Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f06365b3-5f70-396c-81a0-01868adaf19f.roa
File:                     f06365b3-5f70-396c-81a0-01868adaf19f.roa (raw, json)
Hash identifier:          6qJ2wtHFiFEP/M9KnYVnPdzrNPIxv7LMM1vLuXeXZSA=
Subject key identifier:   1A:DF:CE:B7:30:E1:10:BF:95:99:EC:14:09:AD:C0:59:55:E7:F1:B5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA64E35E55DDF11159D580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f06365b3-5f70-396c-81a0-01868adaf19f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:64:e3:5e:55:dd:f1:11:59:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c7e5c014-2de9-4a2b-b605-5b4fac7368aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:f0:b4:8c:1f:c6:b1:5e:c3:ad:d9:54:12:
                    74:ff:4b:ca:2e:9c:45:f8:db:c3:ef:5f:31:5b:78:
                    22:e7:75:03:1b:ca:c4:6e:6a:cd:48:20:e9:15:43:
                    b7:7b:44:00:b8:05:c7:d3:65:2e:50:14:51:37:c7:
                    76:06:8c:c4:ee:c7:dd:e1:cf:11:a7:9f:bf:8c:96:
                    1d:ca:9d:50:e2:02:7b:e5:de:af:57:af:5c:99:87:
                    99:b4:98:96:48:d5:b2:02:a0:d2:6a:61:bf:30:a3:
                    0f:92:14:b8:14:05:96:78:a6:a1:87:0d:75:14:61:
                    cc:a0:90:08:e7:4c:49:39:0b:79:2d:77:1a:d7:64:
                    17:e8:81:03:78:14:1f:c5:cc:00:e3:2b:9e:f3:12:
                    3f:7d:6d:57:f6:20:17:2c:9a:5e:e4:33:43:6c:cd:
                    2b:c3:76:73:bf:c1:01:5f:d9:1e:81:61:b5:a4:38:
                    e6:ff:ce:5f:02:39:f3:43:5a:55:78:29:8b:0c:fc:
                    d5:32:23:6e:93:98:0d:ee:1e:50:0a:43:ab:e1:09:
                    18:3e:d0:5d:22:5f:77:b3:4a:66:96:be:51:4d:0e:
                    dd:45:a8:e4:52:a2:71:f4:c6:97:f8:01:cb:35:90:
                    39:09:fc:5d:2e:5f:31:16:da:b8:eb:73:c7:4f:e9:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DF:CE:B7:30:E1:10:BF:95:99:EC:14:09:AD:C0:59:55:E7:F1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f06365b3-5f70-396c-81a0-01868adaf19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:88:1e:79:1c:69:fc:74:91:11:75:bb:15:ac:17:bf:cf:fe:
         77:8a:a6:84:9c:6e:f9:3c:be:3e:c4:fd:f5:9f:cf:6f:e5:eb:
         b3:49:07:d5:4f:11:01:ef:b6:bc:6a:b9:36:21:56:4c:90:da:
         07:83:94:3e:2d:a2:00:be:78:13:44:f1:77:3c:37:a5:82:20:
         59:ba:80:1c:ee:bd:0a:ae:6c:97:86:fe:dc:cb:3a:ed:95:75:
         5e:ec:01:e6:e0:38:c9:c9:71:77:66:fe:7e:8a:89:f1:af:c3:
         a3:cf:19:cc:11:1d:e1:13:98:75:ca:2b:53:21:e1:05:fa:90:
         65:45:bf:d4:18:d6:d9:f9:a1:a8:56:c4:aa:b9:a6:58:f5:1e:
         15:2c:a7:c1:1d:3f:02:d4:1a:9e:f1:d5:54:7c:a2:ce:bd:24:
         ba:fb:9f:86:a4:e0:78:62:af:a8:6d:cc:51:43:9d:86:78:98:
         62:2b:a8:c3:2e:f6:ba:18:3b:2a:49:5a:0d:2e:81:43:41:11:
         ad:d3:a3:4a:51:4f:09:5e:24:76:3a:1f:45:5c:ff:03:c1:4b:
         92:cf:06:5a:c0:bf:d8:8a:2d:91:8b:7f:81:f4:a3:c8:18:8b:
         e0:f5:b5:7f:3d:57:7f:2d:94:ef:ad:ec:67:30:69:98:ad:35:
         30:66:68:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:10:15 2025 by rpki-client