Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32a97a84-51c7-38c5-a094-bfc3cee23525.roa
File:                     32a97a84-51c7-38c5-a094-bfc3cee23525.roa (raw, json)
Hash identifier:          vJIk82r4a5XohMAGU9j+TTCIdhobDpg8+AmAn6fZauQ=
Subject key identifier:   FF:56:85:C6:AD:89:66:17:02:42:8B:7D:63:1B:86:10:75:A5:55:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B357C4E51A4A7C638A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32a97a84-51c7-38c5-a094-bfc3cee23525.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b3:57:c4:e5:1a:4a:7c:63:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5960c80b-700c-4a78-8f13-fa96ba567ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ae:59:9c:0f:af:a2:5d:f9:78:33:67:08:2e:
                    e0:b7:ab:bc:4c:ad:26:e1:aa:d5:2f:05:c8:62:c1:
                    33:4c:a1:a0:41:a5:17:b0:d0:73:ca:91:6b:c6:2e:
                    35:97:f0:aa:73:f4:27:a3:98:3a:1b:54:37:32:9f:
                    0e:a6:42:fc:6b:88:be:b9:7c:ba:43:e6:6a:fa:29:
                    28:12:ce:ee:a5:38:50:40:29:12:91:65:19:b1:84:
                    8b:05:9e:c8:4e:3a:fb:e2:cb:1b:72:68:d3:95:d0:
                    d5:6b:fb:88:c7:1e:94:fd:9d:28:04:bd:e5:29:67:
                    e0:1c:67:2b:c8:8f:78:e9:24:86:65:ca:9b:ac:36:
                    cd:23:fc:5d:fc:13:0c:0f:4f:05:86:ff:a2:eb:d6:
                    16:a4:f2:2d:0b:3a:63:83:ea:61:c8:46:01:ec:7e:
                    50:26:ce:c8:ca:33:2e:bf:7e:39:e0:d3:e5:db:3e:
                    55:6a:07:e4:7b:88:6a:2a:1f:8b:57:52:c1:fe:4f:
                    98:1b:3d:23:2d:2f:43:e0:df:7e:03:95:c6:7c:75:
                    1e:71:b7:d3:4f:55:55:24:86:72:4a:af:71:47:73:
                    32:a0:ee:49:bd:99:b2:18:f1:5a:c3:e4:19:81:cf:
                    1c:c9:22:c5:1d:92:67:28:af:5d:5e:52:6b:3c:d1:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:56:85:C6:AD:89:66:17:02:42:8B:7D:63:1B:86:10:75:A5:55:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32a97a84-51c7-38c5-a094-bfc3cee23525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:ed:3c:f1:b6:2d:b9:c8:27:2f:da:98:b8:97:15:c0:45:
         9c:fd:5c:41:b4:41:e8:ab:ff:35:5d:50:d5:fb:4c:a2:88:52:
         f6:a5:a5:05:1b:11:b6:52:35:84:d1:63:67:63:94:02:18:e4:
         8e:9f:90:7f:4f:e5:c1:41:ba:d0:1b:c1:f1:7b:69:70:12:7c:
         7e:17:c4:cc:bd:06:c2:b7:b3:1c:c4:1c:39:5f:fe:8f:b8:49:
         e3:87:09:fa:3a:9d:01:50:c0:85:1a:b2:96:d0:56:da:0b:c7:
         d0:5c:09:dd:fc:49:a8:d0:9c:2b:f0:20:db:fc:e0:f6:00:46:
         d6:61:17:95:d3:89:02:3c:8e:fe:3e:ef:5a:d8:91:30:8b:14:
         c3:86:1f:1d:3e:33:23:b6:d8:69:dc:85:7b:29:ff:79:b3:6b:
         ce:19:7b:1c:eb:f2:a8:ae:14:66:25:9c:dc:24:56:e8:69:37:
         fb:83:79:0e:19:d9:82:3a:a9:7f:47:72:be:c7:e8:af:37:af:
         aa:18:83:5b:28:16:5f:e8:3a:2f:e8:43:ce:07:13:8e:89:d3:
         1c:4b:07:9d:8d:cb:49:ae:3b:14:9a:b0:e2:6b:a0:b8:aa:30:
         31:c8:ea:dc:6e:cc:55:a4:de:d3:73:1b:ad:76:a5:1f:7d:49:
         62:6a:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:30 2025 by rpki-client