Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284210ad-d5b3-3dc0-b949-cbb894976ef9.roa
File:                     284210ad-d5b3-3dc0-b949-cbb894976ef9.roa (raw, json)
Hash identifier:          5NVZRLrqN9pDvNwsbZPk5fWYoc+RObpRzGJni+JZMlk=
Subject key identifier:   5A:CC:6F:D4:71:7A:F5:6B:DE:4E:0E:5D:9D:78:5F:CB:88:8F:5C:7A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811F37C8CCA4DD5A7A8280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284210ad-d5b3-3dc0-b949-cbb894976ef9.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1f:37:c8:cc:a4:dd:5a:7a:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=49fdd95a-f1fb-4c3c-a61b-a8cbf68bab89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:7d:e1:2a:27:7a:59:6d:35:6a:fd:e6:4a:
                    bf:4e:fc:68:a6:43:87:16:cb:8d:e9:ce:c7:7a:c0:
                    db:4d:5c:71:5f:7e:f5:4f:4d:2f:0b:1f:69:69:69:
                    9c:0c:31:6f:47:29:70:37:66:74:f7:8c:9e:1f:66:
                    06:f6:46:71:49:f8:0b:e7:34:57:62:69:18:1c:30:
                    a3:80:54:b7:07:51:36:c2:55:1b:a9:34:76:ea:b8:
                    cc:6a:a0:4f:f9:53:d5:1b:93:4a:5f:db:f7:13:7c:
                    d3:b1:3e:0e:8e:00:db:32:0b:fe:29:94:08:e8:f2:
                    f4:77:1b:d7:9e:6d:0e:fe:e0:ae:13:c8:46:71:25:
                    e3:ab:3f:2c:38:b8:9d:d2:69:de:42:59:31:d7:a4:
                    a0:c4:2d:e2:2d:18:ea:3d:d7:c6:8d:1a:75:7e:f2:
                    27:ec:82:5f:d6:d7:7a:a2:61:8b:d2:8a:3e:02:b0:
                    85:22:1d:e1:f1:32:7f:4d:bf:85:32:c0:74:a3:31:
                    f7:7b:2d:ae:49:9a:81:ec:4f:a6:c2:6c:1f:c1:4d:
                    91:21:c9:eb:5b:ba:fc:cf:ec:28:8f:f6:0c:57:3f:
                    12:d6:3b:c7:d6:e0:95:8c:00:0e:c5:7b:79:5e:26:
                    72:a8:d0:47:c8:fe:ed:ff:a7:5c:cd:e0:69:f2:ea:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CC:6F:D4:71:7A:F5:6B:DE:4E:0E:5D:9D:78:5F:CB:88:8F:5C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284210ad-d5b3-3dc0-b949-cbb894976ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e4:48:85:a5:23:72:6f:4f:19:47:a7:78:47:47:47:0d:3c:
         ff:3d:46:e0:d9:c4:3e:e3:6e:a1:3f:11:a2:88:a3:e2:11:20:
         a7:57:24:a8:4d:29:ee:f0:04:85:5b:fc:19:b8:ea:0f:fd:5e:
         2b:cc:9f:35:04:cf:3f:b3:44:40:06:e6:ce:41:15:cd:d2:fb:
         30:c1:bf:56:ec:44:4f:44:e0:d1:d6:01:ec:c0:90:f9:6a:87:
         4c:ad:54:93:ba:8d:17:c0:dc:cc:fd:53:9e:4a:1e:24:1c:bb:
         2e:a0:32:6a:f9:b2:c6:b5:41:f3:89:c8:6a:5b:5a:6f:66:1a:
         85:47:24:6b:3f:7c:d1:99:fe:2d:02:43:93:71:51:64:d6:e3:
         4a:35:90:f1:88:c8:d1:9a:3f:f8:35:6d:e0:1c:1b:f8:56:06:
         c1:3e:1c:e7:fc:44:db:04:62:5e:f7:fd:6e:12:37:1d:5f:a9:
         cd:d4:19:fe:0c:2f:25:2e:9a:d2:ef:25:41:0e:77:aa:36:ff:
         81:f9:63:60:2e:40:db:eb:6c:ed:4b:19:47:56:c9:92:d6:0d:
         63:3b:a7:2a:d3:7a:fa:09:75:cc:a1:06:42:f2:69:82:da:c6:
         e0:c1:52:ae:2a:59:81:d9:30:3f:12:ae:83:c4:07:3b:f8:2c:
         b1:c2:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:51 2025 by rpki-client