Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95dcb316-3a7a-3ca2-bf1b-9751aead8bea.roa
File:                     95dcb316-3a7a-3ca2-bf1b-9751aead8bea.roa (raw, json)
Hash identifier:          UWtwT+PH6xic0LJH4zBuHqaa34HS4jYW1ihi4KRYcvc=
Subject key identifier:   BD:47:56:F2:F1:5B:AA:BB:17:8F:77:F5:EA:D9:CF:60:14:9F:2A:79
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB0FB8CD16ABA1E541DA70
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95dcb316-3a7a-3ca2-bf1b-9751aead8bea.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.107.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:0f:b8:cd:16:ab:a1:e5:41:da:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a0e493a8-e654-45cc-b0bd-d4208218ff7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:10:5f:9d:20:7f:44:77:9b:9e:27:1f:e1:d3:
                    ea:51:e6:78:53:17:0f:c8:4b:eb:d6:61:ae:da:93:
                    8e:9e:0d:06:30:f7:61:41:13:01:e5:e2:c9:df:8e:
                    9d:3e:db:d5:40:bb:d1:93:c5:f3:59:9a:59:d0:10:
                    a3:db:e5:04:dc:58:9f:02:29:09:ab:4a:8c:0f:e6:
                    11:49:a4:10:5e:f5:e6:db:92:07:40:6a:87:5c:49:
                    de:bc:09:17:a4:e0:f2:b3:27:78:18:c0:92:4b:07:
                    9a:da:01:40:fd:7f:dc:1a:80:c9:eb:53:ed:f8:d2:
                    42:02:f4:bc:5b:cc:35:09:79:11:5b:e9:5e:cf:f0:
                    e1:b3:94:93:80:19:46:8c:25:a0:2f:14:16:b1:0b:
                    26:57:67:33:0f:27:27:23:cc:3d:09:b7:9b:23:d6:
                    dd:5c:6e:f7:c6:47:71:63:45:fc:7a:00:4e:87:13:
                    e2:89:96:3e:a4:d6:4e:13:f6:b1:be:16:cf:01:0e:
                    89:01:f1:54:ee:fc:ad:34:59:01:46:a0:be:d5:65:
                    81:21:ad:11:e8:f7:1d:db:fb:89:84:b9:54:22:b7:
                    5a:8c:88:55:cd:80:f6:ae:c7:1b:d7:c4:a3:e1:b2:
                    4d:27:a3:65:54:7c:d0:e2:74:49:e8:23:f6:6f:d8:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:47:56:F2:F1:5B:AA:BB:17:8F:77:F5:EA:D9:CF:60:14:9F:2A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95dcb316-3a7a-3ca2-bf1b-9751aead8bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:87:23:2c:b3:c6:f2:32:89:db:7a:a6:af:fc:f2:da:41:47:
         c4:a1:b2:cd:fa:33:f3:00:40:92:21:a5:52:43:b2:e0:3b:1b:
         6f:03:7c:19:13:e7:e1:08:eb:2c:69:4d:0c:5e:31:7e:e7:aa:
         32:1d:ef:78:e1:0c:6c:3b:15:42:cc:69:58:50:f3:66:4d:aa:
         b9:43:1d:81:85:18:56:60:44:9e:c7:0d:2f:91:83:0e:f6:17:
         3c:57:b7:ff:61:52:08:a7:e6:57:b4:fc:7c:1f:61:bf:bb:c1:
         d3:7d:8e:76:f5:d6:92:f7:78:66:ea:7e:f6:98:99:ae:96:ff:
         50:ce:05:5a:28:05:24:9e:aa:40:33:f8:56:85:53:c1:ab:60:
         30:ff:80:54:4b:d2:26:3e:ce:e4:a6:c5:6a:02:cb:5f:b9:64:
         17:3e:44:39:3d:7b:d4:8e:d1:4f:64:62:83:21:bf:86:36:e9:
         f4:02:2b:71:e3:61:ed:73:67:39:c3:8c:5b:24:4c:b1:91:34:
         34:b8:fc:b0:f1:f8:de:46:3e:a0:bd:88:f7:a3:8a:a0:98:1c:
         9e:c0:9d:1a:81:84:3e:8e:11:05:3b:2b:0b:a0:2d:a3:af:25:
         d4:48:b0:68:1f:78:06:51:cd:bb:3c:e4:d0:33:b9:ca:ae:8a:
         a1:3f:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:25 2025 by rpki-client