Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa
File:                     449091b6-bc68-39cb-9f21-212909ed0619.roa (raw, json)
Hash identifier:          qJIlG2EnuC+wHfbZh4LXQC+oK6b1cJ+cYiOIIgntNho=
Subject key identifier:   63:B3:7C:94:FC:F5:FA:C4:C8:BB:A6:63:AD:C5:AA:4E:D7:2E:81:EC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD79624C6315C6CCAD998E
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     16491
IP address blocks:        75.104.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:79:62:4c:63:15:c6:cc:ad:99:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3a175d84-b438-4e32-a583-edc6e55dc916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:87:f1:2e:25:5f:4d:ff:48:66:29:18:1c:c3:
                    3c:02:35:fb:fe:70:79:fd:5c:72:54:0e:7f:53:5e:
                    3a:0c:f7:70:ec:3a:a1:7d:5b:9f:db:04:45:ed:9b:
                    3d:2c:d9:60:b5:17:d6:1c:62:81:ad:b4:1c:31:8d:
                    95:df:24:b0:ad:d8:b7:1c:be:31:96:e0:5e:08:58:
                    71:d7:b7:aa:0e:2d:6d:60:3d:01:3b:5c:d2:ac:aa:
                    28:ae:2c:04:15:7b:68:dc:ed:bd:6d:ca:e2:f3:27:
                    f9:b6:4e:80:11:ae:1b:ea:8b:4f:a6:f4:12:b0:3e:
                    25:0b:a0:bc:66:16:38:a9:33:f8:68:4d:50:fd:de:
                    13:5d:1d:f5:9a:60:fb:8d:a5:f1:c6:81:24:53:f6:
                    3f:8a:c7:b8:2b:a8:4b:75:9f:55:56:bc:e8:5f:9b:
                    b9:9e:31:4f:fc:c6:b9:ad:76:af:2d:8a:28:90:f0:
                    25:84:fa:89:b3:79:a7:a7:43:da:79:5e:14:d2:64:
                    87:ea:46:33:cd:d4:9b:d4:90:b0:6c:da:49:68:43:
                    37:6b:b2:dd:8b:e8:f0:35:51:d8:df:5d:34:ea:39:
                    31:ce:d6:bb:27:24:eb:a5:b3:96:c7:a9:54:e8:9e:
                    ce:53:89:88:85:11:67:98:cb:a0:9b:44:84:fc:53:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B3:7C:94:FC:F5:FA:C4:C8:BB:A6:63:AD:C5:AA:4E:D7:2E:81:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/449091b6-bc68-39cb-9f21-212909ed0619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:0a:16:bd:19:e9:79:83:c7:31:b2:fb:2a:a9:cb:f6:58:
         d8:68:ff:36:58:e3:93:1c:7f:53:9e:d6:84:69:7e:a7:12:1f:
         cd:28:83:c5:4a:6c:44:44:55:3a:f9:a4:4f:c7:24:e4:01:9b:
         f8:d3:7a:88:e1:66:01:b0:9a:a4:8c:08:ad:f9:f1:46:2b:23:
         53:66:f7:91:90:2d:2e:21:2d:31:0f:da:a4:20:32:88:f4:96:
         44:11:d5:c5:9a:a4:28:84:7b:b0:ff:1c:7d:4d:36:3d:f0:1f:
         16:67:c1:ec:80:73:dc:35:e8:37:d2:38:ee:73:7b:24:a6:ce:
         ca:50:f0:ff:b2:ae:0f:6a:9d:0d:47:a0:23:63:bf:6b:e7:ca:
         6d:51:7f:5b:46:2a:69:78:1f:64:58:65:dd:ab:e6:eb:c2:45:
         13:d3:42:90:bb:25:53:8a:4d:64:91:17:76:27:89:59:f5:94:
         6a:3a:96:a3:b4:43:98:87:7b:30:d0:f8:c8:86:63:ac:b1:be:
         4b:c3:81:07:32:76:e7:f2:ca:08:48:c5:52:ed:01:f0:11:49:
         57:fc:fb:f8:9f:8e:73:d8:5f:28:29:ed:e6:07:df:88:9a:53:
         b3:71:ed:eb:c0:6b:8f:30:8b:51:5f:5b:96:a5:b1:ba:d0:5a:
         46:59:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:08 2025 by rpki-client