Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b61dda-a1fd-3395-9254-416ec9fc4c9f.roa
File:                     08b61dda-a1fd-3395-9254-416ec9fc4c9f.roa (raw, json)
Hash identifier:          GOeJQ42rG3XjF+kv5iuy8T32eT3iLHomyMixJNsKIj4=
Subject key identifier:   78:C1:B9:4E:BD:7B:F5:2A:D0:B1:83:EA:19:B8:DC:5E:22:19:F3:8E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B596F164E34C5C283A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b61dda-a1fd-3395-9254-416ec9fc4c9f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b5:96:f1:64:e3:4c:5c:28:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a26cb63b-3fab-49d5-a59f-57c3d9369535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:07:a8:52:4c:0e:86:ea:60:85:e2:ae:bb:
                    2c:47:d0:e5:11:5e:88:c7:b0:f9:a4:77:90:7c:67:
                    aa:82:38:bf:f3:a6:10:b9:11:0b:34:b2:20:d2:22:
                    02:3e:01:4d:de:6a:be:7b:a7:b1:49:07:e3:8e:68:
                    9e:24:3f:bd:c3:1a:3b:2c:34:ac:cc:67:84:8b:73:
                    87:27:b8:9b:03:0d:54:be:3f:95:4c:eb:f9:06:fe:
                    03:d3:8c:77:02:62:7e:bc:98:48:bf:fd:84:db:78:
                    b0:da:41:cb:01:d8:31:d1:2b:c6:e4:93:82:bb:d5:
                    67:e2:51:03:48:9d:12:1b:a9:2d:f7:f9:55:ca:00:
                    7c:ce:04:05:31:27:0c:7f:e5:88:99:85:95:b8:c0:
                    13:42:4f:6b:0f:13:c5:58:eb:17:94:e2:57:7c:02:
                    a8:7d:04:13:00:1e:fd:8e:94:54:d7:c4:65:c1:92:
                    ee:30:fe:17:6d:5d:29:d7:62:10:5c:2b:1a:43:84:
                    34:f4:d2:b1:ca:86:4a:97:06:ae:38:43:7e:0b:f4:
                    6d:f7:13:1c:1c:aa:f4:5b:8e:7e:1e:34:65:cf:a5:
                    59:59:b4:43:3d:fd:18:d5:ef:44:1e:29:7b:09:82:
                    ce:7e:d9:86:d6:48:ae:c3:a4:de:aa:ca:6e:87:70:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:B9:4E:BD:7B:F5:2A:D0:B1:83:EA:19:B8:DC:5E:22:19:F3:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08b61dda-a1fd-3395-9254-416ec9fc4c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:9c:5e:96:fd:28:85:fc:11:b6:a8:02:fb:17:cc:f1:3d:
         d6:fa:1e:0e:3f:22:7e:d7:83:b4:bc:34:00:bd:3f:b1:05:33:
         e6:d6:e2:62:72:90:a6:33:0a:1a:f6:63:9b:4c:f6:29:21:8b:
         40:52:55:d3:42:3b:21:dd:63:c8:35:07:82:81:1b:60:86:d2:
         f2:bd:b0:c5:fb:74:9b:f5:70:6e:62:c3:56:95:39:06:4e:f3:
         ef:3b:63:ec:ad:e0:67:f6:dd:e5:d9:70:ed:47:f9:bc:dd:40:
         55:8e:54:4e:bf:11:84:f3:b9:bf:ae:fb:53:27:08:36:b5:85:
         97:81:a2:d8:19:7f:05:a9:8b:ef:9b:0b:18:a5:35:17:db:d2:
         b0:41:40:43:c4:8c:98:5a:74:49:c0:95:c5:3a:69:2e:a3:b2:
         dd:76:8d:c8:96:61:2c:2c:51:a2:b7:dc:a0:b4:b0:62:ca:72:
         30:6e:34:2a:7c:d6:2a:8e:5c:5f:69:b8:21:59:e7:12:ce:0b:
         b4:83:12:19:fb:3b:cd:07:0b:6c:29:bc:67:57:09:0d:18:2d:
         43:13:6b:07:4a:bb:63:e1:7b:b4:4b:5e:b0:67:67:5f:39:af:
         a4:8b:f6:ce:e0:f9:2e:f7:c6:fb:f9:8b:57:77:1e:f9:56:6d:
         1e:7c:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:35 2025 by rpki-client