Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eea7239-9c2e-3358-8990-147f10516947.roa
File:                     3eea7239-9c2e-3358-8990-147f10516947.roa (raw, json)
Hash identifier:          T0rdHb3wTJ7TIOpEti6teO3BJUPq9hAW6eOiRIcvZOY=
Subject key identifier:   30:16:22:5E:A0:C7:35:AB:81:B6:6C:EA:A1:89:4C:1F:FE:44:EF:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B2AAD7CC5C48C3906980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eea7239-9c2e-3358-8990-147f10516947.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b2:aa:d7:cc:5c:48:c3:90:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=cd21ab66-3238-4b72-8da4-ff59a3b9e3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:3c:c5:63:f6:90:80:de:35:89:f1:fa:cd:
                    d2:d1:af:67:e1:31:fd:8c:56:aa:01:d1:f7:6e:af:
                    1d:1b:4f:3c:fa:84:06:c7:b0:06:8f:87:40:ed:62:
                    0b:e8:ab:a2:61:6b:26:a2:44:4b:4c:32:3e:22:a9:
                    59:b5:b6:8c:98:c8:5f:3d:a1:f4:b7:79:a1:55:64:
                    76:be:9e:96:92:53:9d:9c:14:c5:e4:1c:f2:38:3a:
                    fe:e5:08:02:19:fa:a1:a1:5a:92:30:cf:fa:7b:f6:
                    8b:db:a4:c6:23:c6:62:25:72:5f:9d:46:0f:f5:7a:
                    31:4f:d3:31:40:ac:3d:3f:ef:68:46:1a:23:c8:bb:
                    27:45:ce:2b:47:dd:e9:bf:c8:0c:9d:fc:30:58:2a:
                    ff:53:24:b7:5e:c7:8e:27:37:b7:41:a6:fa:73:8e:
                    cd:23:1d:fc:7a:51:7d:6a:24:36:5d:2c:ff:ae:a0:
                    1e:a1:4a:3b:a9:0f:92:5d:10:71:d6:29:82:fe:fd:
                    73:98:1c:c6:74:59:59:8a:47:7e:b6:fb:ff:92:c1:
                    b5:12:29:cc:8f:77:5e:63:c1:0e:9f:f0:b7:fa:b1:
                    c3:ed:ef:66:e0:51:fd:13:d4:1a:5b:ef:b5:90:32:
                    9c:73:86:2b:a7:09:e3:97:79:a2:e7:b8:51:d0:3d:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:22:5E:A0:C7:35:AB:81:B6:6C:EA:A1:89:4C:1F:FE:44:EF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3eea7239-9c2e-3358-8990-147f10516947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:15:01:cf:36:67:ab:12:12:26:83:be:a2:4a:f2:b4:ee:
         94:0e:86:28:7b:53:dc:cc:49:ee:77:8b:21:f6:f6:9d:cd:1d:
         a9:8e:64:1c:30:65:b0:5a:d7:0a:2d:b9:be:4b:f5:b3:14:ad:
         71:3e:dc:44:57:99:f2:f1:02:9c:e4:9b:34:9c:18:db:62:dd:
         5f:ba:45:a0:2a:f5:f0:2c:fb:bb:cd:6a:c0:96:5e:91:71:8b:
         ea:d0:3d:b2:8d:8a:d3:93:ab:c8:4f:60:aa:d5:df:01:1d:f1:
         44:3f:06:aa:b0:2b:b2:31:2e:22:cf:ac:ce:cc:d0:19:b5:6a:
         d2:4c:e7:dd:d7:58:dd:2c:59:9c:46:75:88:25:9d:fc:d7:6f:
         27:ca:0c:64:d6:88:00:a5:7d:92:a4:a1:ed:7c:c4:8c:73:f9:
         43:ff:4a:14:48:bd:f7:00:a6:08:87:bc:47:88:f2:bd:e5:82:
         26:69:97:e5:0b:2c:39:e4:ec:bf:27:6e:69:22:b7:b2:88:b6:
         08:48:97:b8:bc:75:b8:81:8d:87:78:e7:46:55:c4:72:74:21:
         82:d6:68:69:e7:bf:e9:60:0a:a5:b4:a0:bc:90:de:07:98:5e:
         04:d0:dc:6e:9d:36:89:14:85:54:69:38:16:d8:95:24:b5:52:
         2b:bf:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:35 2025 by rpki-client