Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be48bfda-d715-3466-970e-61d7387771b0.roa
File:                     be48bfda-d715-3466-970e-61d7387771b0.roa (raw, json)
Hash identifier:          eFB8S0xTTIzC8Lvb5UBZHwb8lHykhYxt41xe48EWUSg=
Subject key identifier:   18:4D:58:D4:46:0A:FB:9B:C4:C8:CC:7F:03:7E:63:C6:8B:E3:1D:42
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAF656A6AE5D499C9AE8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be48bfda-d715-3466-970e-61d7387771b0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:f6:56:a6:ae:5d:49:9c:9a:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=33dbfe6c-9687-4d99-87bf-6ef8f77732ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:bc:66:91:1b:60:9c:b0:48:1d:35:5f:5b:
                    2c:e1:f3:4e:3c:df:38:27:d5:5e:78:c0:60:81:5b:
                    45:d1:09:a5:3d:ee:83:0f:cd:4d:25:a5:3b:8c:de:
                    80:1c:9c:61:52:26:7d:5c:b9:7a:e0:4b:54:23:7a:
                    7d:fa:3e:97:f6:88:0c:ef:cf:d8:8a:2d:1b:e1:ae:
                    38:03:03:3a:9a:f4:16:52:65:5a:6b:be:73:f0:45:
                    25:95:83:e9:06:63:14:e6:15:07:44:1c:75:f0:30:
                    18:cc:cf:05:24:fb:69:f3:72:f1:3d:fd:1b:0c:5e:
                    9a:7b:84:4b:f2:04:a2:96:b2:8f:45:3f:4b:d9:a9:
                    b0:45:f3:e0:98:8b:1e:b8:e6:58:a2:e9:47:d8:a7:
                    eb:84:b1:da:81:9e:e3:0b:18:6c:8a:ee:1f:3b:1b:
                    c3:d4:80:9c:6c:d6:fb:99:66:cc:4c:61:d6:95:7b:
                    01:e3:cf:fc:bd:11:31:63:a6:30:3f:61:0e:9d:94:
                    dc:4c:49:35:c5:ce:65:f4:0a:40:ae:fd:17:df:cb:
                    c2:f4:e2:1d:8a:8c:95:83:e8:be:fc:f0:a3:43:d8:
                    5d:ac:5b:49:b0:2d:bb:62:a8:52:bc:61:96:ea:41:
                    d9:31:c7:25:14:a4:e5:3d:40:64:59:88:8b:3d:7b:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4D:58:D4:46:0A:FB:9B:C4:C8:CC:7F:03:7E:63:C6:8B:E3:1D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be48bfda-d715-3466-970e-61d7387771b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f6:2a:99:4a:6e:91:52:b5:dc:b8:43:45:83:ef:9c:0b:82:
         c8:0f:46:70:a6:ef:fb:e9:2c:d7:cd:12:83:ff:11:11:27:d4:
         db:c5:6b:83:a4:4b:9d:52:71:50:46:9b:9d:7e:9b:64:c8:ab:
         04:f9:d0:01:b1:b7:ab:81:64:a9:92:34:20:8b:08:39:27:40:
         50:22:a2:a4:81:ad:24:34:29:8a:c8:de:1f:d9:e9:d5:e1:14:
         df:68:bf:47:d6:11:14:ef:68:73:54:b1:24:b2:39:ed:65:b9:
         17:b5:e9:f0:57:75:09:73:9c:f3:74:db:40:48:8a:04:9d:c2:
         eb:f2:5f:35:5a:f3:dd:30:fd:b8:63:74:59:c9:59:02:a7:e5:
         a9:dd:60:3f:67:4e:bf:90:ad:84:e8:41:e5:e9:ae:89:f2:da:
         7a:c4:e2:32:df:64:54:61:0c:9e:43:35:45:aa:e8:18:80:12:
         27:e9:4e:e9:31:a6:1f:1b:59:4b:66:16:36:0a:eb:83:f6:44:
         32:74:a4:3e:16:f0:c9:97:95:08:b2:df:c3:55:80:0c:8a:70:
         9e:4f:ba:cd:f6:d4:9d:0f:7f:af:fb:6b:2e:f3:a5:d4:52:3c:
         a3:57:34:60:05:c7:06:42:83:5c:d7:d0:aa:ab:38:ce:8b:1e:
         f0:ba:97:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:10 2025 by rpki-client