Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23af937a-f7c2-3a21-8c1d-a3fb4f195732.roa
File:                     23af937a-f7c2-3a21-8c1d-a3fb4f195732.roa (raw, json)
Hash identifier:          d9tP0MKc+bJM9HFp4gvz4TMUTqexMFUvHWOgj+oLoOw=
Subject key identifier:   54:34:E8:4D:59:35:62:66:12:6C:49:EF:6D:16:22:12:A3:78:18:0B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581175F4A8AA2B7864E6B60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23af937a-f7c2-3a21-8c1d-a3fb4f195732.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:17:5f:4a:8a:a2:b7:86:4e:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e0f69773-3bda-4091-8c74-baee1bcd2b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:ef:99:4c:48:11:77:b9:56:e0:ae:fc:7b:
                    40:f4:8b:9d:54:c3:07:f1:a0:fc:98:df:f2:fb:49:
                    6c:c3:54:6a:ba:2f:82:d4:63:64:04:49:84:7b:55:
                    37:48:76:20:6a:a1:ca:c5:76:3f:bc:51:68:7d:70:
                    99:49:86:58:75:2e:17:9d:af:8e:11:35:f9:75:1f:
                    c8:fd:1c:0b:eb:24:2f:2d:42:9c:56:f5:88:99:16:
                    b9:86:8b:e2:fb:40:9e:1d:50:e3:22:74:e3:cd:44:
                    fe:60:b0:22:b2:ea:ec:6e:e1:8e:0d:b3:92:12:66:
                    04:fe:24:0a:9b:ae:01:be:1c:19:b8:41:2f:1c:ca:
                    8f:01:e0:a3:19:58:e3:9c:86:45:d2:35:27:8e:5d:
                    d6:a2:97:9c:21:8a:97:6b:14:85:d7:38:de:b5:9a:
                    10:e2:15:5d:fb:be:97:b8:ee:ed:21:b0:b9:f0:5f:
                    6c:ec:26:6a:be:b6:52:dc:e9:ea:76:89:63:e8:ea:
                    a5:2d:fd:6e:f1:ea:50:e6:59:d6:67:c7:3b:ec:87:
                    34:b7:47:eb:c1:80:66:ac:f8:22:67:64:51:a3:44:
                    49:73:96:eb:29:af:66:da:05:f7:b5:bb:75:7f:53:
                    4b:c7:21:2e:a7:b5:25:48:27:2a:c8:a3:b5:75:28:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:34:E8:4D:59:35:62:66:12:6C:49:EF:6D:16:22:12:A3:78:18:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23af937a-f7c2-3a21-8c1d-a3fb4f195732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:f0:25:01:9a:ad:f9:cd:3f:c8:04:dd:38:ac:e6:38:a5:
         dd:6f:bc:b2:d4:ee:17:6f:af:fe:40:6e:9f:d6:32:4f:ba:86:
         e2:7d:80:57:50:74:8a:cf:3f:98:e5:26:32:54:a9:50:84:71:
         7c:fc:32:f7:ed:c6:70:e7:e0:55:35:b3:99:d9:61:cb:a8:b7:
         de:54:ad:81:cd:d7:89:87:70:e0:d1:b4:58:89:8e:94:ea:92:
         45:01:e4:24:b3:fb:49:5e:08:d3:f5:e8:21:c7:ff:9f:c7:24:
         39:f9:99:bd:7b:ff:a0:4f:18:0a:c7:d2:01:6c:c3:47:87:25:
         ff:59:02:0c:a7:78:71:0a:41:fc:f3:8c:7c:07:c6:55:e0:c2:
         d4:35:d4:84:25:88:d8:a2:50:3e:3d:d9:db:9e:ba:31:52:d4:
         be:9a:1b:e1:2c:6b:b4:1d:de:33:72:c4:3c:80:3b:46:23:6a:
         a1:6d:35:2d:35:2f:a8:0f:3c:20:2a:ef:ba:83:5f:b4:6d:59:
         02:c9:a8:b2:84:49:69:f7:b9:c5:6f:56:a7:7a:f2:b5:aa:08:
         88:23:86:0e:7c:55:c6:99:e8:61:ea:14:de:08:4e:03:42:27:
         cf:f0:29:40:33:41:8e:db:03:98:3a:e6:d9:b4:0f:c8:b5:ce:
         f1:61:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:40 2025 by rpki-client