Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63bdb2bc-afa7-373e-8687-470f07ee413d.roa
File:                     63bdb2bc-afa7-373e-8687-470f07ee413d.roa (raw, json)
Hash identifier:          Zt47dbbRpUVmxU3hwaXi/3lNAItFjjJ4fLtSE3BDCco=
Subject key identifier:   BC:EC:BD:7A:B8:0B:11:FF:28:6F:A4:CB:AE:4C:94:9F:34:2C:AD:2A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A69DB89256B6EB3E9D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63bdb2bc-afa7-373e-8687-470f07ee413d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a6:9d:b8:92:56:b6:eb:3e:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=a32a8e6f-6025-4493-b12b-56b6718e542f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:44:ef:8f:68:af:0f:67:19:c8:3e:77:1d:
                    ed:4c:4d:a9:ed:1c:c7:5a:ec:43:9b:74:91:57:d1:
                    55:68:60:e6:62:8e:86:34:95:c9:79:65:9e:f4:ce:
                    1d:f2:ee:c8:13:f6:44:39:a0:8d:70:26:59:d0:59:
                    01:e3:3e:43:bf:04:bd:7c:56:18:b8:f8:fa:fc:e1:
                    fa:20:fa:54:be:f3:d9:f8:c7:3d:71:68:d5:9e:c4:
                    9f:8a:57:2e:8d:9d:08:39:34:f6:18:e4:9f:9b:dc:
                    f0:f7:0e:c4:84:cb:4b:f5:4c:03:74:b0:20:b2:15:
                    63:c5:bf:29:b3:ba:dc:63:d0:f9:ce:48:9e:65:94:
                    47:53:7b:29:25:aa:6b:27:20:b8:ce:95:24:1a:93:
                    72:e3:02:80:7a:c1:90:b3:a4:58:2d:34:51:16:bb:
                    b0:40:53:8b:42:eb:9e:d0:18:87:5b:b8:16:ad:97:
                    9f:fa:ea:d7:40:e7:59:0a:80:59:99:28:b6:1b:64:
                    2f:98:00:9d:b3:50:0a:88:cb:e9:56:55:30:75:d3:
                    72:42:d3:33:11:6a:8c:7d:9e:ee:cd:d5:ac:fe:41:
                    45:a4:f0:3f:a6:91:dc:8e:9e:32:0e:e1:a5:2b:58:
                    5c:90:db:02:8b:94:3e:0a:31:e8:f7:47:f6:01:3b:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EC:BD:7A:B8:0B:11:FF:28:6F:A4:CB:AE:4C:94:9F:34:2C:AD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63bdb2bc-afa7-373e-8687-470f07ee413d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:86:ae:16:17:cb:4b:b1:7c:0d:1e:69:aa:15:ff:65:01:61:
         81:7a:d5:16:31:4d:32:21:a4:be:80:1f:7c:64:5f:a7:eb:bb:
         46:17:de:a7:c8:c8:36:5d:df:0b:d3:f4:c2:36:4d:a7:24:5d:
         af:13:b1:65:70:74:32:6d:8b:47:92:c5:0b:6b:63:90:7c:3c:
         83:07:c7:ba:f8:ac:75:5e:19:d8:c3:43:a3:51:b2:54:fa:1f:
         0b:ae:20:4c:72:12:5b:d6:2e:46:0a:c5:c2:db:ce:58:14:f0:
         be:d1:45:cf:60:b3:22:64:0c:c4:69:18:ff:83:0b:0d:34:22:
         09:2d:77:f6:f1:77:f3:b9:93:7c:a4:81:6c:eb:80:35:31:a9:
         55:63:10:e6:1a:68:4c:b6:81:28:45:cc:63:01:c6:c4:73:70:
         d2:9f:91:c8:28:6b:2e:f7:00:0f:23:e6:e6:dc:e0:27:78:2f:
         c6:5c:02:7f:1e:69:36:27:84:c5:f6:3c:35:84:32:b7:27:e3:
         72:e1:49:88:3b:31:9b:cf:e8:98:fd:94:9e:de:0f:db:79:cc:
         ea:61:cf:93:2e:f4:5e:51:37:64:b7:4d:4a:25:d7:83:63:3a:
         05:c4:66:57:8e:b2:f1:cf:60:3a:8d:d5:9a:45:ed:d5:5b:6b:
         6e:e8:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:12 2025 by rpki-client