Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/71d8e46a-f6cc-3a1e-8036-8a849f98657d.roa
File:                     71d8e46a-f6cc-3a1e-8036-8a849f98657d.roa (raw, json)
Hash identifier:          Shjq1PeqGXWAkCMtRPWc4FbIFVC44Kyh2mL8d8d0jV0=
Subject key identifier:   93:B9:96:E2:60:07:0A:00:D2:F7:99:E7:26:E3:42:C2:95:55:72:F7
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285849B41497235DC9BF17DC519C00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/71d8e46a-f6cc-3a1e-8036-8a849f98657d.roa
Signing time:             Thu 01 May 2025 01:00:46 +0000
ROA not before:           Thu 01 May 2025 01:00:46 +0000
ROA not after:            Wed 30 Jul 2025 01:00:46 +0000
asID:                     62240
IP address blocks:        75.127.69.0/24 maxlen: 24
                          75.127.100.0/24 maxlen: 24
                          75.127.101.0/24 maxlen: 24
                          207.210.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b4:14:97:23:5d:c9:bf:17:dc:51:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: May  1 01:00:46 2025 GMT
            Not After : Jul 30 01:00:46 2025 GMT
        Subject: CN=86baee9b-6080-4c13-a491-5164630796b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:5e:7b:87:c8:be:1b:a6:58:40:c1:ee:83:
                    0a:8c:4b:2d:39:86:49:3e:da:bd:8b:92:8f:78:98:
                    96:e9:29:e6:06:17:e7:89:cb:21:be:15:e8:7a:30:
                    2c:d7:53:29:7e:3e:e5:07:c8:5a:ea:a8:9c:e4:f9:
                    39:d3:9d:fc:a6:75:63:67:06:6e:cf:20:96:5d:10:
                    b8:93:e1:6e:cc:8f:8b:aa:dd:27:65:48:e7:54:5e:
                    7c:cd:ab:65:c2:a1:6f:81:9e:f0:ae:d3:5f:13:85:
                    39:e6:e0:83:cf:71:c6:43:d1:77:ff:01:7d:fc:75:
                    28:53:65:1e:6d:ce:54:93:79:30:41:af:ee:56:53:
                    84:f9:bd:51:c2:0d:bf:4c:f6:fe:8e:97:23:2b:e1:
                    5a:3b:02:54:a1:86:5e:03:18:75:f9:dd:c8:94:3e:
                    7b:90:f9:9c:c9:02:b8:aa:e5:6c:7c:07:08:1c:2c:
                    de:c0:fc:94:7b:c4:39:b2:59:44:61:cf:c0:d9:bb:
                    7e:69:e2:80:c5:87:7e:fe:d8:89:86:04:25:c8:06:
                    9f:03:2e:0c:a9:5a:c6:66:63:d5:9e:86:9e:c2:82:
                    58:d4:ef:f7:16:a7:40:d5:f8:b8:56:54:70:6e:ef:
                    1a:d3:24:da:78:81:1b:3d:ba:55:82:44:6a:ee:02:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B9:96:E2:60:07:0A:00:D2:F7:99:E7:26:E3:42:C2:95:55:72:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/71d8e46a-f6cc-3a1e-8036-8a849f98657d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.69.0/24
                  75.127.100.0/23
                  207.210.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:06:4e:50:d1:e0:48:12:23:d3:46:c3:d7:87:08:21:ce:ae:
         0e:1c:77:12:b8:80:78:5b:a4:16:01:28:15:9e:46:f7:2d:6f:
         f4:91:3c:92:fd:63:1f:db:bc:1d:8c:5c:64:74:e5:38:6b:fc:
         16:e2:f8:83:d0:f1:d7:d2:06:3f:7a:af:4a:bd:c6:eb:a4:91:
         94:bb:ae:1d:c0:9f:84:f7:0b:a7:dc:28:b6:28:33:a6:6a:f3:
         46:7b:5e:83:48:35:e7:3f:bc:69:ed:e0:3e:c1:bf:35:9e:64:
         db:2a:01:6d:4e:9c:1e:ad:68:2c:26:cb:4d:33:61:7e:8d:28:
         06:d9:d3:c8:18:92:56:9d:9b:e5:60:c3:a4:2b:09:a9:c8:7b:
         8f:2e:fc:25:a1:4a:2f:02:56:fb:72:a5:f8:ad:9c:ef:65:2e:
         6d:14:51:41:34:69:21:b0:2c:e1:70:40:06:2c:2c:ae:66:ea:
         79:2d:50:ad:72:d8:5c:f9:ed:4f:5f:e3:f4:65:fe:d9:12:95:
         6d:88:a4:c1:a7:2f:b1:ff:ef:07:0e:1b:52:ed:af:85:ca:8c:
         71:33:8c:96:df:a3:8c:52:ee:fa:e7:ad:56:80:32:f1:b2:dd:
         71:4d:86:43:5c:9f:a3:0e:aa:bc:0b:e5:70:01:dd:14:e2:74:
         5d:b8:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:06:35 2025 by rpki-client