Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/02cd3c47-bbbd-31ad-b4bb-93a3502c32f0.roa
File:                     02cd3c47-bbbd-31ad-b4bb-93a3502c32f0.roa (raw, json)
Hash identifier:          rNMbIc+krOuX5QhJL6CJRurji3lI++f6UYNbHfGxYxY=
Subject key identifier:   A5:18:50:B1:4D:96:CA:5D:D5:23:C0:98:83:93:F2:BC:73:01:C5:54
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811EC225879D5003BC2C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/02cd3c47-bbbd-31ad-b4bb-93a3502c32f0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1e:c2:25:87:9d:50:03:bc:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=2bbda929-202c-4b2a-9ffe-4d379841cedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:1a:29:0a:c3:5e:7a:a0:3c:52:d3:db:9e:
                    79:6c:2e:98:78:86:50:6d:88:b4:62:25:7b:41:9a:
                    3e:40:f5:09:e6:62:b6:27:5a:8c:a1:97:5a:0c:a6:
                    03:ac:d1:ea:90:0a:64:1a:8a:4c:66:4e:38:86:cd:
                    6b:89:c0:83:60:20:2e:0c:c4:19:89:a8:47:81:36:
                    79:df:1b:20:76:60:15:7f:ea:ed:40:57:ef:8f:95:
                    61:fe:e8:0f:a2:d7:19:0c:8d:92:69:46:c9:97:74:
                    78:12:fc:ca:f5:26:f8:48:2f:41:07:95:27:99:d2:
                    76:f2:eb:28:ae:9a:33:5f:0a:a4:10:95:7a:73:c1:
                    b2:73:94:a5:f5:1e:50:52:27:3e:e5:46:9f:eb:44:
                    47:94:48:02:3b:58:c3:92:36:56:77:db:19:f5:64:
                    16:1b:20:0c:d0:3a:72:ba:8d:ac:fe:08:fb:35:2f:
                    65:74:3d:40:8f:02:f2:78:90:93:9f:e5:e6:9c:59:
                    07:1a:dd:65:32:cd:27:36:0d:0c:79:83:ea:e9:f1:
                    df:bf:b4:82:2b:d5:0b:aa:ce:72:6a:e9:61:90:d7:
                    66:ed:39:43:f4:7f:08:b5:13:6f:a9:75:d5:8b:0f:
                    f9:86:aa:36:1e:4a:ec:06:6b:09:18:76:5e:ca:0b:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:18:50:B1:4D:96:CA:5D:D5:23:C0:98:83:93:F2:BC:73:01:C5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/02cd3c47-bbbd-31ad-b4bb-93a3502c32f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:f0:19:fe:fe:a9:75:5e:18:ae:7c:4e:73:b4:c3:ec:28:84:
         45:2c:ca:42:8e:d9:f2:2c:72:b1:c3:67:08:e5:9b:dd:78:5b:
         b6:16:11:29:05:3a:51:f6:63:03:fb:72:3b:a7:67:23:29:d4:
         d8:fa:65:c8:8d:a6:cc:95:ff:59:6a:93:b1:31:94:36:93:47:
         5e:2a:38:2a:87:2d:60:f5:2b:0a:4c:6b:46:0b:28:11:45:11:
         4a:58:09:1b:d5:6b:57:ed:2a:76:9e:1e:9f:9a:c1:3f:21:69:
         c3:fd:b8:b5:9e:f1:99:f9:a3:7d:c7:42:8a:9a:bc:3b:fb:f5:
         10:a7:d3:0b:26:d3:4d:33:90:3b:8d:93:11:f8:ab:ec:94:f3:
         e2:72:29:39:95:1d:c7:53:85:22:67:f8:d6:49:70:65:28:cd:
         13:4b:0e:5d:93:87:e3:e4:b1:87:2d:70:65:21:a6:2e:9c:cc:
         4f:bc:d6:7a:1c:53:23:c3:40:e9:11:86:89:85:a3:97:4f:2e:
         91:21:7b:6d:ec:3f:fa:bc:04:c7:d4:d3:f9:c9:15:21:e6:57:
         bf:ed:62:ee:8d:cc:ff:30:65:ac:3b:76:4a:55:aa:34:ce:82:
         47:f0:1a:f4:00:2f:fa:5d:2e:1d:52:e1:f6:2e:9f:4b:e9:91:
         61:4f:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:05 2025 by rpki-client