Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb4d0385-613e-3277-97f1-d2f8d0ec52d3.roa
File:                     cb4d0385-613e-3277-97f1-d2f8d0ec52d3.roa (raw, json)
Hash identifier:          FmJ3zbO+F08Il09zrJlVI/B2v2SeT4yMjY9EZRRfCM0=
Subject key identifier:   46:6F:E9:51:38:CC:5A:8B:FE:E3:E0:00:2A:61:6D:64:AB:C3:C4:92
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581221AACD428FC4CA13500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb4d0385-613e-3277-97f1-d2f8d0ec52d3.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:22:1a:ac:d4:28:fc:4c:a1:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6494ab12-e445-458e-b454-61ac07c10ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:41:73:cf:fc:15:a0:51:43:ae:12:db:da:
                    be:c6:16:d4:12:54:93:00:78:ff:be:d1:89:9f:dc:
                    19:35:58:03:8b:8c:8d:77:e1:35:a6:bb:2d:57:5c:
                    1f:3b:b0:75:1a:b4:9c:82:ff:fb:03:06:08:20:61:
                    b6:ea:3c:43:9d:0c:f5:20:ec:48:ab:66:33:e2:49:
                    38:14:c7:21:68:a2:76:7e:f9:32:85:fd:06:e7:e0:
                    cb:5e:3f:08:b2:6e:49:6c:41:d8:dd:3a:8a:d7:70:
                    20:82:ce:9f:80:b7:a6:d2:45:f1:b8:06:d4:cc:10:
                    cd:57:d2:48:c3:08:3f:69:93:df:0c:84:e7:01:a5:
                    47:73:f5:4a:ba:39:86:74:45:53:c5:90:6b:51:29:
                    e6:38:31:d2:af:61:1f:7c:45:ea:8d:53:1e:19:d2:
                    90:49:1f:4c:e8:4a:e6:97:de:cd:a4:ec:0b:8c:cf:
                    5d:79:0e:1f:c1:2b:88:bf:7e:08:44:91:b2:91:19:
                    21:6e:dc:26:37:c4:a4:8d:c5:05:c5:9e:c4:73:00:
                    88:7f:2c:aa:8e:9f:5f:e7:bd:50:ce:65:3d:1b:53:
                    94:bb:09:49:1b:7f:00:30:95:38:5d:c1:04:6a:d1:
                    6e:2e:c6:5f:c7:a5:5e:7a:af:52:57:3f:16:e2:35:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:E9:51:38:CC:5A:8B:FE:E3:E0:00:2A:61:6D:64:AB:C3:C4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb4d0385-613e-3277-97f1-d2f8d0ec52d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:2f:38:e4:31:52:a4:a9:55:07:cb:a0:c5:2a:38:c4:ea:
         80:82:6e:d0:05:4e:3d:7e:01:55:1a:00:bd:ca:79:31:3a:37:
         09:09:07:4e:0d:90:84:4e:c5:02:74:4b:87:e2:05:44:0d:2b:
         8c:d6:70:98:51:17:2b:df:95:64:eb:d2:a4:0c:f9:54:52:4a:
         99:e1:38:9a:1b:f4:c4:fc:68:83:62:49:49:40:55:28:fb:bc:
         c1:d9:0c:cf:28:06:2a:2d:ea:b4:0c:1f:2a:2a:9e:5d:91:9e:
         a0:37:8d:7e:94:64:9e:fb:22:d4:79:1c:a9:2e:17:c0:7b:2b:
         91:ce:24:59:46:89:1b:9c:78:13:0e:48:f0:54:53:bb:a1:d7:
         d4:3f:85:93:43:6c:7c:b3:95:61:0b:bf:51:94:a9:4f:6a:e0:
         93:37:c5:12:32:e1:67:6e:88:5f:5d:ba:71:1c:cb:0c:f2:21:
         c4:9e:3a:ee:94:38:90:11:8a:34:48:4b:aa:d5:1b:fd:7c:e9:
         90:01:75:ba:c6:4e:75:d9:cf:95:8b:16:1c:09:8f:be:e0:cd:
         19:c7:7f:9d:1d:52:aa:30:e0:97:34:ce:3b:ec:aa:1f:68:58:
         a4:b7:df:f5:72:ac:1d:2a:22:c3:d6:b6:c0:c3:61:48:96:e9:
         60:4a:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:27 2025 by rpki-client