Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bcf59fc-add5-30d6-8ac1-b0ccf5af19c9.roa
File:                     5bcf59fc-add5-30d6-8ac1-b0ccf5af19c9.roa (raw, json)
Hash identifier:          s3tFHxvONcUVFUYDJFKCWSuT0ut2mBVUHukDdfu2huk=
Subject key identifier:   61:61:EF:D7:9D:44:D8:23:32:AD:BF:AF:53:DA:2F:B6:24:5E:0A:E1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA708A8420D6AF540FCCA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bcf59fc-add5-30d6-8ac1-b0ccf5af19c9.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:70:8a:84:20:d6:af:54:0f:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5ba74e19-d31f-4197-876e-845f028bd8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:13:e4:55:56:1c:5c:8a:7f:7f:b2:07:ba:
                    e8:d9:7e:d0:d8:50:52:54:c2:20:de:1b:3e:ce:ec:
                    4d:8e:eb:ce:b3:d9:e8:77:4e:dd:74:d3:f5:62:d8:
                    93:9d:5b:7b:a1:48:b0:de:98:87:d0:c8:9c:ce:dc:
                    4a:94:e2:9a:1a:a7:99:64:02:7b:59:0b:1c:f6:a1:
                    b8:fa:30:1a:e5:80:8f:ef:53:05:cb:bf:50:ee:eb:
                    fb:78:43:e9:32:8d:ed:17:4d:0e:09:87:75:55:2f:
                    75:54:7f:1c:ff:82:4f:e2:49:8b:d1:19:f5:26:03:
                    9a:78:61:47:0d:c4:c6:f3:a5:9a:ef:d0:6c:2d:57:
                    b6:6a:b3:9c:d1:2f:0d:de:71:d8:44:64:88:8d:1f:
                    ae:34:ce:c1:33:09:f6:fc:9f:c2:ee:9a:11:8c:17:
                    ac:07:57:39:a2:38:cd:b1:71:aa:3f:ac:da:8f:b7:
                    68:5d:ab:af:b0:ab:a8:58:f4:1a:1a:4d:7f:99:75:
                    24:a8:47:0b:0e:2d:5a:47:47:00:95:92:27:d7:2d:
                    fe:62:fd:15:a8:96:f5:13:57:b2:79:be:fd:6c:1d:
                    be:3e:a2:bf:79:f4:55:fb:c1:3e:f0:77:02:84:28:
                    f8:61:11:1e:06:7d:9e:20:47:3b:75:1e:68:1d:af:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:EF:D7:9D:44:D8:23:32:AD:BF:AF:53:DA:2F:B6:24:5E:0A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5bcf59fc-add5-30d6-8ac1-b0ccf5af19c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:62:ad:ff:5b:56:43:b5:98:23:77:99:7d:45:c3:52:7e:
         bc:82:d3:ba:52:0e:d8:3b:f4:ee:9a:96:cd:d3:86:d8:35:73:
         6d:cc:1b:99:38:87:a5:19:11:88:2c:a4:50:dc:bc:fd:74:36:
         df:4d:2c:37:52:9b:c6:98:c2:ad:26:09:90:a7:23:78:79:47:
         fc:3b:c8:bc:6c:ec:54:ef:f3:fe:74:2e:55:b7:6e:3f:89:31:
         4e:ae:5b:ea:8e:db:01:2d:68:dc:e7:fc:28:dc:17:fa:c4:cd:
         ce:8c:a2:d8:92:da:b6:02:6b:f2:a2:f1:0d:cf:e7:5a:bd:1a:
         60:ef:bb:eb:22:0e:e5:49:22:ac:b5:eb:9d:4a:9d:b1:06:28:
         cf:94:7d:ee:67:1c:3c:58:81:c4:7e:53:f4:12:58:e9:ab:fc:
         52:0d:00:ca:17:22:2f:9a:25:5a:4f:92:10:4e:d1:0a:62:da:
         b5:b5:c1:6f:9e:dc:d9:85:bb:87:58:3a:60:47:38:67:99:1c:
         9a:42:e7:7e:af:ef:f7:e8:4e:39:de:b7:33:05:2e:a7:66:a9:
         8e:f3:b4:ba:58:3e:da:ae:38:c0:6e:50:2e:98:90:ec:46:c9:
         28:5c:3c:34:21:8f:9c:4d:d6:98:83:43:64:86:8c:c1:b7:76:
         3c:8b:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:38:47 2025 by rpki-client