Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6977bde2-5394-3c27-bf8f-201009ce68ab.roa
File:                     6977bde2-5394-3c27-bf8f-201009ce68ab.roa (raw, json)
Hash identifier:          VxYfPBncdtthVQVEOyAx49dvu3usmwmkXjw/Ys29QC0=
Subject key identifier:   39:1D:07:89:EB:B2:F2:6D:0B:B6:45:A8:51:AF:BA:86:9B:77:96:E5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB1603ED1A43FCD83CD260
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6977bde2-5394-3c27-bf8f-201009ce68ab.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.107.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:16:03:ed:1a:43:fc:d8:3c:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f1beff21-f74d-4fa7-ab6b-e6b3bb89bc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0d:dd:b7:5c:6d:d6:cd:85:ee:15:bc:9f:de:
                    96:3a:6b:a5:56:bc:ac:89:3f:4d:69:ba:08:32:41:
                    b1:89:62:c8:03:cf:ea:b7:7c:e6:19:ff:d2:d9:89:
                    79:cc:94:5a:16:31:b1:25:62:80:9d:7e:5b:69:df:
                    c3:e1:04:9b:8e:7c:50:7f:d3:7a:68:52:fe:d5:5e:
                    df:5a:44:e6:1d:ae:8e:7e:d0:34:e6:57:ea:61:f3:
                    a9:3a:e5:f9:8a:df:19:fc:f2:eb:2c:b9:a1:91:de:
                    33:80:55:43:09:c9:c3:52:07:43:6a:4f:f4:03:3f:
                    9f:ab:c2:25:30:6a:d1:25:f5:c5:86:9b:92:09:43:
                    4a:7c:4d:a2:37:86:a3:9b:2b:37:cd:00:24:4c:e1:
                    e2:cb:13:40:89:dc:91:c8:a1:e1:a3:60:92:5c:5f:
                    1f:1e:d1:d5:c8:42:fc:a9:48:84:c8:1d:40:b7:c2:
                    4d:88:12:ef:49:a4:b7:f1:ae:8c:a1:f6:2b:fb:57:
                    ff:40:af:55:69:db:7d:df:8d:d0:19:76:ce:08:08:
                    78:46:7e:03:89:ac:24:c4:1d:2f:5b:c8:26:f4:dd:
                    df:6f:fc:21:a4:6d:40:4a:05:1a:80:f0:ee:42:97:
                    06:68:c2:cb:0d:1d:83:49:dc:e8:66:51:2b:ef:01:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:07:89:EB:B2:F2:6D:0B:B6:45:A8:51:AF:BA:86:9B:77:96:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6977bde2-5394-3c27-bf8f-201009ce68ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:57:e0:a2:ed:99:ec:cd:7e:26:b5:5b:bc:a9:0c:14:8c:
         16:ed:35:83:d7:f6:26:99:87:1d:73:8b:2a:b1:f4:29:63:f0:
         e2:c5:7a:52:32:21:47:44:7d:5c:14:dc:a5:8d:a1:9a:7c:ba:
         01:6c:80:e3:3f:d8:66:fd:f0:ae:f6:7a:7d:31:bb:72:f8:7c:
         25:32:76:36:3f:87:67:60:aa:25:27:e9:0c:a7:0a:6c:cd:6a:
         78:9c:7c:fe:37:b7:c4:98:59:40:39:5a:9f:84:b4:fd:8a:bc:
         7a:64:8a:5f:61:bd:44:28:27:ed:4b:74:65:5d:7b:60:1f:b5:
         d4:61:ed:ac:4d:72:6a:be:5e:01:53:bc:a5:5b:72:ba:eb:76:
         73:75:f2:b0:42:23:94:ae:6c:d8:8d:26:21:5f:30:27:0d:d5:
         cc:15:16:88:0b:08:2b:9f:90:ab:bf:8e:43:45:50:3f:a2:d8:
         7a:30:05:8f:30:8b:e0:7d:d0:29:28:e1:26:49:77:24:9d:f1:
         8b:fc:d8:5a:3b:4c:cf:2c:12:69:48:67:53:4a:9c:87:52:0a:
         a7:84:24:dd:a3:d6:94:db:09:ca:33:f8:f2:7b:ba:01:7e:4e:
         4b:70:19:d6:88:78:bb:75:65:bd:da:08:39:87:f5:42:ed:6b:
         4a:9b:c1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:33 2025 by rpki-client