Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76e6db74-6896-3f9a-b789-885b94ab241d.roa
File:                     76e6db74-6896-3f9a-b789-885b94ab241d.roa (raw, json)
Hash identifier:          6BHFHPUPnw7ohQZJDykhg3Z0mMmjFoLpCm0ZaYpiGX0=
Subject key identifier:   CF:8E:68:9D:12:7E:F8:A4:E5:EF:05:61:CB:42:00:01:FB:22:58:62
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAF00D29DE8E213831B700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76e6db74-6896-3f9a-b789-885b94ab241d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:f0:0d:29:de:8e:21:38:31:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5f5545da-d253-4a45-b639-f49d8f1c32af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:c9:58:2f:d9:db:31:26:a2:8a:47:60:97:
                    56:03:69:6b:5c:d8:11:ef:53:e9:b4:d3:8c:36:82:
                    48:fb:14:ce:a5:af:79:99:03:6f:4f:68:b7:12:2a:
                    de:e1:97:35:87:f0:88:26:bd:ef:af:87:b4:24:98:
                    f0:50:35:cb:2e:fc:15:00:91:3a:92:7f:c2:ce:c8:
                    fe:ce:77:50:9f:8e:d8:57:c4:df:64:a2:55:10:60:
                    e5:f4:09:56:ed:e7:f7:c2:b2:d1:5a:87:89:04:45:
                    53:7d:02:ee:5b:5e:56:e8:81:93:60:81:8b:a5:9a:
                    9e:33:c8:b9:8d:e5:ae:8e:f0:ec:0e:6b:86:66:1a:
                    b4:6f:b9:17:d2:9e:c4:b1:57:3a:94:ef:20:61:81:
                    c1:fb:09:1b:fc:03:1a:f1:69:08:42:0f:ee:33:cf:
                    de:ca:43:b8:b0:55:a4:69:bd:cb:36:f8:1b:c7:94:
                    37:24:b7:f0:2b:8a:44:65:28:b7:f2:6c:90:30:4a:
                    65:81:ff:d3:ae:1b:5b:69:e4:06:fc:ca:77:f7:c6:
                    c7:3e:f1:df:c9:a0:a9:07:42:e3:bb:2f:81:59:fd:
                    b4:d5:a4:da:af:1e:8e:44:9b:84:fb:2c:72:0e:ca:
                    de:c3:93:48:ca:dc:d9:55:84:1f:0d:22:9c:92:e4:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:68:9D:12:7E:F8:A4:E5:EF:05:61:CB:42:00:01:FB:22:58:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76e6db74-6896-3f9a-b789-885b94ab241d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:4c:3b:e9:12:33:8d:f1:4a:2c:cb:60:4b:51:8a:47:59:
         38:6b:30:d6:e1:ca:af:b8:2c:2d:46:db:7f:fb:6e:81:b3:0b:
         f2:0e:a0:ef:52:a2:a8:be:cd:7a:7d:87:32:48:c5:53:0c:9d:
         34:2b:27:80:ae:17:0d:a2:47:e3:93:63:84:5a:c7:35:a2:e6:
         b7:f4:2e:ef:0d:18:59:6c:2c:f7:db:7f:60:ef:22:ac:4f:3e:
         24:7e:8c:1b:32:ba:1f:dc:38:5a:a3:e5:a8:eb:fd:21:9d:38:
         94:d3:41:89:ff:41:d7:81:bf:b1:71:03:56:99:35:fe:31:08:
         35:7d:09:92:7e:d6:fd:06:d4:ec:71:75:94:82:c1:0f:37:cd:
         4f:36:59:9d:a9:15:ca:7f:90:77:b0:c8:f5:f9:9f:73:80:8c:
         9b:e7:fe:2c:1c:2c:2e:33:07:54:c3:f5:1b:bb:4a:42:68:80:
         f8:36:c3:e8:ef:79:c1:d0:9a:da:2a:95:0d:15:fe:13:4b:90:
         80:2f:91:2f:9b:2b:d3:ed:a0:c7:39:e6:bb:52:73:ca:4f:d6:
         59:e9:68:d7:91:a8:1b:b6:b3:ba:60:f5:f6:42:bc:3f:43:8a:
         4a:2c:7b:1e:db:41:fd:da:90:ee:05:04:e9:bd:2d:d8:95:ee:
         ee:87:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:11:09 2025 by rpki-client