Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fe510d-4ee8-3487-b371-188581da182a.roa
File:                     85fe510d-4ee8-3487-b371-188581da182a.roa (raw, json)
Hash identifier:          v+d/wJRTeZP/TIPKcHy+61jLLIOuBYhHABJCq7hiDts=
Subject key identifier:   24:C4:71:09:C0:FE:BB:5E:5D:20:B3:D4:5C:97:9A:48:33:7F:6C:B0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6ADCA35546CDC2A06200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fe510d-4ee8-3487-b371-188581da182a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:6a:dc:a3:55:46:cd:c2:a0:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=aab54d63-3bf0-41bc-9622-b221131a9eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:3e:20:97:cb:04:bb:a9:49:47:ef:81:09:
                    f8:ed:1f:5d:c4:11:7c:b0:ee:4f:27:84:33:17:88:
                    46:2d:e4:45:25:86:61:4c:51:86:86:96:92:68:e7:
                    92:e6:cd:84:26:c7:7e:7b:f4:03:bb:16:dc:5e:7b:
                    dc:29:96:c3:01:55:47:79:fe:5a:6b:4d:c1:c9:5f:
                    cd:38:68:03:25:54:57:df:a2:ee:9a:df:2e:94:f0:
                    48:e6:c1:d1:de:7f:8f:2d:99:0c:4e:6a:c3:5d:6d:
                    4b:c2:72:59:2d:e1:da:6e:ff:3f:9b:e2:fc:89:29:
                    fe:98:c7:fe:63:fb:7a:fa:ce:e5:b3:25:a0:91:aa:
                    ea:9a:74:d1:3a:1b:24:c0:6b:42:3e:70:23:2a:e8:
                    3c:81:d5:e4:0b:28:05:f2:c9:23:76:7e:78:0b:8c:
                    9c:83:f1:d4:4d:35:02:51:70:b2:b9:2b:be:f4:06:
                    cf:91:d1:8b:ca:10:5f:81:1b:07:95:f9:82:6c:92:
                    3d:ef:6f:0f:21:df:af:54:67:f3:24:b8:e2:75:aa:
                    a3:ae:fb:96:f2:7a:01:ae:23:6e:f3:13:cf:b7:43:
                    6e:a0:5e:f9:13:60:21:9c:50:f1:e4:d4:1a:61:a0:
                    fd:b6:0a:b8:92:ea:ad:29:02:36:39:08:45:6a:a3:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C4:71:09:C0:FE:BB:5E:5D:20:B3:D4:5C:97:9A:48:33:7F:6C:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fe510d-4ee8-3487-b371-188581da182a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:d6:7a:04:13:17:4f:14:da:27:0b:fa:b8:a8:5f:4b:11:
         b5:e2:5a:0a:b6:46:6b:75:6f:41:ad:1d:2e:83:b3:35:ad:a9:
         90:a6:2c:47:b9:5c:5e:60:f7:32:44:ae:a8:71:95:f0:96:d6:
         3c:2b:a9:5d:64:f7:23:43:c4:6c:44:b6:a7:d7:17:57:c1:a9:
         40:99:60:1b:33:99:03:56:a1:16:70:c3:47:6e:6e:00:2f:34:
         5a:c0:20:51:7a:17:51:0b:b5:d6:2c:8f:88:13:90:3a:39:f9:
         d5:18:be:50:ed:95:c1:80:58:12:bd:33:c2:1a:d2:0a:56:8b:
         ac:5f:0a:85:d4:56:d9:1c:ba:dd:1f:6c:4e:04:95:26:d1:ed:
         0d:9b:d8:81:17:e3:b0:df:ee:16:0f:f8:27:19:1f:ec:09:68:
         f5:1a:59:51:48:d7:07:8e:6f:2b:69:84:f3:4b:b4:97:cc:58:
         81:ea:61:a9:ce:38:de:b1:f3:cf:79:1c:8a:b7:36:65:b8:b4:
         0e:09:80:dd:2f:13:77:1f:63:89:8d:73:56:33:c2:58:c5:b0:
         66:e5:2d:0f:18:00:4e:c3:fb:24:48:b4:56:d6:67:9a:47:8d:
         1a:7e:33:13:53:e1:7e:0d:60:c2:89:10:ec:f3:94:43:4a:6a:
         98:de:8c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:20:08 2025 by rpki-client