Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d13bf0-4ec1-35b8-a335-2654d8a24bc8.roa
File:                     c5d13bf0-4ec1-35b8-a335-2654d8a24bc8.roa (raw, json)
Hash identifier:          wF2voQMu6cpCEvyYuKMCO9pKgKlFCmMibr01pvMNXGc=
Subject key identifier:   D3:86:A1:CD:35:50:4E:50:29:B4:5C:B0:00:51:BC:37:A2:A9:90:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAF36D487C3CE259469580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d13bf0-4ec1-35b8-a335-2654d8a24bc8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:f3:6d:48:7c:3c:e2:59:46:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=67b2e77c-4338-44e0-842b-1f8a44d9b9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:13:84:5d:30:a9:93:87:46:e0:b2:55:de:
                    5b:3a:ee:ec:85:dd:b7:2a:61:59:ff:e9:50:70:04:
                    7a:3a:7a:ee:48:c2:b5:50:4a:00:c9:e5:30:f6:f3:
                    53:af:67:4c:7f:43:1d:0b:bf:56:09:47:4c:92:be:
                    39:00:66:56:38:df:9c:37:9b:32:bc:49:56:ac:b0:
                    be:f4:d0:18:11:3c:17:0a:6a:0a:02:c5:4b:cd:51:
                    6e:25:fa:c1:46:a2:a8:32:b1:b4:05:6a:b7:21:ca:
                    2d:f9:54:09:ec:6a:6f:68:e4:ab:9b:c5:9d:52:4c:
                    e9:8b:c1:21:50:2a:3b:e1:30:ba:6d:7b:db:e3:7a:
                    a6:48:70:03:6f:ef:6c:2d:25:47:c1:46:fe:53:ed:
                    88:65:33:67:2b:81:41:7d:44:75:1b:40:9c:f1:72:
                    d6:a5:9e:f9:be:28:06:dc:50:fb:6b:2f:1b:1a:fc:
                    a5:1c:ab:99:6c:38:eb:49:c8:5d:7c:3f:ef:67:8d:
                    a9:20:b8:59:42:cd:48:3e:eb:48:1c:aa:7d:75:05:
                    60:2c:36:8a:4c:f2:af:7e:fc:09:99:70:55:59:b0:
                    eb:40:f3:d1:4a:9a:1f:a9:20:45:7e:67:86:fd:ab:
                    bb:28:d6:a2:d2:ff:7d:e0:29:3b:11:ae:36:66:6a:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:86:A1:CD:35:50:4E:50:29:B4:5C:B0:00:51:BC:37:A2:A9:90:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d13bf0-4ec1-35b8-a335-2654d8a24bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:10:6c:56:26:06:24:ec:f0:ea:22:5e:22:ce:50:df:f6:e9:
         dd:2f:c0:f4:6f:ed:66:8e:92:a1:e4:e1:d7:8f:4d:da:f2:d8:
         a0:cc:b9:f6:a1:ac:b2:0f:81:13:d7:1b:ad:86:38:f7:46:49:
         ef:91:a5:06:b4:37:b0:9a:51:d0:b5:c6:6e:8c:d8:74:d1:ec:
         e3:a9:68:7f:42:d3:e1:fd:e7:25:ea:fe:ac:ec:42:c9:89:c5:
         7c:88:8f:76:25:db:5a:2e:88:4c:ee:02:34:af:7a:29:93:3a:
         f2:0f:ab:59:ca:6f:50:5f:13:2e:b5:f4:3f:33:44:cd:64:04:
         18:86:1f:85:bb:0f:83:16:a5:24:26:83:d1:98:5b:d0:5f:a1:
         1e:61:f3:6b:28:be:e5:06:67:3f:85:73:94:85:06:ea:cf:03:
         21:c3:83:6e:6c:bf:b9:a9:5d:ea:cc:b1:23:3b:59:46:a5:39:
         f8:25:c6:a8:e4:bb:39:81:c4:9d:d5:0f:99:72:ac:a2:88:d6:
         df:c9:85:1c:ff:e1:7f:30:1c:0f:37:98:ca:82:66:44:75:52:
         d3:92:8f:88:0b:43:11:ee:d8:4d:2c:f7:42:fd:72:10:86:1a:
         c0:8f:c1:f6:a4:9a:19:7a:a1:dd:15:0d:5a:b0:8b:79:ce:fc:
         83:b0:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:02:03 2025 by rpki-client