Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b55d51e-2bbb-3621-85f2-43a176465d6d.roa
File:                     8b55d51e-2bbb-3621-85f2-43a176465d6d.roa (raw, json)
Hash identifier:          T1PilvlE9AljJALo7Ggm0hkltCIpaWo0kf7/saYcN94=
Subject key identifier:   EA:CD:0A:62:2D:40:06:15:54:C5:01:C4:4D:31:BC:F2:B4:77:C2:38
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58117BFCBD53699578E0200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b55d51e-2bbb-3621-85f2-43a176465d6d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:17:bf:cb:d5:36:99:57:8e:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=dc7f66c7-57e0-4979-bf32-a76a81406d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:3c:0c:0d:a8:03:98:47:d9:1c:93:78:0a:
                    82:f1:02:9b:f5:ac:80:cf:68:b1:91:57:c2:7e:f4:
                    59:c3:e9:45:af:49:72:97:18:28:84:a1:3c:ca:be:
                    f8:ea:d3:43:32:5c:6d:e6:11:cb:56:ff:61:f6:42:
                    24:be:fe:d6:d8:98:eb:2d:80:20:ae:bc:a2:d9:9b:
                    48:bb:c5:dd:5c:f4:a1:91:7b:3f:dd:bb:7d:d5:71:
                    87:3e:88:27:b3:ba:d6:75:d3:c3:78:91:0c:65:5d:
                    b7:96:b5:4b:fe:a5:75:53:ed:b2:f6:8d:de:43:69:
                    a0:82:5b:01:b9:77:8e:f4:7f:c7:2e:d4:9c:74:cd:
                    d3:ec:f3:ca:79:20:20:4c:c2:f1:a7:81:14:3d:e0:
                    60:f9:fa:8e:17:fe:81:46:ff:72:bc:50:8f:54:3b:
                    a0:2f:e4:d7:5b:c0:74:bc:80:71:7a:d3:05:bd:26:
                    d0:de:10:c0:88:9f:11:17:1a:1a:10:24:d8:1d:d6:
                    6e:96:e0:5c:22:51:64:9b:2e:3d:81:58:d2:8a:33:
                    d8:6a:4b:ec:5c:3d:07:c0:8f:c0:a0:df:99:dd:8d:
                    bf:75:7c:c0:bc:9b:9e:15:43:6f:71:2f:e3:3a:07:
                    77:8d:40:7b:3c:99:53:d0:33:60:b1:c7:d9:97:a4:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CD:0A:62:2D:40:06:15:54:C5:01:C4:4D:31:BC:F2:B4:77:C2:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b55d51e-2bbb-3621-85f2-43a176465d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:72:fe:4a:b1:15:e6:21:f1:fe:70:ac:2c:5d:08:74:28:
         47:04:f7:17:db:e4:d5:fc:c4:0d:73:e8:c9:77:66:a6:20:14:
         ce:82:10:c6:2d:12:4c:a5:c2:18:6e:6b:d7:3d:03:c9:e8:2b:
         f6:92:ce:22:ca:b2:4b:b3:02:ea:65:e5:aa:73:26:1a:e7:e5:
         e9:20:6e:fa:b7:8e:69:2c:75:31:13:ef:49:2e:a3:e8:80:89:
         a6:6b:38:fd:cb:9d:ab:15:4d:fa:43:d5:65:2d:89:70:85:0c:
         42:59:4e:26:f4:7e:07:85:53:88:a3:cf:05:c7:38:3f:00:b7:
         a0:81:67:ba:a3:b3:3b:73:24:2c:a9:66:34:a2:78:49:c7:b7:
         78:e1:5b:88:00:e5:71:3e:76:8f:6b:5c:b7:30:05:ea:a6:ba:
         9c:4b:07:59:4a:ad:43:d5:ba:64:46:84:57:3b:77:6d:3d:57:
         41:16:77:7e:29:53:3a:5c:99:bd:a8:b7:b5:03:42:22:f1:b8:
         8f:a5:8c:2f:dc:6f:b1:91:1a:eb:c7:36:45:a6:55:41:3a:fe:
         da:1d:68:a8:43:ca:e8:a7:87:b9:d1:cf:08:0c:ec:c4:b6:f7:
         56:b0:82:66:73:93:53:a0:c3:47:88:cb:13:9d:7d:7a:2b:a1:
         bd:07:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:12 2025 by rpki-client