15:ef:a3:
                    8a:7d:dc:c9:26:8e:89:72:1f:82:dd:49:50:4e:17:
                    e0:f4:88:1e:1d:58:4e:85:51:d8:31:6c:36:de:61:
                    f6:f9:a2:a9:1d:48:de:cd:dd:8b:a1:26:18:40:8a:
                    01:ea:56:e0:5b:61:67:ae:87:b2:29:50:1c:9c:92:
                    52:34:a1:03:ff:e9:6e:ba:2e:d2:db:87:c8:4f:b6:
                    a4:e4:38:df:92:85:ac:aa:03:ad:78:c8:78:10:2a:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E0:32:32:F3:A6:37:B5:C9:1A:41:4A:E0:B2:16:FB:7A:EB:2F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61b9e36a-0c0f-39c4-a679-3845970fc192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7f:0d:2b:40:3f:66:5d:30:3d:43:d3:92:04:4c:c2:f8:81:
         47:bb:dc:2a:96:0f:84:9f:00:e1:ee:a5:6c:90:d4:00:f1:be:
         76:e8:7c:16:9c:80:03:53:32:3d:62:6c:2d:6f:3d:8c:fb:eb:
         0a:b4:e6:06:ec:d8:ec:31:79:24:a1:58:df:cc:f9:e5:8c:41:
         c6:e0:14:06:65:06:59:a3:5a:23:1b:e3:a9:4b:6b:95:0c:32:
         6c:6f:04:55:4a:fa:40:8b:58:19:8a:13:34:05:6d:d7:53:9e:
         02:ac:08:de:f8:0a:dd:ad:f6:98:23:8c:4b:e5:88:27:ad:61:
         d2:eb:fd:13:53:15:ba:d2:81:14:c6:58:05:05:e3:da:75:2b:
         1a:14:69:ac:dd:33:c7:0d:a6:96:ac:45:c0:de:d9:72:76:94:
         dc:13:36:64:95:f4:13:ad:87:7b:08:fa:09:93:a9:56:cb:97:
         0a:89:ae:17:18:32:e7:de:6f:1e:04:1e:0c:e7:ab:57:c6:d0:
         77:b7:0e:a9:66:ba:8b:9e:08:f1:01:fc:3d:b1:78:bf:7a:ca:
         d5:80:84:f4:58:95:b9:57:c5:f4:2e:ea:ba:bf:c2:05:3c:f5:
         3e:d7:97:e9:4d:9b:3f:32:6a:03:a6:a0:10:9c:ec:86:bf:c7:
         a2:b0:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:20 2025 by rpki-client