Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aeb7309-ceb3-3291-b62a-4af56f434061.roa
File:                     6aeb7309-ceb3-3291-b62a-4af56f434061.roa (raw, json)
Hash identifier:          QX7X9dvdgjF6IAEFPG26JDDpAo6O10RFuJtXNIue1JA=
Subject key identifier:   89:E6:D1:EB:D8:19:A5:D6:2A:0F:A5:9A:84:0E:5C:95:D7:04:20:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA726AD69DA60EF055E740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aeb7309-ceb3-3291-b62a-4af56f434061.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:72:6a:d6:9d:a6:0e:f0:55:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=3dba904a-c76f-4c4f-a672-ccdff080ab19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:15:41:a9:43:a0:e1:72:72:76:b5:f7:8c:
                    e5:a8:de:27:41:d9:9a:b2:f1:30:32:80:98:77:0c:
                    00:ac:c6:41:1e:7c:90:eb:c2:6b:cf:3a:63:c8:ab:
                    24:d6:fb:83:a2:de:a1:29:56:d1:78:45:a2:c7:08:
                    d6:62:5a:90:1b:77:36:23:16:e1:59:df:ed:a6:af:
                    66:bd:0e:43:88:34:3f:39:d7:8f:b2:ff:b6:d0:8d:
                    68:c7:7e:bf:7f:60:83:14:6d:80:df:80:a4:36:a6:
                    ec:09:77:aa:eb:86:2d:9d:1b:79:b4:13:33:71:f5:
                    f9:6e:13:5b:1b:00:4d:e3:0b:1c:af:df:b2:dd:fe:
                    59:6d:c9:da:93:0f:d6:12:b2:3b:c2:5f:b2:4a:19:
                    ff:54:d9:ba:24:af:4b:09:76:73:7b:94:58:25:b2:
                    87:e9:34:13:dd:dd:32:6f:bd:32:8b:f4:ea:67:86:
                    a0:8e:dd:16:23:68:6a:2b:d4:dc:96:04:d4:78:7c:
                    75:bb:36:d2:c2:44:da:9e:cc:5f:24:62:4f:1e:04:
                    9b:af:3d:45:65:e8:41:0c:e4:d5:66:8c:55:d6:ea:
                    71:68:36:ca:68:c3:22:48:e9:e1:18:96:1b:02:65:
                    8d:91:59:71:f2:e5:2c:3d:80:f4:a4:cb:f3:ae:cf:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E6:D1:EB:D8:19:A5:D6:2A:0F:A5:9A:84:0E:5C:95:D7:04:20:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aeb7309-ceb3-3291-b62a-4af56f434061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:18:8d:78:7f:88:89:6b:4c:77:b7:c4:62:2f:32:d0:d7:b6:
         cb:1d:f1:7d:f1:24:bd:78:43:7d:81:69:99:66:cc:9a:77:7a:
         28:12:b8:2c:7e:19:10:24:6b:11:db:81:c5:cd:fa:ce:27:67:
         61:73:53:dd:53:09:e6:28:b4:ab:d6:4d:7a:df:b6:02:c9:be:
         07:65:b0:92:af:24:7f:fb:9e:4a:7d:36:36:4c:24:d6:23:00:
         4d:b2:67:6d:11:14:88:e6:00:46:48:80:aa:8e:0a:c8:47:49:
         0e:a1:f2:5b:af:fc:1b:f8:b0:2f:ce:ef:02:76:01:96:a8:77:
         01:03:09:1e:b2:84:a2:29:31:8b:37:f4:5f:1f:2f:a2:74:05:
         3f:a5:dc:ec:a6:82:49:3f:2f:6c:3f:26:df:4c:e4:50:d7:b9:
         ee:c9:d1:7e:76:0a:99:04:d2:db:41:8d:de:b7:33:7b:40:2c:
         da:7b:dd:5d:cf:bf:d1:d5:17:1a:37:f2:60:ee:0c:f8:52:84:
         17:5e:c5:20:29:b1:a3:2b:d3:e3:0e:56:02:eb:77:e8:fa:7d:
         57:36:9b:e6:0f:13:51:c9:95:48:6e:70:4b:d8:f3:3d:c5:57:
         63:19:2d:81:c5:53:59:da:97:ed:6a:99:9a:83:31:9e:32:9f:
         c2:15:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:26 2025 by rpki-client