Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/baa5a8dd-59bf-3e0b-ac37-0548b287d2ba.roa
File:                     baa5a8dd-59bf-3e0b-ac37-0548b287d2ba.roa (raw, json)
Hash identifier:          lS4CEEDsN5MazFiKXYqlFoPBpunmQd/7L6hjEx0dazQ=
Subject key identifier:   60:0D:F9:7C:5D:4C:FA:42:0A:F3:FA:74:21:78:EE:7A:DA:CD:38:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581193C60D167AF16EE2080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/baa5a8dd-59bf-3e0b-ac37-0548b287d2ba.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:19:3c:60:d1:67:af:16:ee:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f72d7a3c-40aa-47c5-9405-c2ca36f8363f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:32:c7:a2:76:a4:1d:c5:80:cf:e8:8e:1a:
                    0a:36:82:99:e9:b9:cc:8b:db:6e:fa:58:3d:8a:36:
                    38:9f:da:6f:b8:5a:5e:8d:c7:11:2e:e9:66:73:52:
                    4e:db:9d:00:b0:f7:29:ea:a3:19:c5:4e:bb:88:8b:
                    12:23:89:d1:71:21:3b:91:02:3c:31:8e:17:40:8c:
                    f2:45:a9:42:d9:68:02:85:47:75:37:70:2e:a2:a3:
                    f5:a3:fd:dc:8b:da:99:10:26:f8:4b:77:1b:21:e0:
                    84:94:8e:de:ac:b6:9a:b8:ff:a0:1e:e4:8c:cd:1d:
                    55:86:86:d4:e8:71:2a:4d:52:1b:87:2a:22:82:87:
                    e2:fe:ec:1a:a8:64:0f:0b:07:bb:54:5c:0c:bd:f7:
                    2e:f3:c2:b0:64:c0:97:d0:e5:d7:48:7b:d9:c9:f7:
                    a1:84:5a:8f:5e:92:04:7a:fa:22:05:bc:4d:4c:71:
                    02:b3:ce:e4:fc:ea:35:52:56:58:f1:82:87:e9:13:
                    e1:3a:d1:c2:d1:80:98:e8:b3:68:ff:b7:ad:54:57:
                    02:1b:4d:1b:bc:65:46:c2:09:9a:8a:6d:39:80:cd:
                    5d:ba:01:4b:74:1f:a1:6c:b2:66:22:f9:12:21:6f:
                    9e:e0:d8:fb:53:63:8f:db:d4:f0:e1:e0:94:3a:4a:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0D:F9:7C:5D:4C:FA:42:0A:F3:FA:74:21:78:EE:7A:DA:CD:38:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/baa5a8dd-59bf-3e0b-ac37-0548b287d2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ba:ff:dc:30:9f:63:cc:c1:06:33:70:b7:16:e3:54:74:0c:
         28:c5:d7:57:60:35:8f:05:27:87:f8:05:10:89:31:7c:e1:89:
         7e:4a:f6:39:65:76:9e:28:ac:8a:1f:df:de:e1:cc:7c:bd:62:
         b9:e5:31:8d:8b:ea:2c:39:b7:9e:50:97:6c:fd:89:e4:61:84:
         01:23:cc:bb:23:2d:98:bc:a4:dc:e4:c5:03:97:be:e7:f8:dc:
         5e:fd:1e:92:be:47:6a:80:0d:e0:4c:dd:8b:0d:69:02:dd:d5:
         7f:7f:44:f8:3a:50:34:9b:dd:d3:72:8c:49:0b:0f:50:d3:be:
         88:f0:7b:9b:8f:12:59:10:53:9f:02:0f:aa:03:85:15:47:87:
         f3:90:80:b8:45:c3:27:9c:8b:ad:7e:98:ae:c5:f9:7a:38:c1:
         35:f0:7f:c8:1f:d5:1c:a0:b1:6a:77:75:77:87:2a:b8:96:04:
         c5:a2:f6:10:68:7c:ed:94:35:c6:e7:a4:89:23:e8:8a:1e:89:
         94:6a:6e:89:42:e0:3d:ed:ae:a4:3e:1b:d7:46:82:03:d0:dc:
         a3:d3:e2:be:cd:20:be:41:6d:1c:94:67:a6:8f:75:6a:be:cf:
         65:4d:73:4e:c4:36:10:86:e5:01:ee:81:9f:84:2c:9a:d7:48:
         57:f6:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:06 2025 by rpki-client