Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd997654-ec3b-3a87-8090-8042cc2663b0.roa
File:                     fd997654-ec3b-3a87-8090-8042cc2663b0.roa (raw, json)
Hash identifier:          +Y7M6zL6kPGXYJfXPtX1g19/5qL6Qhu5IVb/I/mNPJQ=
Subject key identifier:   A5:C5:AC:22:AA:A9:DE:FF:46:0D:0C:76:CD:2D:14:F6:24:55:91:B4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAF685D1481CC0C0EDA100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd997654-ec3b-3a87-8090-8042cc2663b0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:f6:85:d1:48:1c:c0:c0:ed:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=076da2cd-3944-4386-b210-52518436e98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:26:d7:d5:57:30:dc:8e:1a:03:92:bd:fb:
                    7e:f5:36:71:8b:59:55:9b:81:14:17:fc:38:35:2c:
                    05:c1:24:c4:85:b5:26:47:17:00:98:d6:c9:d6:45:
                    92:bd:3c:bc:91:fb:14:71:e0:c8:6c:70:97:cb:cd:
                    82:82:d7:39:01:58:6c:66:29:26:20:b0:09:0f:15:
                    39:b6:78:cd:b6:a5:40:13:9b:fc:54:fd:58:d4:2c:
                    be:18:1d:f8:48:17:d3:a4:7a:ba:68:39:0a:2e:91:
                    1c:07:cb:04:7c:df:08:ce:58:f2:a7:60:70:d2:e7:
                    7b:51:ec:23:2d:f2:4c:a9:c1:33:2d:43:ed:2c:8e:
                    aa:08:7e:a7:2a:3d:23:fb:1c:68:54:b9:c4:0a:84:
                    a2:b0:16:e4:08:a3:76:76:17:97:f0:b8:f0:66:f8:
                    10:86:7b:22:dc:87:69:65:bb:42:90:5e:17:ff:67:
                    92:ef:2f:bb:9b:e7:59:59:e0:4d:6d:70:02:b1:0d:
                    b6:e5:ba:31:2b:1b:1b:29:a9:ef:e7:30:f0:3b:b7:
                    60:03:28:50:39:49:11:9c:54:a7:60:f8:df:ca:55:
                    7a:57:42:01:c1:50:01:55:02:a8:55:39:e4:80:2e:
                    a4:8c:4e:f0:83:fa:e1:ad:6f:c1:ca:38:5e:e2:15:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C5:AC:22:AA:A9:DE:FF:46:0D:0C:76:CD:2D:14:F6:24:55:91:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd997654-ec3b-3a87-8090-8042cc2663b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a8:5d:16:21:67:0d:dc:34:9a:18:f9:eb:9c:57:00:55:a7:
         78:f4:61:31:f2:b2:55:60:58:e7:29:9e:8a:a8:d2:7c:aa:c9:
         26:8c:65:ad:98:c8:53:d1:e8:aa:a6:67:8c:86:78:84:28:46:
         db:ec:62:85:25:dc:ae:28:1a:51:3b:40:b9:2d:7e:e7:3d:37:
         9a:0e:20:81:92:1d:29:de:aa:70:a3:22:71:9e:98:0c:8d:8f:
         d9:48:b4:b3:e9:28:cc:7c:5e:95:d6:f5:1a:ee:b0:71:2d:53:
         55:40:54:a3:1d:d9:97:3f:79:9f:b0:e3:b5:40:d4:36:0f:fe:
         0b:03:ef:55:60:47:92:07:2c:32:ac:f1:62:0e:60:c5:05:41:
         11:67:7b:fc:7f:8a:2d:6d:e6:c7:21:d0:a8:95:83:d4:7f:8b:
         6f:0d:14:4c:5b:86:2e:81:47:78:ef:c4:74:3d:bf:c2:98:c1:
         0e:ac:a5:db:c3:3c:f7:ce:2e:cd:2b:35:da:00:04:58:51:66:
         f1:f4:1c:ec:f9:08:85:8c:96:c6:d3:c7:45:4f:d4:39:f2:37:
         b4:14:50:9d:1d:60:d3:c3:e0:5e:cc:25:9e:a0:20:a7:07:da:
         54:c2:4c:c2:b0:ec:db:6d:c4:26:37:05:fa:2a:ee:1b:87:c4:
         9a:28:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:20:20 2025 by rpki-client