Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2e461d9-f559-3254-9698-b4797fd0dad2.roa
File:                     c2e461d9-f559-3254-9698-b4797fd0dad2.roa (raw, json)
Hash identifier:          je054NuSWHNRJXPk9oZQwl3NScOh7BsebAjKlgnLnWM=
Subject key identifier:   C8:5A:D9:E0:99:9C:D6:BB:13:65:3A:6D:00:5A:B7:BF:FE:18:B9:CD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581257CF2A55F8922DA3740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2e461d9-f559-3254-9698-b4797fd0dad2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:25:7c:f2:a5:5f:89:22:da:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e0bb91ca-74a0-4737-89c7-5d21012ec63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:b9:22:77:8b:b5:a4:70:6f:58:3d:18:b4:
                    2f:ce:06:28:57:09:11:5b:3b:58:e1:a4:3e:9b:38:
                    be:97:84:c9:3c:9a:04:96:5a:59:95:82:83:77:55:
                    1d:ee:f4:87:93:7a:00:c8:1a:01:0a:74:b6:02:d9:
                    99:03:a0:e5:f4:ee:72:f5:f7:5f:f5:46:9d:2d:d0:
                    fb:b1:1b:23:62:86:27:0b:c8:9b:18:ac:a7:05:61:
                    81:e3:2b:b4:59:e7:0f:ef:1c:a6:28:be:81:14:63:
                    b0:b9:10:51:c9:a6:c7:90:4e:a6:b0:3a:d6:cf:cc:
                    98:62:57:1f:54:cf:9b:bc:bc:5f:5b:68:72:86:8b:
                    dd:c9:07:f2:ff:74:12:5d:f4:b3:e8:1f:66:ff:24:
                    95:a8:d4:3a:60:22:f1:99:31:78:8d:37:0b:c0:0a:
                    8b:71:e5:a2:1f:76:53:c3:6d:d5:e3:1a:8e:36:2a:
                    55:d5:a1:7b:81:7a:09:e5:c0:a1:1e:dd:b3:f9:77:
                    e2:eb:c1:b7:9f:45:c4:7d:dc:82:96:0a:b1:91:ab:
                    b4:7f:2b:bd:55:09:4a:bb:81:9c:6f:52:b0:f7:3b:
                    59:0c:bd:44:9e:e3:92:8e:6b:de:8f:52:47:3c:1a:
                    a4:0c:36:fb:8e:53:db:f0:82:ce:12:5f:60:2c:dd:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5A:D9:E0:99:9C:D6:BB:13:65:3A:6D:00:5A:B7:BF:FE:18:B9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2e461d9-f559-3254-9698-b4797fd0dad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:cd:b5:0c:54:f4:4a:67:cd:11:8e:3a:b1:19:55:ae:0e:78:
         d8:03:e8:9f:c2:eb:36:85:26:5e:55:f7:ba:47:4e:8b:08:b2:
         57:c0:ee:d9:52:28:84:69:41:0c:2c:4b:73:73:7f:55:9c:d2:
         4e:87:8c:2c:9d:3e:d8:4f:4a:be:2c:38:b5:db:7e:a7:8b:93:
         b4:a3:81:7f:76:ba:b5:29:03:c5:97:a7:d7:50:31:3f:08:6c:
         94:3b:a6:b0:be:70:63:fe:f1:35:bb:bb:34:18:53:d9:ae:6b:
         51:9e:7d:32:28:28:c3:e3:01:74:bc:80:a8:c8:c0:bf:ac:28:
         e8:45:40:ce:56:4e:6f:f4:eb:16:9a:a6:bd:86:54:cd:cf:a9:
         b5:21:1a:c1:49:64:d2:46:75:93:99:72:36:b1:5c:95:ea:0d:
         9e:17:a8:46:16:4e:0d:75:0a:2a:77:3f:96:0d:91:02:b9:3f:
         8b:f6:a4:69:8c:78:50:65:8d:c0:cb:fa:23:d6:32:7c:3b:40:
         ef:fb:27:c9:c2:25:bb:98:3c:52:d4:b4:d7:72:68:a0:8e:eb:
         55:dc:e5:2c:c2:46:42:9d:b9:d2:e5:48:b2:f4:20:a0:17:5a:
         91:1b:f1:fd:ba:f9:a7:c8:23:6e:3d:f3:3c:20:4a:d9:ff:d4:
         29:f0:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:14:26 2025 by rpki-client