Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7c5e332-6197-338c-b5ea-174982e3ffff.roa
File:                     a7c5e332-6197-338c-b5ea-174982e3ffff.roa (raw, json)
Hash identifier:          D0wds1QAsw0suplUDsgcpn3z9TJfsUnbgq1gdjNIf7Y=
Subject key identifier:   AF:86:A6:5A:2B:75:4C:51:79:5E:89:60:3E:AB:DE:43:E5:13:B4:75
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A88DC1E01084E3C29E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7c5e332-6197-338c-b5ea-174982e3ffff.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a8:8d:c1:e0:10:84:e3:c2:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=c4ccff5e-f9b5-4845-9e08-ee5a8ee9135f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:bf:e4:80:88:e7:b1:04:16:e5:64:48:09:
                    46:fb:96:4c:6e:ef:ff:6e:c1:1c:e5:46:5b:dc:b2:
                    dd:74:c7:68:08:a0:86:0b:04:a8:d6:b9:cb:9e:e8:
                    f5:14:f1:b7:96:7e:22:ea:a6:4f:f5:3b:c8:e6:f5:
                    c1:80:04:64:12:9b:27:33:01:d1:49:61:1c:72:0c:
                    4b:09:c5:97:9d:ec:93:ee:44:98:22:b7:5d:00:26:
                    a5:69:38:f7:72:30:cb:6e:3b:e5:23:0c:da:79:74:
                    df:ca:02:83:ab:6f:8b:d2:04:b3:03:0c:38:6a:fc:
                    46:8d:82:74:40:76:bf:51:94:19:a1:2a:bb:7e:d0:
                    9e:8d:99:6c:a3:6d:dd:b2:f4:10:fc:04:c6:ac:a0:
                    91:65:db:5d:53:06:ec:47:a0:cf:a5:fb:98:f7:58:
                    0e:82:d0:e6:41:19:00:f3:2e:b6:63:e5:46:e6:e1:
                    8c:b7:c9:40:a9:84:d1:0a:83:d0:76:95:39:f7:1d:
                    2d:c1:2f:4f:1e:14:f5:b7:28:de:7a:1d:99:be:c8:
                    f8:fe:ca:df:a3:ad:9b:14:6e:06:81:01:e0:78:22:
                    85:c8:11:fe:64:a0:69:8d:e0:c3:9c:4e:12:5e:96:
                    8a:07:e4:d2:b8:72:de:e4:37:4e:01:d1:ba:6a:8a:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:86:A6:5A:2B:75:4C:51:79:5E:89:60:3E:AB:DE:43:E5:13:B4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7c5e332-6197-338c-b5ea-174982e3ffff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:25:fd:cf:74:b1:af:c0:4f:03:59:c0:20:e1:8a:31:d7:a6:
         13:f2:75:85:47:dc:f8:cb:bc:a1:12:06:8c:1c:dd:ae:e9:8b:
         27:84:a1:fd:dd:03:3a:a9:eb:4f:3a:b0:d1:b3:d3:c7:d0:40:
         fd:d0:1d:fd:e6:ac:86:0e:f3:29:f5:0c:97:86:7d:92:ae:1e:
         4c:ee:c4:07:0d:95:62:34:76:18:88:11:29:0a:52:4c:0e:29:
         a1:95:9c:b4:2b:4c:5c:44:48:eb:0e:a5:9c:0c:b4:d3:5c:2a:
         d0:b1:01:b0:c4:de:85:88:df:33:e9:f4:01:2a:28:e9:86:25:
         00:db:03:7b:91:d0:9c:db:76:bf:b1:26:d0:6b:69:42:34:d0:
         69:25:14:56:10:52:e6:41:5b:03:7a:58:d4:77:cd:51:c8:1a:
         0a:b7:8c:ec:ce:77:76:68:bc:f2:fc:ba:01:4f:c6:af:f5:a2:
         c4:f3:13:33:7c:5b:7e:ea:e1:b0:e7:a3:4b:15:27:67:f4:bc:
         2d:e8:a4:64:58:b4:69:43:be:fe:0e:1d:e2:60:da:da:ce:ec:
         6d:91:20:5e:bc:bf:ed:54:6c:00:16:d5:3b:98:32:b3:96:89:
         7f:0b:a8:b8:ad:15:b3:0f:30:92:d2:0f:5a:65:eb:6a:ef:ec:
         47:ab:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:53 2025 by rpki-client