Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c5004b2-4066-3e30-916d-0061384a4245.roa
File:                     8c5004b2-4066-3e30-916d-0061384a4245.roa (raw, json)
Hash identifier:          FlS4YjoNMmP/Ix0VENZL3tfSsx7M3r+GORkxj6DKNhc=
Subject key identifier:   09:33:4C:F3:6A:DE:1B:F3:CC:D2:0F:D8:69:ED:3F:FD:CF:3B:5D:54
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A37FC1FCBB9A120B09C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c5004b2-4066-3e30-916d-0061384a4245.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a3:7f:c1:fc:bb:9a:12:0b:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=5dec51bb-07f2-479a-8305-6dbf78fcf510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:66:d3:d5:e3:65:04:02:6f:66:6d:ac:e1:
                    41:93:d0:1a:8a:d4:20:f3:19:a9:2a:ab:87:6d:7c:
                    a5:d2:16:25:52:33:19:b7:98:17:99:b2:81:9a:57:
                    10:f6:20:29:9b:90:2b:19:95:07:42:60:9b:06:23:
                    b2:27:85:16:5a:f7:5f:ce:e5:a3:79:a9:5f:be:1e:
                    92:34:e2:b3:57:e8:03:89:ed:6d:c7:c3:d9:c7:a0:
                    b7:02:23:3d:d9:ed:bf:52:a4:8b:9e:c9:2f:90:ab:
                    77:40:f5:16:f7:b8:32:24:1b:89:23:f3:20:a9:81:
                    e7:9c:61:17:26:ce:5c:b2:a0:1c:9e:45:fc:4f:ee:
                    e8:02:40:d5:1b:d5:8f:71:02:b2:78:7d:db:84:93:
                    56:08:89:4c:26:e9:a0:84:7e:aa:29:e4:0c:13:45:
                    67:c6:8b:5d:85:7a:c0:3a:1f:6a:89:7d:14:d8:f9:
                    11:49:c8:1e:92:f0:5f:d4:d1:11:55:cf:7e:f6:97:
                    86:d0:65:e3:6b:f0:84:f5:12:eb:a0:26:aa:3b:19:
                    cf:21:dc:41:ef:6a:e0:0f:5b:14:78:95:4c:e4:91:
                    73:cd:ee:6b:94:b0:e4:e7:7d:20:8c:46:b4:a8:5a:
                    71:9c:89:73:df:74:d6:3e:91:90:9b:5a:70:c1:26:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:4C:F3:6A:DE:1B:F3:CC:D2:0F:D8:69:ED:3F:FD:CF:3B:5D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c5004b2-4066-3e30-916d-0061384a4245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:c8:76:c5:2f:f4:8b:e7:3d:16:ea:76:3c:b4:14:ff:d5:cd:
         30:bf:4b:9a:a2:ab:dd:16:60:64:de:7e:bf:7c:2f:f2:ff:5e:
         c8:45:87:b4:9e:91:51:5f:3a:42:d5:17:9a:7b:28:33:81:64:
         97:5c:cf:f0:8a:2a:7d:6e:1e:3a:fa:3e:68:e8:1f:d1:45:8d:
         c7:f1:67:34:d8:a7:d8:e4:9b:5a:0b:37:7f:e2:ba:72:4e:ad:
         22:c2:65:66:ac:68:b8:75:cb:d1:32:31:e3:e1:a1:dc:cd:ad:
         02:77:5e:41:ad:ba:48:f6:b3:81:05:84:f2:63:2e:ab:13:f1:
         17:47:2d:85:c5:04:30:cd:2c:4d:58:72:2d:40:ef:92:20:e5:
         91:2c:47:b0:e2:11:9f:3c:83:9d:26:a9:18:28:f3:10:83:ef:
         ef:96:2c:a7:46:7a:d8:ba:f6:77:13:1c:f0:62:da:01:84:d1:
         98:69:7c:06:2b:eb:ab:4f:97:e6:e2:75:c9:d4:f5:65:c1:4a:
         c5:52:52:f4:0b:e7:27:89:3e:64:e4:28:24:a1:ea:67:f6:80:
         66:2d:ac:d5:d9:2e:00:0a:bc:55:ef:94:c8:18:5c:e2:0a:51:
         1e:85:61:68:7c:a5:57:f5:00:5d:ed:69:b8:58:1c:35:20:04:
         ca:49:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:04 2025 by rpki-client