Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d99d3c-a88e-3380-8467-0b6eea69e88d.roa
File:                     a0d99d3c-a88e-3380-8467-0b6eea69e88d.roa (raw, json)
Hash identifier:          l7UewUyRbj2O22e1RBPPWYRlVpONja/oZX4o/dv3hjo=
Subject key identifier:   6C:33:07:AC:9A:32:82:48:F5:AD:67:68:8A:DF:B9:2B:23:A6:E0:43
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA68D4398E3FB15B810500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d99d3c-a88e-3380-8467-0b6eea69e88d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:68:d4:39:8e:3f:b1:5b:81:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c3c8bc97-36c4-4f28-9e09-00dd531df9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:db:87:c1:e0:d8:2f:27:19:da:cc:5a:52:
                    a9:1b:a7:f8:fb:71:ce:aa:f5:be:0d:a6:74:3d:ee:
                    46:c2:c7:ea:02:69:b0:81:cd:0f:11:d5:31:9b:77:
                    0a:3c:c3:fa:8e:3d:5c:bb:9e:b3:45:d3:04:c8:cd:
                    22:8e:5a:2c:11:f7:d4:09:84:40:3d:c8:ab:8c:ac:
                    0c:22:93:6f:80:33:00:cd:70:44:82:75:75:44:28:
                    1e:13:a1:3b:86:0a:3b:fa:d2:da:4d:ae:7f:2f:97:
                    92:31:1f:0d:e7:df:72:12:c4:0c:24:17:be:3a:0f:
                    b5:06:38:db:6e:a9:98:c6:63:68:59:05:db:7f:46:
                    d8:42:3d:dc:0a:80:92:30:ef:31:bc:33:f9:6a:36:
                    e8:8b:af:78:05:65:e7:f6:cd:f3:ed:b6:78:1e:24:
                    10:b5:83:0e:3c:41:51:7b:e0:40:31:67:69:ac:ae:
                    b3:b2:b5:82:85:ec:d5:a8:cc:b7:0b:a2:6e:81:92:
                    1c:37:98:4e:81:85:d1:0e:66:e5:0f:ab:47:0c:03:
                    e7:87:25:1c:3a:21:55:41:b7:56:de:0c:5c:46:10:
                    6e:7d:8d:4f:94:4f:06:02:89:4d:1c:d3:7c:2f:ff:
                    c4:9b:33:08:61:e8:50:a1:84:78:b5:bc:d8:31:5f:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:33:07:AC:9A:32:82:48:F5:AD:67:68:8A:DF:B9:2B:23:A6:E0:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0d99d3c-a88e-3380-8467-0b6eea69e88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2a:2c:0f:d7:ee:dc:22:02:b2:1b:91:d6:9e:b1:16:96:0e:
         2a:e1:cf:3d:fa:fd:d5:f1:2d:55:44:ea:0a:42:7c:42:bf:4a:
         52:ca:11:86:69:13:7d:65:5f:df:8b:84:28:6e:21:bb:9f:9b:
         bf:e0:c9:f9:08:6e:71:75:35:ef:7c:c5:c9:b1:1c:49:ee:70:
         68:fb:53:45:71:58:70:8a:ed:39:f7:b4:ec:64:a4:84:44:fa:
         24:07:8f:74:e5:6e:65:7a:54:37:cb:2c:42:81:ad:10:c8:c4:
         a6:ff:c1:c5:b3:b8:95:a7:20:f6:b1:09:be:d2:1a:59:40:d1:
         b7:8d:46:b8:a1:9c:64:a3:a8:74:1a:27:11:af:52:56:49:56:
         1d:b8:ae:7c:3e:33:43:ab:b6:38:95:2e:1b:6b:c0:55:97:cf:
         9d:2f:10:c5:a5:4d:07:9d:48:20:33:82:cc:d1:c8:e1:10:89:
         03:4f:0d:8b:d1:a2:72:64:9b:f6:45:b8:ea:41:3c:e8:42:75:
         f2:64:13:9b:25:38:3b:17:a2:c4:d0:60:6d:1d:12:f9:d5:6b:
         f3:e8:90:ff:ce:d4:90:07:6d:32:1b:b5:1d:81:d2:b5:95:ea:
         51:be:be:4d:07:29:5e:ef:c2:79:cb:03:c0:8a:22:dd:97:9a:
         90:0f:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:47:21 2025 by rpki-client