Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed098103-992f-3725-a9d8-eac4c56e8044.roa
File:                     ed098103-992f-3725-a9d8-eac4c56e8044.roa (raw, json)
Hash identifier:          buFIRP5aZQMD33YblJMTXYPrfoYXzWxUt0yV064Iz3g=
Subject key identifier:   49:B4:5D:86:13:12:B3:45:25:09:53:52:F0:BE:E5:90:62:11:AB:65
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAFAE540350D69DE2A0080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed098103-992f-3725-a9d8-eac4c56e8044.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:fa:e5:40:35:0d:69:de:2a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c5c11cd3-a23c-4e7d-9847-f239b8819146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:6c:c2:8c:ad:8a:79:15:e4:cd:63:4c:2d:
                    00:fa:f8:56:c3:c2:77:ca:d4:a6:03:43:84:e7:48:
                    78:06:9d:7d:fb:40:cb:6d:57:38:36:13:32:f3:4e:
                    d6:4b:91:ca:cd:b6:5c:ca:ee:fe:6f:13:46:0b:0b:
                    3f:85:b5:8e:f7:97:7f:b4:39:8f:78:c2:19:90:aa:
                    ab:bb:4b:86:55:16:59:33:a0:dd:14:bc:e6:77:66:
                    fe:8a:c5:09:5a:e6:82:d4:4c:53:dc:1a:56:38:70:
                    be:40:26:9f:2d:69:05:7d:d5:8b:50:fe:c5:e5:28:
                    e6:79:ce:b1:02:64:25:2e:90:88:b6:28:0e:96:63:
                    23:d2:88:46:56:a3:ea:c5:ef:05:fe:ed:a4:a2:4a:
                    07:24:4e:27:32:f6:d8:7b:83:dd:cc:28:0f:a7:20:
                    93:91:38:74:f8:16:05:5f:b3:b9:55:e2:c6:e9:6f:
                    be:c7:76:d0:39:35:93:4b:73:8f:cd:6f:7a:e4:b2:
                    e5:da:b0:7e:86:77:7c:33:05:15:68:c3:3c:06:32:
                    10:5e:45:7e:e3:ff:8d:78:5c:b0:dd:d8:80:61:16:
                    59:5d:59:31:d9:15:4d:83:7c:77:28:2a:95:c6:6d:
                    69:f2:cd:c5:a7:36:88:5b:dc:21:2f:e5:42:3d:83:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:5D:86:13:12:B3:45:25:09:53:52:F0:BE:E5:90:62:11:AB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed098103-992f-3725-a9d8-eac4c56e8044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:9f:08:70:57:a7:86:92:6b:41:fe:fd:26:3a:e4:8d:81:
         05:78:e2:db:e9:f1:2d:ec:79:b0:85:77:75:ad:78:dd:59:17:
         fd:27:6e:29:ea:1b:3d:70:f0:de:c1:11:dd:6b:45:f1:79:55:
         18:b9:a0:7a:90:d9:24:6d:dc:04:1c:c1:bd:f5:27:96:50:8f:
         60:47:90:18:31:0e:82:4d:04:2c:04:06:15:98:07:d1:87:e6:
         fa:51:b9:ca:a1:78:96:83:2a:a3:ad:ab:2c:f9:b8:52:5d:f8:
         2d:14:19:1b:bb:64:07:e6:ae:d1:74:5b:da:16:d2:32:04:7f:
         6e:1e:52:71:57:3b:1b:10:b4:d5:77:98:d1:b8:d4:73:38:62:
         49:af:fb:eb:3d:67:ca:84:52:a2:22:a0:24:bc:43:66:fc:a9:
         ec:04:9b:ee:1f:a6:c2:9e:1e:9e:79:71:51:f4:92:53:4c:a5:
         0d:58:d9:7c:bb:48:94:9a:11:01:9a:45:14:04:a8:67:64:4a:
         e4:b9:3e:72:03:6f:46:50:73:31:5e:78:98:cd:38:d7:7c:2b:
         ea:81:ea:7c:e0:a6:6f:93:b7:1e:d2:35:69:6e:50:03:14:d8:
         b6:00:3d:5c:c9:4b:ea:d9:42:42:3f:11:64:c1:8b:3f:b3:30:
         b4:f4:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:42:58 2025 by rpki-client