Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b0ad1e-e174-38ce-aaed-098d98bfd723.roa
File:                     08b0ad1e-e174-38ce-aaed-098d98bfd723.roa (raw, json)
Hash identifier:          iF9kI8OXOX+OK0ufmYG8X0HvJ6OXavBqOmxx38Xv3ZI=
Subject key identifier:   A1:24:02:3B:4C:AF:48:9A:13:E2:94:D8:03:86:A3:12:92:D2:A9:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5812DF3BF5230F768CC2000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b0ad1e-e174-38ce-aaed-098d98bfd723.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.107.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:2d:f3:bf:52:30:f7:68:cc:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7eb629e3-c8c9-44bc-a167-5ce768f48169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:8e:40:cb:75:81:c5:11:6f:3e:7a:18:68:
                    1a:82:99:6d:63:cd:2e:9f:84:80:85:ca:ac:d4:57:
                    10:f4:7e:c8:f5:7d:4b:6a:f1:5b:b6:1d:70:5a:d0:
                    c1:fd:11:88:25:46:e4:2e:0f:22:a8:0a:c4:74:ce:
                    27:a5:09:67:42:ea:17:ce:b5:16:ae:06:b6:60:4d:
                    2f:67:8b:b6:a4:e5:7c:e5:2a:0d:cb:b7:f0:40:c1:
                    ce:2b:bd:57:f5:86:3c:13:0c:5e:99:79:a3:89:a9:
                    78:e6:74:d8:21:60:32:47:97:c3:22:99:5b:50:88:
                    fb:3b:35:48:d0:cc:97:65:42:2a:eb:1e:ad:86:e0:
                    6b:40:f3:1f:0e:5d:98:be:76:f5:68:4e:11:ca:97:
                    51:9f:2a:d5:1d:48:db:e3:dc:77:6c:0c:da:82:37:
                    a5:08:2d:b4:a5:a7:d7:90:33:30:82:e8:db:34:39:
                    22:2f:36:90:7c:c1:ec:a0:b4:ae:2f:47:43:10:84:
                    55:0a:85:a1:21:ee:0e:f3:89:00:1f:ca:9d:17:e1:
                    ef:a8:e6:80:91:d3:ef:50:a3:2f:2d:48:ad:2b:d7:
                    f7:22:aa:ae:e5:c7:5d:25:3d:f6:9d:0d:ff:00:36:
                    15:31:9f:23:23:6a:ab:aa:f1:85:d8:e8:2e:c5:c6:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:24:02:3B:4C:AF:48:9A:13:E2:94:D8:03:86:A3:12:92:D2:A9:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b0ad1e-e174-38ce-aaed-098d98bfd723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:52:23:4e:62:84:93:93:c0:b9:6a:16:fc:46:28:3d:85:
         ea:c8:6c:f5:c5:26:79:fa:11:70:8b:85:6e:0b:46:19:cb:34:
         70:72:a6:ef:5f:ee:be:bb:46:ab:cd:3b:7b:aa:d7:5e:16:d5:
         df:1c:68:d2:cc:eb:a3:bc:9f:fa:bc:14:09:0c:1b:16:37:ea:
         32:7f:75:20:24:5e:30:79:f1:8f:d8:00:7b:c4:f8:ee:8d:6e:
         03:1f:9d:7d:40:4c:f1:74:3e:31:85:c5:84:ef:79:e8:85:1d:
         ff:84:f9:b5:fb:8b:c4:d5:d6:55:3a:af:88:99:4d:43:65:21:
         d3:67:99:26:b0:cb:38:68:c6:19:26:6b:28:ad:5c:51:bb:c8:
         c6:01:24:50:3e:ca:81:22:5d:9b:db:f0:29:d0:7a:d5:97:72:
         e3:f0:3b:c0:37:67:36:4b:6b:00:80:70:1c:89:60:a1:a1:80:
         ee:85:81:b0:93:b7:96:13:0a:14:eb:9b:65:c1:f8:1d:37:2b:
         9c:34:77:5d:97:06:f8:6b:0a:fc:da:4d:c1:0f:3a:f9:42:41:
         38:c1:fd:33:1a:94:d7:c0:58:67:0c:d1:2c:7c:f3:32:eb:df:
         66:c9:58:d5:3f:a2:97:0e:da:49:18:cb:e7:1a:2a:cb:f0:4a:
         36:5c:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:59 2025 by rpki-client