Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77fc88b9-6e3b-3dee-aabe-37f229198b2d.roa
File:                     77fc88b9-6e3b-3dee-aabe-37f229198b2d.roa (raw, json)
Hash identifier:          BjwsM1ALzW2f+FCCswIDhIKJAs1dV0rMNKZWulYs4Fk=
Subject key identifier:   1C:96:FC:DA:E0:76:9A:90:76:50:BE:DE:BA:A7:B7:BE:18:4C:16:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58126342C7F01E2E81DB640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77fc88b9-6e3b-3dee-aabe-37f229198b2d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:26:34:2c:7f:01:e2:e8:1d:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=24d649f6-0ea4-4a18-bd26-aac7df9acdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:54:1d:b3:4d:d5:91:44:3d:3f:44:62:3b:f9:
                    04:69:d2:c5:22:50:4c:eb:07:30:01:ce:14:4d:32:
                    0c:ff:eb:03:39:b6:52:b2:93:ac:fb:0c:0d:cc:de:
                    7e:5b:3e:72:9c:cd:15:37:d9:dd:90:4f:f9:ab:d4:
                    59:a8:c8:af:03:48:e3:a9:63:6a:3b:08:d8:f1:b2:
                    44:aa:99:9e:c8:54:96:21:d6:4b:14:9d:7f:df:15:
                    3f:e5:7e:bf:ea:82:5d:5f:6b:4b:7f:b7:da:69:1e:
                    84:ef:c0:7a:c8:3f:b5:75:02:69:1f:21:0f:24:b5:
                    d2:6a:17:17:ba:02:a8:7f:76:74:c5:87:7a:1d:e0:
                    a9:a4:7c:4d:13:1d:34:7f:b9:fe:01:a6:7f:45:fd:
                    2a:42:1d:ca:1f:6b:9c:9c:c1:47:ab:d3:30:6f:28:
                    a2:d8:6d:bd:a1:56:1a:6f:2f:bf:a6:5a:65:20:7c:
                    1f:a4:2c:ea:fd:56:ea:1d:05:12:90:9e:46:6f:d5:
                    a5:7f:fd:0b:ff:45:ac:2e:f0:f4:d2:6e:04:a3:50:
                    14:65:3a:98:ee:1a:ad:08:5c:c1:47:d4:7f:ac:09:
                    ae:cc:d3:d9:4e:20:0f:f1:18:2b:0a:24:aa:3e:4d:
                    4f:fa:81:38:69:f0:f5:1c:d9:75:09:66:be:75:e3:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:96:FC:DA:E0:76:9A:90:76:50:BE:DE:BA:A7:B7:BE:18:4C:16:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77fc88b9-6e3b-3dee-aabe-37f229198b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e4:ea:f3:ad:ce:72:64:49:d4:04:72:22:14:2e:1f:2b:a0:
         1d:23:1e:a6:16:f9:aa:fb:26:22:3b:27:14:90:28:c5:6a:8c:
         30:79:5d:80:bb:46:96:98:4a:fa:36:6b:f8:ea:34:0f:ca:03:
         38:10:c1:2c:d6:71:e9:18:5e:eb:87:d4:de:7a:90:50:b6:87:
         bd:c6:0d:56:aa:bf:77:52:b6:cd:60:0a:0f:65:4c:ff:bc:f0:
         75:32:21:1b:54:02:51:fe:17:bc:9c:7e:84:fc:06:66:bd:b9:
         55:f9:8f:98:7e:0c:bd:5e:f4:3b:ac:02:87:a8:fe:65:40:59:
         3c:61:1f:f4:24:6a:b2:eb:72:d1:63:2f:79:ec:80:32:44:5e:
         37:8c:92:e1:5e:e3:62:d3:e0:81:5a:c9:1e:68:55:ff:68:f0:
         64:33:04:ec:45:c8:a0:7e:ab:63:78:84:1e:19:37:57:e0:41:
         80:02:3d:c9:e0:c4:8c:58:32:cb:79:d1:5d:00:7c:be:a9:b6:
         b2:e8:9d:25:86:e5:37:60:7d:6f:c0:78:b5:5e:53:0e:fe:eb:
         ca:36:74:f4:00:ec:c3:18:5b:fd:8e:90:fc:82:ef:04:28:8b:
         9a:02:86:ac:06:5e:c6:5f:5a:df:ba:53:b9:0d:a3:3a:b2:d3:
         ea:3b:dc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:45:38 2025 by rpki-client