Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fea3ec5-8806-31ee-938c-a208fee3bc05.roa
File:                     7fea3ec5-8806-31ee-938c-a208fee3bc05.roa (raw, json)
Hash identifier:          crj1kbqnPwd9U02NUOtnGbdtXN7tL6No3Op7aUbzFxk=
Subject key identifier:   6A:2A:9A:52:04:07:6D:48:56:AC:A0:55:35:5A:31:7B:20:BA:B4:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B16DB368A0DB8AA9B040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fea3ec5-8806-31ee-938c-a208fee3bc05.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b1:6d:b3:68:a0:db:8a:a9:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7f4221ec-723b-4475-ac34-bf6161211c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:a9:5b:3e:66:93:52:0d:fe:e2:56:53:17:
                    56:1e:29:88:e9:44:ae:a3:53:35:31:66:3f:64:f4:
                    ba:49:50:75:9b:d5:a5:fb:37:6c:89:27:c7:0b:8b:
                    ae:72:6c:b8:c3:8d:cd:04:d7:92:7b:37:18:4d:ee:
                    86:32:c6:44:a0:e1:84:aa:59:df:36:62:65:27:70:
                    04:c7:c1:70:84:ae:8c:fd:6a:e5:98:82:41:f7:bc:
                    96:27:51:c9:c5:5e:18:be:92:27:f6:8e:e6:e5:b8:
                    ed:21:4f:bf:52:dd:87:63:82:84:07:ba:64:ef:c8:
                    fa:ce:9c:37:2b:9d:ae:23:57:3d:83:af:63:ca:71:
                    e9:4e:e1:22:cb:db:fc:f0:65:40:61:a4:59:c2:18:
                    e4:4b:66:4e:af:ec:ed:09:d4:a6:b3:6d:78:69:90:
                    c7:05:d9:88:29:ef:91:4a:09:82:dd:da:9c:80:81:
                    e7:58:da:fd:15:76:3c:82:e2:25:4b:a4:9c:86:20:
                    33:68:1d:c6:07:7b:5b:39:e7:ff:0c:78:82:af:28:
                    cd:33:52:d7:62:75:d0:51:00:8c:ec:a5:0c:d0:68:
                    f2:d2:3d:43:37:bf:51:45:4b:76:d3:de:e0:75:c5:
                    b8:27:bc:5d:b5:cf:5d:f0:c6:15:5e:97:93:74:0e:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2A:9A:52:04:07:6D:48:56:AC:A0:55:35:5A:31:7B:20:BA:B4:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fea3ec5-8806-31ee-938c-a208fee3bc05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:27:49:7d:eb:9f:60:7a:1c:0d:bf:d9:05:7f:c4:22:0d:20:
         42:6f:eb:0d:69:f6:25:50:fa:35:4f:1b:d4:97:8f:17:16:9e:
         7a:48:a2:a8:17:8a:a3:95:12:1a:2f:d4:06:68:74:73:f1:ec:
         2a:85:39:85:15:4d:9e:04:25:9d:16:ec:a9:e2:b0:9a:28:e3:
         0d:fc:e6:0e:93:d6:ee:35:49:e3:28:fc:fa:42:e7:ec:3f:a4:
         dc:a9:78:8c:9e:c2:29:3d:e4:0b:9f:97:ae:f3:80:55:19:25:
         c4:6f:32:65:86:93:b6:1d:05:b6:b2:4a:db:45:b3:04:ce:f4:
         43:30:a8:8c:04:bc:5a:59:3c:54:de:56:40:0e:87:9a:b8:fa:
         31:f5:40:26:40:fa:62:59:8d:03:65:b7:21:d3:3a:56:63:3a:
         a7:ea:3a:e0:87:21:0d:31:d3:29:29:16:d1:19:58:72:46:55:
         41:23:79:d0:03:15:c0:56:ee:aa:e4:99:89:a4:19:68:d0:6f:
         d3:3f:c0:8e:86:7e:89:58:fb:60:4b:85:2e:64:06:0f:0a:2c:
         43:5f:58:0f:6c:c9:a5:32:4a:69:50:65:1b:d5:b4:da:24:0f:
         3a:24:97:57:02:a4:f6:3f:f2:76:dd:5e:87:c9:ae:1c:b3:54:
         56:a9:25:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:56 2025 by rpki-client