Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51dedb7a-de3b-3d35-977f-0128d249ce02.roa
File:                     51dedb7a-de3b-3d35-977f-0128d249ce02.roa (raw, json)
Hash identifier:          7742k+nc1Vv3A1LfuC2nMZ6YiurGWSXhLLxZNSy8BBg=
Subject key identifier:   A9:D6:B8:41:98:E6:B5:A9:0B:DF:45:97:F3:D6:E5:15:E7:07:38:44
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA751E8C63AF3D2A0B2840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51dedb7a-de3b-3d35-977f-0128d249ce02.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:75:1e:8c:63:af:3d:2a:0b:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=04d4f8e5-743a-4d53-8ecf-60a6bc07acc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:ec:ec:30:87:4e:d9:db:b8:df:03:d2:9c:
                    fb:49:e6:5e:a7:2b:15:9a:2c:71:8c:12:be:c2:14:
                    df:b3:a6:1b:d0:39:ae:2b:8b:df:94:ad:6d:51:c1:
                    03:3a:ae:15:18:de:90:a1:aa:3c:75:05:31:e7:d9:
                    0c:b5:8d:14:e1:39:6a:99:62:f2:9c:94:23:31:f4:
                    76:2d:1f:66:bf:41:63:94:1b:11:3d:7e:6a:90:19:
                    bd:ca:24:40:d6:02:c3:1a:0a:b5:0e:d9:f3:a0:a4:
                    a4:10:76:c3:8d:93:14:09:df:11:15:2f:09:6d:08:
                    b6:c1:48:05:8b:57:c0:38:27:53:75:20:e7:b8:28:
                    fe:83:21:1c:c8:96:0d:f1:bc:40:25:23:59:24:7c:
                    3d:12:a3:df:51:fe:c8:00:76:2a:4e:bf:cb:70:32:
                    da:bc:90:95:86:43:7a:3d:70:fa:f2:95:35:5f:d9:
                    d0:f5:fc:e2:59:e8:ba:67:33:a2:91:98:ea:84:40:
                    33:16:6d:82:f4:35:35:a9:a7:4e:e5:2a:71:6f:9d:
                    13:ea:5e:1e:aa:a2:49:ca:99:43:79:92:f0:e5:6f:
                    e4:20:78:6c:25:b4:88:1f:54:4b:8a:48:a2:50:29:
                    bf:4e:ee:1e:58:69:05:49:4d:ba:fe:ac:6a:24:db:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D6:B8:41:98:E6:B5:A9:0B:DF:45:97:F3:D6:E5:15:E7:07:38:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51dedb7a-de3b-3d35-977f-0128d249ce02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:30:c9:fc:54:39:89:3e:5c:5d:ac:e0:0b:3f:a8:f2:e8:6d:
         04:5b:0d:d7:7d:6e:38:b9:51:a9:23:24:0c:b9:f3:be:d5:dd:
         18:48:6d:bc:37:53:73:96:7b:16:ac:3c:17:2a:88:53:c8:68:
         a7:2a:07:5d:d2:40:b1:c6:97:98:8d:a6:3d:fd:8f:8c:a8:66:
         d1:9c:7a:08:7c:ef:b9:ad:a9:cc:16:13:5d:d8:cd:d2:42:85:
         65:3a:bf:45:de:6b:1c:1a:bb:0b:fb:f1:91:fd:63:0c:51:6e:
         e8:4d:f4:0a:08:77:97:63:3c:32:60:c5:a1:7a:7c:bd:03:f5:
         0d:dd:4d:c4:c4:79:f3:fb:02:c1:6a:e6:16:37:33:33:7d:1d:
         1a:bf:ee:68:21:a4:48:50:ed:d7:72:9b:40:1f:36:0c:52:d6:
         e6:07:d2:ed:80:c8:16:18:61:ef:f6:a2:20:e7:63:d5:48:ab:
         66:55:99:39:78:26:19:d5:73:9a:f7:1d:1d:f1:0b:df:e5:93:
         6a:f8:8a:98:82:ad:06:17:bf:06:d1:f0:3c:83:02:2d:98:68:
         eb:5d:87:47:19:dd:21:28:16:dc:ce:46:d6:72:56:c3:4e:74:
         fb:88:bb:66:4c:55:c8:52:f2:eb:86:a7:c5:46:ec:08:37:e2:
         69:88:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:20 2025 by rpki-client