Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6747aeb-e307-3c7d-8fad-5552512d394a.roa
File:                     c6747aeb-e307-3c7d-8fad-5552512d394a.roa (raw, json)
Hash identifier:          Z3EsMvolibuxo8klx9Ngi01UlSw4OPSTXfkh9fvq/yQ=
Subject key identifier:   27:0C:AD:06:D4:F5:EC:32:41:75:86:81:58:52:EB:F1:5B:2A:6F:DC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA737B88AFCE2464022400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6747aeb-e307-3c7d-8fad-5552512d394a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:73:7b:88:af:ce:24:64:02:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=683d78f8-33c6-401c-ba17-432f652bfd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bb:94:86:81:68:6d:3d:7b:3e:09:59:79:bf:
                    1b:4c:18:09:96:60:b4:ea:c7:02:ec:b8:ed:cc:5a:
                    23:8b:06:f2:e1:81:99:2f:25:3f:a0:04:45:71:b5:
                    1b:3a:76:57:18:33:b7:2e:ee:d2:f0:c0:6f:4a:97:
                    96:58:d5:74:fb:0b:f6:11:ee:bc:b5:dc:63:db:ff:
                    ae:d6:db:6c:53:58:20:de:25:b2:47:1b:ab:ad:25:
                    00:8c:e2:ab:fb:9d:a9:e4:4d:42:1e:b0:5b:45:30:
                    0a:53:11:bc:d6:06:04:53:0f:2d:1f:99:98:0e:09:
                    55:9c:12:aa:6e:64:10:4c:bd:23:b2:90:a2:e6:1f:
                    9f:fc:57:d6:e0:37:21:43:ec:df:f8:61:0b:cb:31:
                    11:14:7c:81:30:e1:4a:10:9e:cf:e8:2a:c2:e2:24:
                    b5:21:c4:da:db:44:76:d3:92:3c:06:14:3a:90:11:
                    ca:62:65:c9:db:32:ea:db:9b:af:e5:2f:69:3c:7b:
                    bf:a6:80:83:bb:a9:f4:5c:29:c4:45:4d:e9:2e:a0:
                    39:1c:b4:b6:36:9e:23:b7:32:af:a3:f4:5b:05:40:
                    ab:17:86:5d:e5:7c:0f:84:06:75:0d:67:ec:e8:97:
                    31:f9:7a:b1:bf:c5:db:fb:7b:34:7d:27:7c:df:b4:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0C:AD:06:D4:F5:EC:32:41:75:86:81:58:52:EB:F1:5B:2A:6F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6747aeb-e307-3c7d-8fad-5552512d394a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:54:af:14:3a:bc:46:ce:ea:bb:1f:f8:be:ac:51:e6:78:1d:
         39:ad:e0:94:67:20:ee:ca:8e:27:f1:5a:82:74:dc:a8:3b:d6:
         f6:58:c7:bb:49:6b:a4:bd:31:47:3a:98:0e:9c:d3:95:c9:a0:
         68:84:03:3a:f3:c7:2a:60:0f:fa:2b:61:3e:bb:e1:20:f6:f8:
         a8:8f:b2:22:fc:b3:a3:44:84:30:db:9e:92:eb:2a:66:cc:ec:
         9f:b7:dc:0e:4e:dc:c7:9e:aa:99:0d:f4:32:3a:07:df:a2:3f:
         29:66:ae:c0:62:06:a1:6a:68:8b:a6:9e:57:0d:ea:31:71:6d:
         ae:10:aa:7c:8c:97:10:ff:ae:98:10:b4:fb:c8:6f:5e:3b:54:
         01:5c:2f:19:b7:4f:7c:a0:fe:c1:64:1c:c3:2b:6b:89:c9:9e:
         2d:7b:cb:c4:6d:1f:8f:3a:10:09:01:b6:cf:b1:b9:32:5a:29:
         52:37:dc:c9:73:1f:d8:57:66:36:2c:cc:76:d5:40:84:40:be:
         ed:3b:a5:16:83:2b:eb:ad:2e:31:c4:d3:c8:95:ae:cf:fe:bc:
         69:c9:94:29:f1:23:62:49:73:54:f4:e8:da:e6:4b:2a:87:27:
         13:69:68:d9:63:4f:f1:c4:b0:90:d7:a7:cc:f2:5b:a3:e0:46:
         47:c1:dc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:18 2025 by rpki-client