Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a2e885f-c64b-3968-bb4e-98518ac26ab7.roa
File:                     8a2e885f-c64b-3968-bb4e-98518ac26ab7.roa (raw, json)
Hash identifier:          glOGBIvnEJTWxi0Xh3aJVUu/oO0rY7G3gGPVZ4vJUFE=
Subject key identifier:   8E:8E:EE:70:28:87:B6:91:1C:C7:8D:A5:41:12:30:C5:AA:EB:DA:E8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A39686FD03CBE388F740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a2e885f-c64b-3968-bb4e-98518ac26ab7.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a3:96:86:fd:03:cb:e3:88:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9b4e1f78-7606-4004-b901-e554074d05f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:97:4d:1d:51:c7:ea:99:ef:4b:49:ab:47:
                    ee:59:ca:c0:2b:d5:cb:33:8c:d6:90:da:9a:39:d1:
                    22:6c:09:5a:6d:3d:e0:56:4c:58:64:38:10:a4:2c:
                    28:90:3b:c6:04:5a:f6:a0:c7:c5:cb:32:e5:72:72:
                    74:d6:e2:eb:ac:9e:4c:1a:f8:41:1c:e6:f3:98:1a:
                    42:c8:a0:a7:8d:d4:6d:28:fb:bb:9a:e9:68:d8:30:
                    51:0b:fb:20:b4:96:db:a1:44:1b:75:c9:75:e2:96:
                    99:53:5b:cc:f5:d3:a1:60:92:d8:18:ec:eb:d3:e8:
                    b0:fe:54:66:9f:8f:fe:92:d7:7b:74:0f:5b:9d:9e:
                    fe:45:a5:e5:43:76:35:fe:aa:23:7b:08:b8:0c:42:
                    26:d6:57:bf:50:ea:e7:a0:26:b2:e3:56:68:34:be:
                    04:a7:ee:63:1a:eb:8a:2e:76:f8:d8:40:7d:a5:be:
                    7f:f0:a7:2a:79:82:85:15:60:24:fb:49:69:84:34:
                    2f:78:af:7c:84:e8:f3:2b:9e:b8:cd:bc:66:bd:62:
                    fb:17:af:3e:e8:58:28:4c:5c:b8:a8:9b:41:39:85:
                    5c:7b:26:9d:31:6f:4b:50:5c:d4:e9:a0:07:3c:81:
                    e6:91:fb:5e:fc:37:d1:4a:1d:c3:72:67:69:6a:f3:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:EE:70:28:87:B6:91:1C:C7:8D:A5:41:12:30:C5:AA:EB:DA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a2e885f-c64b-3968-bb4e-98518ac26ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:a5:c0:0d:6e:f0:c2:7c:ae:82:fc:85:7a:64:be:de:19:
         45:bd:69:35:b8:15:33:52:0d:68:7b:7b:d9:4e:e5:1d:29:5e:
         57:c8:ee:1b:79:d9:9b:a1:4a:ff:ba:0b:85:c1:94:e8:ee:e2:
         eb:af:41:8f:2d:1a:2e:01:f2:cb:60:f7:aa:e7:b4:8d:84:b8:
         de:d5:90:a0:0b:6c:da:e1:74:de:45:89:77:3f:cb:2c:19:c5:
         dd:7e:7c:87:c4:d6:25:e6:86:c9:12:0d:a0:8c:a9:8e:e9:c2:
         89:fc:35:95:e9:62:17:de:72:21:50:ae:02:47:e5:00:dd:71:
         c3:a5:d2:bd:4a:8b:4a:96:78:b5:5a:ca:48:28:e7:ad:31:b9:
         7f:3f:fd:0c:7e:66:e2:bb:91:0a:ca:8e:42:9f:e8:16:45:75:
         90:df:66:20:b0:1a:96:c4:6a:1c:df:70:b1:16:09:64:7f:b1:
         b1:d5:d4:bc:a7:42:3c:14:54:63:6e:c4:57:b8:c7:6a:65:29:
         53:a0:68:61:0d:d6:31:7c:18:14:03:53:10:3b:61:99:e8:8e:
         4f:23:25:60:1b:29:09:34:97:92:41:2d:7f:3d:21:53:fa:93:
         88:92:e4:2a:91:01:54:91:a9:52:19:5c:14:40:f7:e9:4a:f7:
         8b:2a:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:04 2025 by rpki-client