Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecf22ebb-9019-3f14-94b8-403b0c9ecf95.roa
File:                     ecf22ebb-9019-3f14-94b8-403b0c9ecf95.roa (raw, json)
Hash identifier:          LVbfkUfYx1ZP7ueKXi0rPuh5sAD5EV7SmMoOpO3YFiI=
Subject key identifier:   88:45:36:4C:E4:14:32:F7:16:40:A2:CA:4F:6A:0A:23:E4:09:7B:6C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6B27700A3D33D57A1300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecf22ebb-9019-3f14-94b8-403b0c9ecf95.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:6b:27:70:0a:3d:33:d5:7a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=3ab907a2-7d41-454d-8b00-ca90221171ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:90:78:6e:fa:74:58:80:0b:48:e0:9a:0e:
                    ed:cc:d0:fe:6d:ec:c3:de:52:d6:06:79:60:05:f2:
                    bb:8a:b9:18:ee:1d:4e:65:f4:72:33:26:cc:94:1f:
                    7c:a0:27:2a:7e:2d:bd:8a:20:98:13:b6:88:70:94:
                    07:65:ec:61:58:97:49:53:ad:24:c4:39:ef:ee:dd:
                    cf:2f:4f:0e:06:ac:9b:87:99:65:22:f4:d3:7e:b8:
                    3a:89:48:69:2a:f3:6d:37:b1:03:0a:8a:04:56:ec:
                    d5:1d:4f:07:c3:f0:c9:3f:2a:11:59:81:8a:9a:a3:
                    95:ab:b5:4f:b9:28:be:7b:5c:ba:b0:63:9e:8f:71:
                    dd:30:2d:f2:a6:17:cb:51:c6:b3:ad:66:9b:66:fb:
                    6c:7c:1d:da:ba:e4:b8:22:99:cd:a4:19:73:40:cd:
                    85:22:56:d1:21:7a:42:b3:89:59:13:a9:cc:ca:48:
                    9b:41:8a:6f:c8:ca:7a:61:36:33:be:0d:32:04:9a:
                    41:0c:6b:04:93:89:6a:e9:be:de:e1:5a:a9:1b:46:
                    c6:4d:41:fd:f3:82:fd:ef:b7:78:0b:ae:46:b6:2e:
                    a8:84:04:50:b6:6b:37:51:94:6f:3e:ea:1f:05:3d:
                    c9:99:c0:49:80:a8:24:bb:71:0b:eb:3a:26:b5:b8:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:45:36:4C:E4:14:32:F7:16:40:A2:CA:4F:6A:0A:23:E4:09:7B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecf22ebb-9019-3f14-94b8-403b0c9ecf95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:25:ba:b5:a2:96:4e:50:67:42:85:87:08:f3:15:9d:df:
         02:08:16:53:bb:46:82:d1:ea:ab:af:8b:bd:5c:24:ff:33:57:
         42:a8:45:f2:fe:96:51:65:a8:31:81:dd:6c:6b:f0:2e:19:a2:
         1f:90:08:2d:2c:81:4e:2e:e2:08:0a:e9:52:fc:bb:39:90:e2:
         18:96:35:2b:46:e4:8f:7d:8e:6e:9e:59:d2:73:d5:ff:7b:49:
         e3:c0:5b:7f:d4:f1:82:eb:a4:63:cd:a8:bf:d1:05:10:ab:2f:
         8f:f5:e7:78:94:92:b5:b0:8e:37:02:89:2a:f6:28:b3:12:77:
         99:7e:eb:82:34:48:c2:f9:db:66:a7:c1:7e:ac:35:a7:ba:7a:
         d8:8b:bd:a6:f5:4c:6c:21:40:16:86:5d:42:eb:b1:39:08:d8:
         e4:53:64:82:62:18:10:38:27:77:5a:5c:0c:8c:71:cf:fe:6c:
         72:97:d6:75:cc:49:1f:3f:a5:51:7d:1f:21:17:52:5e:b7:c0:
         f5:b5:4e:d7:31:e9:bd:e3:30:8a:a0:01:ef:e8:6b:5e:fe:29:
         ae:51:e4:f1:f0:a2:c9:22:a4:1d:68:a4:f0:40:38:10:f0:13:
         8f:23:5d:5c:54:77:eb:a7:1d:4e:e6:88:c1:b0:74:f2:ea:05:
         83:52:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:26:59 2025 by rpki-client