Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82177ba4-d969-3f02-b575-2a5b93b6f3a8.roa
File:                     82177ba4-d969-3f02-b575-2a5b93b6f3a8.roa (raw, json)
Hash identifier:          BMC28CPuHRawmMAAkAwy2/Tv3Tc10ufNLjixBF5MNNc=
Subject key identifier:   45:5D:18:37:1C:17:AD:7C:BE:9D:21:FC:16:E9:F4:E8:C6:72:CF:88
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7072B3967F6912A87880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82177ba4-d969-3f02-b575-2a5b93b6f3a8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:70:72:b3:96:7f:69:12:a8:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=906f9613-31b5-4888-b8a7-399b547eeb26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:28:80:86:fa:63:c2:25:5c:2b:a0:10:cc:d5:
                    17:9c:b4:f3:66:4a:f5:14:45:5c:14:6c:ad:e5:fe:
                    8b:1c:d8:9e:e8:5a:38:4d:a6:d0:93:7e:2b:10:79:
                    46:f7:e9:4d:25:56:fb:0c:53:13:c6:21:b4:51:8e:
                    69:da:81:c3:ce:1b:92:b4:5c:12:77:6e:07:8b:f0:
                    71:82:8e:8e:7b:7a:a5:e9:27:9a:fe:83:c8:2f:56:
                    3d:12:42:14:94:51:ee:2b:1b:ba:a7:b5:bf:5e:b4:
                    7e:10:52:1c:2a:ad:a6:ec:41:3a:f9:54:de:71:07:
                    25:cc:f0:18:bf:99:5e:fe:d7:33:3c:98:8e:60:37:
                    82:0c:3e:e4:b7:69:a2:a6:18:80:53:11:b2:33:3d:
                    20:62:05:47:41:8e:1c:0b:de:f5:4c:73:37:42:51:
                    3d:15:b0:1f:1d:05:70:30:d7:40:7e:85:29:c6:e0:
                    ca:4a:67:e4:2a:4f:cc:10:66:7e:e2:2e:56:9e:b7:
                    51:1f:08:9d:e5:28:50:75:1f:e5:17:d7:f3:34:82:
                    10:4b:d4:94:de:63:a0:48:5b:a2:67:74:b1:b8:ca:
                    1a:5e:7d:da:fc:24:f5:d5:1c:0d:d2:af:ab:ff:dd:
                    d4:4e:66:b3:17:38:0d:86:b9:d1:10:0c:d3:ed:e4:
                    0b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5D:18:37:1C:17:AD:7C:BE:9D:21:FC:16:E9:F4:E8:C6:72:CF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82177ba4-d969-3f02-b575-2a5b93b6f3a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:bf:7c:31:14:38:90:a1:e6:da:b9:cb:81:59:c6:57:97:
         9e:a2:5f:af:a3:c9:74:d9:e2:5c:56:e6:cf:3e:12:9a:53:19:
         9a:54:83:1a:e4:49:0a:f7:7e:74:a9:16:8e:07:67:af:90:cd:
         48:f3:be:6a:9f:9c:74:22:13:ae:a1:17:49:f6:40:5a:e5:0e:
         c1:8f:1c:58:b7:49:4d:48:7d:1a:a5:ca:cd:46:8b:de:67:a7:
         3f:d2:33:9e:f2:dd:f4:ad:55:6c:ec:32:bd:17:50:28:c0:c0:
         69:a1:c0:22:fc:91:dc:e8:85:a2:3d:5c:d7:6e:39:d3:f6:08:
         e4:36:58:eb:6a:f8:c7:8b:5b:dc:f8:a9:cc:99:7a:20:e2:f3:
         c9:94:39:52:78:a4:d2:ea:df:fb:64:c2:a2:19:39:4c:cd:96:
         cc:38:15:a8:c9:67:50:1d:ef:3b:28:9b:d7:4a:ac:bf:77:08:
         6c:59:5c:8a:7b:fc:f4:ba:51:dd:9c:7f:a8:9d:60:30:ca:87:
         eb:ee:95:a8:76:59:7b:d3:d4:5e:be:aa:49:e3:7c:4f:31:f0:
         2a:0f:30:2d:c9:7d:d3:31:c5:a6:77:7d:ca:72:44:ec:24:11:
         a7:ad:89:0f:06:6a:3d:5d:5d:29:f5:82:ec:9f:34:de:f4:90:
         c5:21:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:05 2025 by rpki-client