Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cd01525-05e2-3f19-ba84-1337ba8d0008.roa
File:                     5cd01525-05e2-3f19-ba84-1337ba8d0008.roa (raw, json)
Hash identifier:          VzMONbnO8GPPlJ57ZXulJM8gs5pFkrBcud8QX8KzfMU=
Subject key identifier:   9C:B5:42:8D:66:EB:30:85:B6:8D:3B:E3:39:B3:B9:BE:7A:BE:0D:F1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581AD3324CA6EE56DCDBF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cd01525-05e2-3f19-ba84-1337ba8d0008.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ad:33:24:ca:6e:e5:6d:cd:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=c8f05317-72ce-46f5-a076-6aea92d95971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a3:e0:88:df:86:a9:54:30:c6:0c:b4:3c:0f:
                    7d:9a:f9:98:8b:41:fc:3f:46:05:12:a4:a6:f7:a7:
                    da:66:38:0d:b6:09:92:14:24:07:16:28:7c:3e:92:
                    82:09:fe:f6:08:c4:e5:2e:81:93:35:15:37:26:54:
                    1a:15:3e:74:a7:61:66:13:dc:e9:0d:f4:10:18:34:
                    b5:e0:75:9c:80:23:76:6f:82:1e:7f:3c:eb:93:fe:
                    d6:a8:82:d7:e7:20:50:b7:25:91:db:2d:3d:21:28:
                    58:92:bf:19:e4:4c:bf:77:28:8c:d0:09:d1:31:14:
                    e7:74:a3:a1:ae:51:d2:8a:f1:84:1e:ce:cd:a1:86:
                    c6:d6:2c:1e:98:b0:87:f6:fd:36:ca:1e:ca:2c:f5:
                    a5:ab:20:71:88:b0:c7:c6:77:a6:3f:1e:3a:bb:88:
                    b0:28:a4:11:dd:7c:59:37:af:4f:a3:07:c8:e6:a4:
                    8a:34:c0:67:e5:ec:6c:17:df:ef:d2:d9:4d:9b:9d:
                    98:53:74:a7:ab:5a:07:c6:a4:c8:f1:33:49:b0:74:
                    81:ab:49:1b:cc:67:ce:d0:85:17:3b:d0:e1:86:83:
                    25:5b:60:8a:6f:84:e9:03:7f:9e:c5:3c:f2:03:bf:
                    62:28:64:23:06:b9:58:e6:f4:8f:fd:85:33:f4:ef:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B5:42:8D:66:EB:30:85:B6:8D:3B:E3:39:B3:B9:BE:7A:BE:0D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cd01525-05e2-3f19-ba84-1337ba8d0008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:bf:e6:52:9b:5a:4b:74:0b:9a:cf:33:dd:ca:75:5c:4f:
         40:21:37:ae:77:13:f0:cb:48:54:02:83:d6:6b:87:97:2b:91:
         9d:3b:54:31:36:07:0e:16:34:78:c6:df:d4:d5:d9:9f:c8:52:
         53:54:47:bf:5b:65:c5:ea:81:d7:eb:99:ba:52:de:49:d8:d7:
         ce:87:54:b2:0d:fc:76:ee:1f:d8:f4:c6:f6:48:3b:3e:27:7c:
         38:dd:25:40:3e:e5:b1:e0:f6:67:f0:22:6d:b6:6e:32:44:7b:
         c9:bc:51:b8:dd:80:80:f0:76:ad:73:63:5a:cf:c6:4d:97:5b:
         aa:df:4b:51:bc:2c:c7:ae:c1:5e:1c:c1:c8:ed:89:09:61:5b:
         0c:30:d8:57:f0:b4:f5:b8:27:15:3b:42:b1:07:50:4b:af:22:
         a0:68:ca:ad:96:1a:8e:3a:70:d0:f3:35:69:f9:cc:f3:62:00:
         89:df:07:d4:a8:57:ca:88:10:9f:9f:ec:f8:cb:5a:4a:82:3e:
         7a:4a:7b:2c:fa:86:05:54:ea:19:78:59:48:9b:72:b6:8a:63:
         b8:49:09:6e:fd:b9:a2:d4:76:c1:60:d5:14:46:02:88:77:64:
         1f:ca:9b:14:cd:7d:a3:e1:9f:fb:78:62:8e:81:0c:1b:40:2a:
         46:99:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:00 2025 by rpki-client