Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa
File:                     29b59850-75d0-35cc-8677-b593f8d2b02b.roa (raw, json)
Hash identifier:          i0OgedgZ/d+5ob6dUPjjnnRAQCrnXLSGD0sDBeNCqvg=
Subject key identifier:   4C:22:D7:22:95:10:40:CE:DD:28:CF:F3:7A:25:36:01:C2:94:81:E4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A6FC098AB3B8C3E7D4D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a6:fc:09:8a:b3:b8:c3:e7:d4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6a06e0ac-15e9-4a9b-88f0-1588392af7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:48:10:e3:6d:26:90:a6:b0:ed:e2:31:d7:ce:
                    46:f9:fc:80:a1:60:c3:1c:06:60:be:85:a1:79:e9:
                    a3:89:4f:91:b4:8b:6e:2d:77:a1:7e:d2:ec:b8:f9:
                    72:a0:fd:21:c7:f8:e9:a1:07:f8:bf:c6:81:6b:9a:
                    23:b9:09:f4:f0:a0:f3:63:fa:0c:53:f0:b4:9f:8b:
                    27:c8:71:5a:0d:7d:6f:02:08:92:77:3c:c1:c6:dc:
                    47:3c:83:9f:a9:ba:22:4e:7a:6c:9a:bd:a8:88:0e:
                    f7:7c:48:09:1a:c3:d7:5e:3a:8e:f6:2b:ef:bc:70:
                    2c:02:f0:2d:65:1a:70:ba:65:04:a7:b0:a0:8d:8f:
                    d2:02:3b:3e:46:1e:2b:93:98:01:0a:8a:66:e7:47:
                    e2:8a:56:d8:56:d5:74:60:ad:d6:e1:0c:98:0e:04:
                    00:3f:15:45:d4:67:67:d6:86:0d:a9:31:39:c9:0c:
                    f6:76:a3:b9:7b:31:46:52:1b:bb:c1:d4:5b:1f:45:
                    05:19:e3:82:f9:95:e4:2c:00:f7:5b:5f:6d:fe:23:
                    91:b5:88:a1:70:28:c5:2d:82:50:9b:f7:e5:26:05:
                    33:29:0b:70:14:9c:06:9a:1b:1b:39:84:5e:14:53:
                    84:6b:fe:f1:93:77:c9:11:09:67:2f:bf:70:1f:88:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:22:D7:22:95:10:40:CE:DD:28:CF:F3:7A:25:36:01:C2:94:81:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1e:09:31:48:04:27:cf:52:32:92:69:8e:09:52:61:5d:c3:
         d8:e0:5d:36:f8:76:3f:11:1f:a9:ec:d2:6d:a3:c5:6f:b6:fd:
         ed:fd:39:df:21:30:27:5f:f6:e3:18:29:95:2b:50:47:e4:3e:
         88:ea:b7:9c:8f:96:59:d8:4e:f5:bb:07:9c:f4:18:84:aa:1a:
         60:37:d1:d7:b3:44:39:df:44:ad:8c:4d:29:b2:66:0a:4b:a7:
         6a:2a:3b:b2:ae:0e:67:51:9d:cf:3a:4a:1c:e6:36:0a:46:a8:
         79:5b:ac:05:5e:cc:f7:ea:5f:6b:76:c2:b7:7a:96:96:12:bb:
         5c:c3:42:e3:ea:53:19:7e:2f:70:4a:59:6c:19:e9:e3:f2:b9:
         2e:c1:64:b0:61:eb:b8:cd:22:ae:b0:ad:f9:4a:72:03:7e:50:
         ba:a0:22:67:b4:4a:66:6a:79:2a:ec:d1:0a:52:d6:0f:14:84:
         01:18:fa:11:58:03:f6:81:a6:23:78:99:1f:8e:4d:4e:e4:b5:
         17:2f:fb:6e:3e:de:e4:77:93:d1:b5:2a:56:9d:0f:49:76:e5:
         78:ee:aa:db:14:c2:e5:d1:c8:51:71:e9:84:05:9e:e1:04:30:
         a9:f4:e0:d9:e9:6d:da:ed:77:19:88:40:17:20:39:02:6e:de:
         6b:bb:fc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:16:37 2025 by rpki-client