Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef9d44d1-d656-3b85-8f95-1494a082e9ed.roa
File:                     ef9d44d1-d656-3b85-8f95-1494a082e9ed.roa (raw, json)
Hash identifier:          YfujHhmTWIKcSy2+ztDB7ROCJDU4FticFeCJCfZr+1Q=
Subject key identifier:   58:2E:7F:29:69:04:FC:99:A2:56:15:46:58:1F:26:84:4F:76:2F:7C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA714E38B6631A6AE11440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef9d44d1-d656-3b85-8f95-1494a082e9ed.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:71:4e:38:b6:63:1a:6a:e1:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ad780d95-8038-4f83-bea6-69df1b64c2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:bb:f2:49:0a:e1:d0:58:61:ba:2c:49:cb:
                    97:1b:be:bb:cb:3d:70:15:52:21:d9:e0:27:20:85:
                    1b:1c:cb:a5:56:b8:c5:08:18:12:ed:87:d8:cf:42:
                    46:76:d0:2a:86:1c:56:34:13:cb:8d:88:36:47:71:
                    67:72:c5:a7:a2:e3:2e:20:dd:9c:1c:fb:57:d6:71:
                    77:02:1e:87:8b:82:a8:49:ba:e0:cf:6c:43:41:2b:
                    b4:d5:5c:61:6d:ba:f4:44:45:6f:0c:a0:da:4c:4c:
                    a5:68:ea:5e:fc:77:9f:a6:50:b9:38:1e:87:b9:8a:
                    94:09:84:4d:d3:88:dc:f5:f6:72:bf:88:78:2a:a6:
                    cf:39:a2:47:78:91:57:05:7b:cf:ca:72:65:e3:45:
                    fe:ee:a3:c5:fb:22:0b:f0:08:13:4b:05:48:31:ec:
                    01:9f:a6:ab:26:9b:cb:73:ce:9f:03:d4:d3:29:11:
                    eb:93:51:d8:30:a0:83:6b:16:0d:7b:07:9e:f9:cd:
                    1f:7d:c6:22:13:1e:60:f0:9a:0b:7a:7d:ce:71:a5:
                    04:a0:1b:c8:03:03:17:9e:a6:c8:76:a1:6e:3e:27:
                    d9:a4:31:c9:ec:30:94:81:51:9e:4d:9a:7d:b9:d0:
                    aa:54:97:34:6e:53:c4:7b:db:75:05:49:8b:cf:c4:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2E:7F:29:69:04:FC:99:A2:56:15:46:58:1F:26:84:4F:76:2F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef9d44d1-d656-3b85-8f95-1494a082e9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4d:32:49:f1:11:ee:3c:53:c1:ac:4c:82:65:56:45:b0:d2:
         f9:c2:37:55:ca:3a:e5:26:7a:ce:10:30:27:36:b6:5a:65:0a:
         f6:72:63:d9:00:bc:87:58:4f:57:54:d9:f7:ef:f7:aa:1f:61:
         7a:4a:bc:d8:c4:2c:b8:ba:70:3e:2f:85:05:60:7e:b1:3a:39:
         46:72:72:fb:08:a7:48:d1:78:b5:21:90:a8:8f:70:a2:79:68:
         2b:19:fd:9f:e5:70:cb:be:35:90:f1:8d:af:bd:a9:65:18:e3:
         ae:7f:5a:b0:0d:71:f6:25:5c:20:67:54:21:9a:3b:fe:4d:25:
         90:dd:e5:8d:19:9a:81:5b:be:b3:3e:e7:52:ed:97:4c:81:ac:
         4f:3c:81:24:7e:70:26:ee:67:48:e9:1f:3b:89:e6:6a:4e:40:
         39:f9:1b:d4:dd:f6:74:ce:79:5f:0a:51:c1:f3:d1:25:0f:ff:
         23:30:9d:e1:dc:4d:60:eb:e4:5f:3b:8d:c8:15:77:c0:a0:f5:
         6d:ec:c4:8a:c9:9c:a0:c1:57:56:83:c4:1a:d3:11:12:d0:e2:
         25:b5:98:dd:04:98:00:8e:6a:10:e2:db:1c:81:97:d4:48:19:
         9d:1e:6e:94:f1:d9:98:73:f0:4c:9b:eb:8c:22:68:84:9a:12:
         d6:5d:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:47:35 2025 by rpki-client