Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86a48643-430e-38cf-ab50-ff5b0243c403.roa
File:                     86a48643-430e-38cf-ab50-ff5b0243c403.roa (raw, json)
Hash identifier:          YWvtQROicy0n2gRk2vgGfmPDkIcph/qZC6rXJfT6TiE=
Subject key identifier:   23:00:7E:85:85:13:55:F3:98:4D:DC:F4:A2:72:9E:30:FD:9F:FF:7F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A44CA6CE6274D577E75C
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86a48643-430e-38cf-ab50-ff5b0243c403.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a4:4c:a6:ce:62:74:d5:77:e7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=ad5d3b72-ea92-413e-b8a8-c0813acc4d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:c7:3c:56:a1:f1:7e:75:fe:ae:cd:dc:f8:
                    36:32:bf:ae:b2:75:fb:69:22:fc:09:ee:bb:a1:36:
                    5c:24:6e:56:9b:7c:45:66:6a:38:ca:dc:98:f7:a4:
                    f7:31:9f:9b:b3:47:69:94:ed:d4:53:fb:62:05:87:
                    06:8a:2b:1d:5b:20:48:6b:49:4c:f7:e4:51:36:fc:
                    99:25:b2:f2:7a:dc:b2:34:bd:a2:dd:77:bb:c5:f2:
                    a6:26:a7:b5:50:05:4f:b3:48:8a:e3:9d:5a:80:7a:
                    fc:37:43:6f:27:ba:43:ab:dd:1d:82:3c:a5:e8:45:
                    03:68:8f:49:11:ed:00:df:99:c9:89:73:20:22:c9:
                    0f:1f:3f:49:89:05:e1:f6:df:87:f2:2b:b3:9d:e1:
                    fe:50:0a:52:7e:c0:97:60:17:09:15:95:c1:f2:00:
                    3b:09:c8:df:ab:82:b7:0d:6e:c1:9c:56:d0:ee:7e:
                    f7:ab:a5:89:40:24:06:ae:62:47:a8:31:9a:4e:61:
                    0e:f7:25:ca:22:ca:25:8c:9c:ad:15:65:16:5b:13:
                    3b:88:f4:5a:a9:49:78:92:15:3e:a9:58:36:d1:8f:
                    e6:44:5f:7e:32:e7:cf:0e:01:7f:c1:b0:ff:d9:f1:
                    20:7c:0f:71:a5:9b:75:0b:52:26:7a:08:85:ad:9c:
                    55:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:00:7E:85:85:13:55:F3:98:4D:DC:F4:A2:72:9E:30:FD:9F:FF:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86a48643-430e-38cf-ab50-ff5b0243c403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:ae:ce:92:3a:87:b0:6a:e9:62:57:4a:89:7e:31:0b:a2:
         91:e6:dd:0e:5a:dd:b0:1c:f3:c6:2a:f8:f1:f1:3c:ba:f1:9f:
         a3:3b:76:0a:75:74:03:d7:6e:6f:6c:f5:2b:c0:71:50:50:a6:
         17:7d:ef:c3:79:b7:77:6a:b5:fd:69:44:68:1e:d9:5f:cd:12:
         2d:94:4d:22:86:2e:bc:d9:3c:74:3c:7e:75:b8:a8:5b:20:c2:
         29:08:ee:5e:52:66:eb:a3:81:5c:37:81:77:45:3c:71:97:f0:
         c6:8b:ca:eb:73:ed:b1:6f:8a:c9:a4:ca:94:3c:37:61:53:af:
         52:3e:6e:16:6c:e4:73:1d:b4:42:28:06:98:92:e2:d7:a7:87:
         76:66:a0:44:6e:70:a0:6f:c6:f9:07:a1:fa:23:8f:9a:58:e9:
         12:ec:39:c4:d2:16:5d:19:27:98:1d:11:58:a3:55:a5:b6:de:
         64:82:da:57:d8:bd:77:0f:80:a7:15:d1:8b:4f:11:58:d0:4d:
         a1:95:33:8f:94:d0:61:68:11:b0:2a:29:1e:ad:4b:04:a8:f9:
         98:bc:1b:b6:70:ee:d0:cf:24:73:41:eb:ad:04:22:5b:44:2c:
         ab:62:95:12:a0:ab:c9:38:47:b8:3d:bd:24:e1:52:90:33:38:
         1a:56:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:10 2025 by rpki-client