Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/f6a0d22d-208b-3895-9d60-5ac4f3d0d183.roa
File:                     f6a0d22d-208b-3895-9d60-5ac4f3d0d183.roa (raw, json)
Hash identifier:          u03wCWtcvCzeP2muabdEEfbXLslKLZGezwlnCEdBv+k=
Subject key identifier:   97:EC:11:BB:6C:AD:4B:90:10:42:1D:89:79:DA:EA:67:65:7D:37:CB
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285848EC9690E0C51CA27487D1E1C0
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/f6a0d22d-208b-3895-9d60-5ac4f3d0d183.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     46674
IP address blocks:        75.100.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:90:e0:c5:1c:a2:74:87:d1:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=78eecc68-2641-4d90-89a5-880dfcec2c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:49:15:a2:37:8a:ea:33:83:ef:8b:a3:80:
                    25:77:7f:8f:b6:6c:76:d6:b1:c4:7c:7d:ed:a9:8e:
                    3a:b3:fb:bb:f4:3e:b9:21:3a:f5:6a:ba:c3:8e:3a:
                    84:93:33:03:21:c5:33:eb:59:ea:8e:bb:d1:78:6c:
                    99:a5:2b:5f:bb:98:f8:81:cc:bb:e8:66:39:b9:c4:
                    4e:16:a6:73:1c:d3:10:bd:f1:94:bf:10:78:5d:6a:
                    a4:56:28:35:94:2c:41:3c:57:0a:97:ab:3d:29:2b:
                    38:46:68:54:98:77:3b:f6:50:f3:20:1d:c7:c7:f2:
                    d6:09:6c:01:98:27:0f:42:aa:0f:66:ff:66:f6:b2:
                    60:51:26:4b:b1:2a:37:f3:f9:62:df:71:5a:0d:51:
                    41:ae:05:8f:02:5d:f9:4c:9c:d0:3d:95:96:6e:23:
                    85:69:b0:a7:ee:78:a3:de:59:f7:8c:87:f3:48:46:
                    ef:aa:4d:38:9e:b2:a3:cf:81:ab:53:c0:b2:d9:c0:
                    b5:f4:82:e8:76:6e:c4:1f:30:84:6d:45:1c:67:22:
                    2c:67:40:e7:ac:e6:07:be:45:e6:83:ee:fa:c5:3f:
                    e1:ff:70:3c:19:1b:75:31:c2:87:87:9b:12:aa:45:
                    80:ff:45:6a:9e:f5:e6:3e:f1:39:7e:7e:2e:ef:d7:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EC:11:BB:6C:AD:4B:90:10:42:1D:89:79:DA:EA:67:65:7D:37:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/f6a0d22d-208b-3895-9d60-5ac4f3d0d183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.100.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ac:c6:83:a9:c8:99:f3:02:3c:b3:79:d6:5b:b2:bb:42:18:
         c8:e3:55:2d:77:6f:c7:66:80:53:38:e9:cc:63:ea:3c:f4:9e:
         2f:54:25:0d:36:a3:46:19:f6:bb:95:44:6b:2b:4d:0b:75:e4:
         3b:7f:34:89:e5:50:7b:11:b4:30:e5:9f:b4:5a:95:b5:d6:7a:
         61:f1:2b:37:1d:44:b1:0a:7c:d4:5c:a7:32:52:ca:89:bd:43:
         e0:35:4d:7f:60:fc:73:75:b1:d4:a8:ea:7b:92:50:71:52:a1:
         7d:91:42:e2:54:64:d4:3b:b5:2c:bc:9a:57:1f:96:28:ae:68:
         68:d9:aa:d4:de:09:96:c0:c4:4f:9d:e8:b2:b3:9f:75:7d:b4:
         4a:1a:96:3d:32:c6:ce:a0:88:7d:3c:b0:9e:14:67:75:2a:2a:
         08:6f:4f:60:11:02:5b:51:2f:9f:31:e7:9a:b5:31:3b:82:7c:
         17:9f:9d:9a:dd:68:78:7d:8e:c0:f4:f0:59:74:3d:69:bc:db:
         3d:41:60:7e:fd:5b:b5:88:c3:36:4b:03:f3:e9:ec:ad:b8:b7:
         6d:9f:53:f7:16:0d:80:7d:cf:dc:3e:f5:38:ce:be:79:c3:9b:
         c4:8e:32:19:e9:8d:ec:e4:7e:7f:e7:54:73:6c:82:7a:9e:c1:
         72:cc:9b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:10:47 2025 by rpki-client