Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/033189e7-3b15-3bf6-84ab-2e9184e3c26c.roa
File:                     033189e7-3b15-3bf6-84ab-2e9184e3c26c.roa (raw, json)
Hash identifier:          /v3vRZP2A1Pfl98A4/ABiSBGcMBxwtZ/dlCrxdx6eVg=
Subject key identifier:   BF:CD:05:49:81:1B:1F:3F:F9:33:85:E0:D6:73:DB:A8:F9:64:45:AB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6755755680196F0CFC5E
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/033189e7-3b15-3bf6-84ab-2e9184e3c26c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:67:55:75:56:80:19:6f:0c:fc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=fe01bfc4-a32e-43de-8643-819e3604ff20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:ed:0c:0d:e9:ee:1c:da:3a:03:77:19:af:
                    a3:6a:0e:ed:24:a0:9f:2d:93:fb:d5:9c:f8:27:36:
                    2d:96:95:3b:8e:4d:68:1a:a1:93:c5:85:f9:30:ab:
                    bc:07:1c:e7:4e:32:41:a7:0d:82:40:75:91:89:4f:
                    24:af:79:07:5e:a2:b7:0c:85:6d:7e:2a:2b:1f:d1:
                    45:76:30:ff:d9:bf:7e:aa:a9:3b:4f:3f:23:98:25:
                    14:51:df:4a:33:2f:2f:25:80:6a:3e:c8:3c:80:26:
                    28:e7:04:93:1d:fe:2a:6a:2d:7a:c3:3c:6a:93:3b:
                    ba:ff:92:61:f0:4f:71:34:9f:2c:24:e2:5a:7b:c9:
                    ad:ed:6a:71:27:a4:4e:99:f5:64:0a:00:bf:f2:61:
                    e3:d7:8e:92:98:f7:b9:f7:a3:ed:f9:5a:13:d2:24:
                    cf:a6:51:93:54:e5:36:a7:70:79:e9:10:c5:01:61:
                    29:8f:9c:c0:f1:c7:ea:bf:ba:ef:e5:ea:b6:63:13:
                    d4:1a:90:cb:1a:70:87:e6:bf:cd:29:f4:6f:70:08:
                    fd:3f:20:2a:58:66:3f:10:a8:d0:55:7d:0d:69:6a:
                    80:28:ee:fb:41:1b:ac:10:b1:0c:1f:34:a2:f1:2e:
                    75:98:12:6f:70:f6:32:6c:de:f6:91:c2:d1:3a:8f:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CD:05:49:81:1B:1F:3F:F9:33:85:E0:D6:73:DB:A8:F9:64:45:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/033189e7-3b15-3bf6-84ab-2e9184e3c26c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:06:22:3a:26:92:47:f0:3f:b6:48:38:8b:0d:fb:37:fa:
         3f:16:e6:f9:a3:ad:9f:74:c7:79:b9:5d:99:e7:0f:36:07:59:
         fb:a6:b2:97:5c:82:05:d7:85:1e:31:ff:c4:80:66:d0:e9:57:
         2e:cc:78:21:98:c2:31:9b:76:30:5b:af:d9:53:51:33:cd:3d:
         36:84:72:95:11:f1:4c:52:d6:52:91:21:01:17:f0:05:bb:f4:
         1e:e1:4e:28:19:ca:1f:94:11:5b:5d:0f:1b:35:20:fa:5a:be:
         fd:d2:30:87:6d:3c:72:16:eb:c8:38:ac:d7:b0:74:c4:b3:7a:
         fd:2e:d6:f5:02:c0:58:ac:35:26:dd:8c:f4:fe:dc:de:65:10:
         97:87:f3:ad:5a:71:95:18:07:ac:c9:52:dd:9a:94:3f:40:19:
         a8:5a:96:ee:58:04:e6:f9:be:ad:b5:2c:c6:09:58:7a:21:67:
         52:3c:a3:3e:56:fe:c2:d9:f4:fd:03:d7:d9:51:3a:f2:d0:61:
         27:a5:17:0a:83:13:91:54:0e:ba:b5:04:7e:fd:25:7d:10:ef:
         1c:e8:87:71:6e:73:5a:66:66:0d:8f:72:86:d0:b5:15:68:f6:
         93:7d:27:70:8b:89:80:b5:2e:76:e3:4e:11:09:17:f1:22:63:
         a1:f2:fa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:27 2025 by rpki-client