Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b984696a-deb7-3a25-a063-98cba452afab.roa
File:                     b984696a-deb7-3a25-a063-98cba452afab.roa (raw, json)
Hash identifier:          wvxpDZKTkds2jzcidl+VXOr6UIuFkSdDJELWgqvi0Xw=
Subject key identifier:   25:9A:43:83:1E:1F:42:21:B4:E5:9C:66:DA:7C:55:6C:FB:FB:6C:E5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAFB087871BC5A55DD6330
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b984696a-deb7-3a25-a063-98cba452afab.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:fb:08:78:71:bc:5a:55:dd:63:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=213700be-5fa7-4873-822e-10f0e504eeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c2:bd:21:ea:9e:68:f0:79:01:58:8d:8f:ac:
                    01:49:87:0a:42:65:86:67:e5:1a:11:5c:de:7d:f2:
                    4c:bc:7e:89:03:3f:4c:24:df:9b:b5:50:05:56:41:
                    e1:ba:bb:f7:40:0a:85:d4:16:1e:70:d8:4f:a1:5a:
                    1f:36:01:b4:75:2a:98:40:38:0b:a5:a4:a3:fe:80:
                    de:7b:64:6a:8d:66:1f:c1:86:95:6d:c6:d6:6b:02:
                    67:a8:24:3d:d8:7d:cf:7c:b3:84:04:12:86:da:24:
                    f6:71:66:09:78:2e:b6:7e:e8:1f:3b:6d:9e:6c:3e:
                    1d:1b:d0:e0:9d:4b:0b:50:88:11:72:77:2e:43:84:
                    44:a2:c8:34:58:d7:40:53:9f:dd:4e:9a:c4:99:ff:
                    d5:6d:3c:9c:27:db:37:40:ba:59:76:75:91:ba:65:
                    1c:39:84:52:05:fc:e0:ba:b5:3b:46:20:5a:1d:9b:
                    88:3a:13:6e:b7:8d:83:75:dc:7a:96:97:b1:89:92:
                    94:d1:56:d9:03:62:e2:47:18:48:20:07:1e:0c:75:
                    3a:89:e3:b0:d2:14:7e:c8:cd:4c:f3:2e:41:b3:56:
                    f8:ec:e9:02:e1:0e:7f:95:77:de:c0:8d:78:a7:57:
                    69:3a:da:22:4e:a6:78:04:81:7b:bd:41:08:73:66:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9A:43:83:1E:1F:42:21:B4:E5:9C:66:DA:7C:55:6C:FB:FB:6C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b984696a-deb7-3a25-a063-98cba452afab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:05:c7:90:9b:ae:96:09:e0:3b:ab:42:ce:da:53:f0:1d:
         b3:83:8a:74:b4:a8:03:3a:11:af:17:26:02:a1:ce:38:07:a4:
         0f:3a:d3:f5:a2:91:b8:bf:d6:f4:aa:c7:9b:54:b6:e7:6f:2c:
         1f:b8:f4:21:dd:f3:75:3d:56:c1:93:e0:0b:87:13:a0:09:fb:
         a3:37:d0:12:87:c0:6f:cb:c1:dc:bc:a9:95:f3:c4:4f:ad:9d:
         73:09:eb:e5:67:b9:30:43:23:3b:45:8a:36:c3:3b:e7:80:b0:
         89:6b:67:79:db:2c:ec:0f:ba:90:a7:30:b4:e6:af:37:6c:42:
         2a:b1:6d:31:43:2f:02:ef:3b:24:e0:af:45:c0:6d:14:16:81:
         7a:08:bd:4e:74:44:5c:7b:20:e1:cf:40:8e:12:06:d8:0f:35:
         aa:46:9d:7b:9a:0c:64:65:08:cb:30:cf:3b:fd:85:92:8a:44:
         b3:cb:29:86:62:f6:c9:36:3f:40:bd:58:c2:e1:f5:30:0e:d2:
         db:89:eb:84:15:b1:c8:ed:de:92:4a:93:78:9d:6f:85:1a:18:
         1f:49:fd:a1:d1:d9:91:5e:c8:37:c6:89:47:49:2d:bb:b9:7c:
         35:58:b4:a5:a6:e6:23:b3:42:17:8b:b7:7f:05:ea:32:47:99:
         6f:c0:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:02 2025 by rpki-client