Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7f3ebfc-b935-3fed-bdc2-8624258f5439.roa
File:                     e7f3ebfc-b935-3fed-bdc2-8624258f5439.roa (raw, json)
Hash identifier:          cpyZc99Y7knBzBEScEgtIJ8SCv89NcQzOhS57eVTEpY=
Subject key identifier:   70:0A:BD:0F:0C:2B:0E:42:2D:C9:04:3E:AE:7F:03:5E:C6:B8:5F:87
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499829CA49F5B9E9F3B8B94EC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7f3ebfc-b935-3fed-bdc2-8624258f5439.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        75.154.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:ca:49:f5:b9:e9:f3:b8:b9:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=a7ea3049-4d5e-4976-af09-16557f9d675f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:05:08:92:27:99:d9:e0:db:84:9e:c5:eb:
                    a7:ee:ad:79:51:f7:4f:92:23:2b:c9:1e:d3:54:a1:
                    a9:2e:06:a4:10:fc:6e:b9:23:0e:f9:44:42:76:36:
                    ec:6f:2a:01:93:78:55:3a:6c:27:40:ba:81:74:19:
                    2b:22:78:00:2b:26:69:d1:2f:2c:43:b5:9b:29:91:
                    a0:34:62:43:26:e1:0b:69:e2:c8:c1:c8:cb:b1:a9:
                    c6:c7:f5:c2:f5:84:32:f6:b6:80:51:c5:bc:a9:e6:
                    cd:7f:78:ae:14:43:49:9e:33:6e:c2:8c:69:63:f2:
                    f3:d3:ac:bd:ac:54:ae:a3:27:dd:1a:e9:9d:41:a2:
                    c9:c8:d6:0c:3d:45:00:b8:57:73:4f:0d:05:7e:77:
                    73:56:b7:80:3b:01:3f:e2:e6:35:b7:ce:7e:21:35:
                    8a:6f:3b:b6:02:a4:1d:bb:3f:33:9a:bb:22:3c:e1:
                    8c:89:21:44:8c:05:7b:b2:5c:51:86:a9:6b:ed:79:
                    b7:93:da:3d:73:d6:35:9e:85:a6:41:4e:b2:f5:bc:
                    de:5b:bc:18:c7:82:69:64:37:d4:22:2e:0f:57:9a:
                    09:ac:23:e8:95:d7:28:76:8f:5c:d9:7f:8f:e6:f1:
                    18:40:b1:8b:13:fe:23:33:72:d7:91:9a:62:51:0d:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:BD:0F:0C:2B:0E:42:2D:C9:04:3E:AE:7F:03:5E:C6:B8:5F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e7f3ebfc-b935-3fed-bdc2-8624258f5439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.154.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:20:d6:e5:67:ce:31:f8:9d:6d:a8:8b:9b:92:d9:78:08:94:
         ba:2c:c8:0c:30:7a:d8:a1:8e:b8:50:6f:95:eb:40:d5:fc:7d:
         a2:d9:0a:94:da:12:dd:56:43:8c:33:37:72:15:e2:65:70:b8:
         93:2c:bd:0c:1f:2c:d8:ec:f9:f8:70:4a:99:62:3c:23:a7:a1:
         d6:cf:9e:8d:1e:b1:09:dd:de:f9:34:7e:5e:54:d9:ed:7f:10:
         fd:40:ff:dd:aa:a4:7c:eb:71:c9:1d:75:ce:94:2e:57:df:2f:
         2b:df:9c:d8:19:79:a3:91:f7:5e:12:a4:09:bf:a7:24:0d:40:
         fd:c1:62:9d:76:a9:c0:84:1a:57:ac:ff:99:1f:f8:69:be:5b:
         57:81:c2:2a:27:90:d3:bd:ff:1b:ee:17:0f:11:22:61:5e:04:
         c5:02:6b:54:9b:cb:4d:18:8c:3d:94:0e:36:da:57:c5:22:7d:
         90:32:36:42:2b:7d:17:06:76:3a:d4:cc:b8:47:ee:c2:c9:60:
         71:14:86:c4:98:d0:34:00:ea:2e:55:ef:9a:e4:4b:b3:b6:94:
         81:41:7d:6e:14:62:c2:9b:58:90:29:a8:9b:12:ed:7f:38:0b:
         9b:40:6c:f4:75:45:a8:9e:3f:2d:e2:ce:6d:f8:44:a5:ea:7c:
         52:09:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:27:47 2025 by rpki-client