Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/166bbaf1-038f-34a8-bd00-e463cb5afc02.roa
File:                     166bbaf1-038f-34a8-bd00-e463cb5afc02.roa (raw, json)
Hash identifier:          zQH0qRXCSW5LHjyGh9e9iziB4VAHYdKnfADzZMzm0jE=
Subject key identifier:   1C:AD:13:21:EC:99:D9:C1:0D:28:BB:8F:45:25:34:62:0A:46:B6:60
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811F618735D1330C3E12C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/166bbaf1-038f-34a8-bd00-e463cb5afc02.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1f:61:87:35:d1:33:0c:3e:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9160179a-7752-4954-8456-13b1b97a4897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:03:55:69:b8:44:a0:1c:18:37:8e:35:a1:22:
                    08:b2:b7:d7:32:90:1c:59:55:fc:b7:ac:20:d8:f7:
                    d3:05:9d:86:27:c3:c8:51:23:b8:1d:a8:c9:a0:c5:
                    ad:cd:8f:06:02:9e:ac:11:a4:c3:19:67:1f:8c:3b:
                    f5:f9:30:29:9c:1b:9a:8f:09:1f:d2:26:46:bb:8b:
                    24:b8:36:2d:e3:13:c5:78:c3:0a:4d:9e:2d:c9:6a:
                    a2:8b:ec:67:63:4e:5b:3e:23:60:ac:15:fc:94:c1:
                    07:87:08:a8:55:29:22:a6:74:c7:c1:f1:e2:d4:d3:
                    38:c7:67:ab:c5:e6:9d:11:c6:4e:36:58:ab:c1:58:
                    88:2b:65:48:8a:ab:ef:86:9f:d4:38:ec:82:7d:5b:
                    ec:26:2e:c8:30:79:a7:82:53:a4:0f:30:76:64:d9:
                    8d:aa:1f:3f:a9:97:34:fa:e9:d6:4c:c1:54:ca:35:
                    0f:fb:0f:f8:32:31:5b:ea:c2:69:35:06:af:c0:d3:
                    c4:19:01:2c:81:fb:12:71:08:bb:e6:a1:24:c5:c9:
                    25:a7:21:d5:ad:0e:ab:8b:2c:55:31:b8:38:26:61:
                    a2:07:a7:16:60:81:70:87:d1:6b:18:f8:27:a4:d9:
                    77:df:52:65:35:bb:08:58:70:9d:86:b0:e3:dd:4d:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AD:13:21:EC:99:D9:C1:0D:28:BB:8F:45:25:34:62:0A:46:B6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/166bbaf1-038f-34a8-bd00-e463cb5afc02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:c8:0f:e9:c0:40:23:91:47:7a:e3:38:6f:d8:6e:72:7b:
         eb:e4:bb:80:5d:99:1c:30:f6:a1:d6:83:0b:52:34:d6:96:16:
         5d:be:c3:ca:c0:66:9c:21:36:44:f5:15:fd:15:fb:2b:31:b9:
         c9:3b:50:df:87:8b:80:8b:0c:2d:a3:59:eb:51:bc:70:63:03:
         a8:25:77:01:78:8c:e6:ba:3b:69:18:51:55:a9:85:6f:f5:9c:
         06:fb:4e:e2:93:5f:8f:a8:1b:e0:a6:db:f3:2c:4e:7e:e5:ee:
         5e:0e:f7:da:a4:1d:98:fb:3c:10:0e:22:80:16:9b:61:35:b4:
         39:38:77:08:6f:df:db:95:a9:fb:75:95:25:a2:eb:25:0d:89:
         a4:67:69:db:46:91:d2:f4:f5:d8:e0:b4:28:df:a1:58:c6:fa:
         c5:2e:f8:50:fd:0c:c6:84:9c:f6:9a:83:34:f4:87:68:b6:d3:
         a8:ee:85:a2:2b:a3:4f:e3:31:0a:e8:5e:a8:f8:6e:eb:6a:1c:
         20:b2:95:92:d8:92:71:59:53:e7:0b:43:bf:a0:d0:b2:b9:e1:
         0b:ef:9a:b8:29:f9:11:3e:12:90:93:1f:1b:95:33:e4:8a:9b:
         83:f1:88:1f:c9:0b:c4:79:7f:a9:7b:8a:d4:65:08:1d:60:ba:
         b8:26:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:03 2025 by rpki-client