Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5e248417-7466-35ef-86ba-24fa721fd3e5.roa
File:                     5e248417-7466-35ef-86ba-24fa721fd3e5.roa (raw, json)
Hash identifier:          5d22x9WxrLaxzto+Rg6JYJmYUIhDaIPKrvo9S56vpac=
Subject key identifier:   59:23:8E:2E:E5:9B:9B:43:A9:90:A0:29:2E:F4:C5:B2:1F:EC:2D:C4
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285849DDF4D99A7A017DEB06465940
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5e248417-7466-35ef-86ba-24fa721fd3e5.roa
Signing time:             Fri 16 May 2025 01:00:46 +0000
ROA not before:           Fri 16 May 2025 01:00:46 +0000
ROA not after:            Thu 14 Aug 2025 01:00:46 +0000
asID:                     21840
IP address blocks:        75.127.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:f4:d9:9a:7a:01:7d:eb:06:46:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: May 16 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=655da249-1ff6-4310-a7a9-b2f4e2dbac7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b5:fb:05:c1:98:db:d1:2b:6e:97:6f:e9:3b:
                    43:a5:b5:c7:1c:da:f7:bf:da:15:05:4d:52:ae:54:
                    8f:71:c7:c1:d5:80:21:b9:7e:94:92:d8:04:a9:e5:
                    f2:9c:1f:58:52:ac:ce:a2:46:64:6d:27:e9:b6:e9:
                    06:7a:28:58:90:0c:05:59:4f:c8:ef:a3:cc:be:b4:
                    83:8d:27:9d:e1:61:f4:74:80:66:b6:43:7a:4e:13:
                    84:6c:8e:39:fd:49:2f:51:7b:a1:69:58:61:da:5d:
                    91:f8:bc:9f:56:2f:93:01:f4:42:bd:96:ab:ab:7a:
                    72:2f:b4:d7:72:ad:2d:cf:cc:ba:c6:0f:0c:c7:be:
                    c4:28:5c:a0:33:f8:e9:61:05:08:8d:96:c3:5b:9b:
                    f7:34:5e:b2:13:05:20:67:96:70:bd:15:b5:29:96:
                    fe:1f:b9:5a:19:52:be:9e:96:a6:b1:0a:53:f0:6a:
                    03:b0:27:1f:e2:25:45:be:5d:4a:4f:96:3a:53:f5:
                    d9:5b:98:ba:70:2f:ab:ba:57:56:43:53:bc:cc:a5:
                    a3:25:28:89:42:29:e7:e4:c2:fc:dc:8f:bd:5e:54:
                    6b:08:ce:35:1d:e1:40:db:c2:55:83:78:a4:83:d3:
                    2c:4c:3a:04:0d:79:4b:09:6b:1b:9e:34:46:1d:d0:
                    14:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:23:8E:2E:E5:9B:9B:43:A9:90:A0:29:2E:F4:C5:B2:1F:EC:2D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5e248417-7466-35ef-86ba-24fa721fd3e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:08:b7:dd:71:2d:34:54:b1:db:bf:aa:0e:6f:ca:60:02:6c:
         d2:f0:b7:8c:67:02:40:e1:4d:ae:5a:56:2f:2f:a8:86:0c:f9:
         2b:2c:22:a3:e6:9d:6c:da:ce:fa:71:00:a2:db:d5:33:3b:98:
         e2:63:6e:50:44:b8:9c:58:0c:69:66:59:b9:23:15:ce:cc:71:
         3f:f9:1f:64:f6:19:0b:c1:7a:01:90:97:98:91:c9:60:07:cb:
         b9:34:34:05:d5:42:15:f2:b1:79:24:f3:40:34:35:b6:c1:a2:
         b9:44:79:ff:b2:49:58:9c:0d:eb:b3:75:02:78:35:b3:ad:a4:
         2f:66:92:66:4a:61:f9:05:3a:cd:6d:6d:d2:4e:4f:d7:e7:d3:
         13:25:04:56:0b:25:33:17:7e:14:10:ac:8a:f6:7b:ce:c1:dd:
         03:d1:cf:e7:d3:80:48:19:d4:40:98:e1:ad:51:74:ac:d5:11:
         65:bf:e0:6b:fb:00:89:e7:5b:99:71:1c:ab:cb:94:59:f0:fd:
         1a:4b:b8:01:ee:92:30:52:c1:13:3d:ff:8c:f0:9a:f3:f0:fa:
         cf:40:aa:91:ce:bc:2a:88:f0:c3:87:ff:4d:5d:c4:e4:84:87:
         82:1b:4c:2e:0e:05:d1:dc:15:3a:f5:b8:1d:d0:e6:43:e1:58:
         4c:c0:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:06:40 2025 by rpki-client