Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0758393-01b9-301b-9917-9b5f05cf6db0.roa
File:                     b0758393-01b9-301b-9917-9b5f05cf6db0.roa (raw, json)
Hash identifier:          pYJfIrW94WOhvlPyvW6ukKp+POUcydBZOswdVSFvy58=
Subject key identifier:   0A:DB:CA:B1:42:65:E7:79:78:9B:FA:72:DE:3B:5E:D6:70:D1:2D:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BADBE6831E6EB1944DDA40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0758393-01b9-301b-9917-9b5f05cf6db0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     40306
IP address blocks:        75.107.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:db:e6:83:1e:6e:b1:94:4d:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=310d2a81-5f8c-43b0-8e99-8405de551b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:b7:71:4b:4c:5b:a1:5d:8c:ea:fe:2f:01:
                    a2:d1:93:49:7e:fa:21:4a:6b:6f:11:20:48:d3:69:
                    81:3d:c3:f4:64:2d:06:90:97:b7:5d:da:d9:0e:cf:
                    71:e1:5f:88:4f:e4:81:df:47:93:1c:d0:79:05:67:
                    fe:35:e6:1b:48:8b:c2:d7:95:73:bf:53:8c:82:42:
                    a7:89:c3:f2:c0:f6:50:12:35:5d:92:76:45:63:59:
                    e0:36:7c:5f:9e:63:78:33:0a:d7:31:6d:ed:e6:37:
                    b1:dd:ad:0b:0c:ae:28:f2:01:e5:a4:bd:d8:f0:3a:
                    e2:f4:0b:6b:0d:7b:d4:f9:80:f6:9b:b2:8f:96:9b:
                    71:b5:db:24:d1:59:b0:53:0b:e6:3e:c0:d3:60:6e:
                    e0:9c:80:b9:c3:98:c2:da:04:c3:77:35:bd:79:ce:
                    ba:77:35:74:0e:7a:28:a6:e3:0d:43:7b:4b:33:7a:
                    98:32:c7:64:cc:7a:6c:52:0a:26:53:9c:cc:bd:40:
                    1e:3a:9e:75:2b:4c:7b:62:fd:4b:21:24:92:2d:55:
                    80:04:92:ca:5f:b7:66:0f:67:17:9d:28:54:4a:4e:
                    05:a8:25:e7:75:8c:28:63:a9:33:d3:3a:00:4b:e0:
                    6c:3b:82:c9:d9:e9:e3:a2:39:4c:72:18:52:10:1b:
                    df:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DB:CA:B1:42:65:E7:79:78:9B:FA:72:DE:3B:5E:D6:70:D1:2D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0758393-01b9-301b-9917-9b5f05cf6db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:78:08:ff:49:32:43:5d:ea:ac:08:43:31:15:44:ad:28:8c:
         c8:d3:2d:98:21:92:d4:8a:c5:85:ec:9e:32:b9:3e:2e:78:0a:
         ff:57:71:e3:91:9a:f3:b2:57:df:9f:65:7d:7e:39:dc:b5:9b:
         5f:60:3e:af:c6:b2:f9:de:52:3e:ac:e6:34:3f:9f:5e:78:69:
         06:59:52:21:f2:dd:ca:0e:f8:5b:46:81:88:ce:e2:59:e3:a2:
         b4:ff:65:15:3a:eb:7a:3f:83:1a:dd:a3:09:3c:73:27:7c:11:
         7e:f4:11:7f:31:34:38:b6:39:d1:00:1f:c2:04:65:13:d4:14:
         d6:eb:a9:94:e9:44:36:d6:66:80:d1:ee:78:17:e5:ea:01:f8:
         6f:c0:98:70:2c:f9:7a:fc:fc:c9:96:4f:7a:56:ac:ab:0d:8b:
         af:e1:2e:55:cd:4f:cd:64:c5:a0:33:cd:6c:ce:c0:fd:97:ca:
         e1:0b:3d:4b:cc:ca:3f:d6:b1:14:42:db:53:70:c3:64:19:26:
         79:8a:b3:22:62:ee:6a:a7:fc:1f:ba:40:71:07:40:34:76:c0:
         7d:83:b0:72:29:f5:c2:df:e4:70:82:77:88:b4:cb:06:1e:c5:
         aa:23:72:dd:40:61:f1:a5:8b:57:ae:bd:a7:c9:51:53:27:01:
         4a:40:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:28 2025 by rpki-client