Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71d503e7-e0ea-3f93-8dac-fbde679b15b0.roa
File:                     71d503e7-e0ea-3f93-8dac-fbde679b15b0.roa (raw, json)
Hash identifier:          MqjVINyraiANrAw1ZAKBkKQ/2KK8EmFWM1mVvcDD6Zw=
Subject key identifier:   E8:2C:16:55:FD:6D:7E:2D:D2:B4:C5:83:AC:97:30:4B:41:E2:90:7D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581BCB09BB67ED7F92B7D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71d503e7-e0ea-3f93-8dac-fbde679b15b0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.107.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:bc:b0:9b:b6:7e:d7:f9:2b:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=71ccaa69-7c75-460d-98da-2a2300424121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:d6:ba:27:e9:c9:ef:35:4a:f2:ca:01:e7:
                    51:a6:d0:dc:d8:7f:e0:cc:22:d2:72:be:c5:8b:e3:
                    2d:a6:ac:5d:7a:b7:21:27:c8:61:58:16:f8:24:ca:
                    58:1b:b4:e7:9c:87:c7:42:a1:b1:62:c3:f4:9f:3c:
                    19:3f:24:43:66:4f:1e:33:74:80:0a:6b:90:60:83:
                    4d:1e:74:7a:5c:58:cd:d9:b8:00:51:b2:0c:7e:4a:
                    ed:7b:39:e3:41:ef:e9:05:a6:cc:6f:c3:29:45:bf:
                    1b:cd:f5:8c:20:bc:78:65:59:7a:ef:c7:eb:1d:6a:
                    e8:86:01:02:8a:8c:1b:e7:9a:e4:ab:5e:fd:59:a3:
                    4d:4e:d4:6d:23:d6:5b:c4:9d:f9:ca:d7:ab:9f:91:
                    5c:9d:da:92:27:00:a6:65:9b:c0:7e:3e:58:a0:db:
                    74:9b:d3:9d:a0:5a:d2:78:97:45:18:3a:a3:0f:1c:
                    0f:5a:e6:cf:62:61:5a:08:77:ae:da:d5:13:d5:f3:
                    44:69:ca:00:57:8d:e5:2e:43:ed:ad:e8:aa:dd:b0:
                    e6:7a:b2:f9:83:e6:29:c4:c6:a5:67:f3:f9:26:62:
                    4d:ad:c8:76:78:41:6e:28:d0:3e:15:41:ed:89:cb:
                    49:e2:c5:9f:9d:0e:58:04:80:a3:79:f1:b1:ca:69:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2C:16:55:FD:6D:7E:2D:D2:B4:C5:83:AC:97:30:4B:41:E2:90:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71d503e7-e0ea-3f93-8dac-fbde679b15b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:e6:31:a7:2a:09:5b:e0:6a:5b:a5:ad:2e:ac:c5:b0:e4:1f:
         52:21:76:93:38:2b:bb:68:2f:76:58:3d:a6:f3:76:22:fa:3e:
         97:af:22:ca:1c:1d:7c:1d:fb:ed:9d:42:8e:39:b9:69:a1:a0:
         92:fd:31:01:ad:9a:27:aa:0a:07:12:b9:80:cc:23:0a:1a:20:
         95:b8:cc:32:0b:96:b9:e3:3b:69:0d:a5:d7:8a:16:70:21:35:
         19:37:33:02:f6:0b:e5:5d:c8:39:bd:76:90:be:f9:98:9c:ee:
         8f:71:30:3f:d3:d5:b4:a1:f8:c7:ed:81:6a:3c:2a:de:38:9c:
         74:bb:d0:e7:d5:b3:93:1e:b2:44:18:40:ab:28:4c:be:e0:be:
         8d:de:ca:56:a9:fa:e7:ff:40:ef:bd:ec:1b:f0:a9:bd:28:86:
         53:e8:e0:4f:06:ae:95:c6:39:a8:8f:92:af:c8:b9:98:1b:1c:
         8d:95:d0:df:c5:6d:6d:c8:f8:09:d2:0e:ad:86:6d:81:3d:a9:
         4e:23:95:9c:57:29:34:05:d0:29:b1:80:ee:56:73:49:eb:b5:
         df:cb:ef:2c:41:85:6a:e5:51:77:1c:47:80:13:4c:b2:6c:c3:
         00:29:17:54:5e:62:6d:4b:9a:e4:b3:a7:cc:aa:48:87:f5:d8:
         f8:b7:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:39 2025 by rpki-client