Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083b155a-4575-3bc3-b481-d473ea8960c8.roa
File:                     083b155a-4575-3bc3-b481-d473ea8960c8.roa (raw, json)
Hash identifier:          INSBhnDD42NDuY2U7EoS5gl8ejTVCNTMscUSmM5SNk8=
Subject key identifier:   CF:2E:E3:EA:CB:CE:31:67:0E:C6:AE:3A:36:A3:F8:1A:62:10:5F:8B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7A0727A8C1D9272241C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083b155a-4575-3bc3-b481-d473ea8960c8.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.107.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:7a:07:27:a8:c1:d9:27:22:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=85c58074-4ff1-417f-90c9-a5bf55ad6dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:73:62:1b:bf:7c:5c:c5:64:55:f8:79:3e:8c:
                    42:93:ce:04:7e:9b:06:3d:58:ff:dc:a0:56:b4:c0:
                    27:1f:54:0c:2a:77:2e:5d:af:69:31:6a:d8:da:01:
                    91:d8:80:c6:7a:15:ed:25:28:03:87:d5:9b:f6:17:
                    e2:08:3c:33:59:43:86:b0:03:ed:a3:3e:29:9c:00:
                    26:87:6a:f9:39:19:bd:fc:87:75:7f:b8:45:0b:7f:
                    ba:74:77:1a:1d:c1:b5:86:c0:96:32:2d:1e:7a:b1:
                    d4:10:ce:52:2e:ca:12:68:d3:69:dd:30:20:7a:d3:
                    24:e5:56:7f:e0:ea:f8:06:f1:7d:11:ce:66:a1:64:
                    98:c2:6e:94:91:36:8f:1d:4e:72:d3:4e:81:62:8a:
                    5f:a1:cb:ba:25:da:00:ae:08:34:a2:5c:96:35:26:
                    b0:99:c9:6c:f0:28:43:f5:13:ff:b8:9b:e2:5f:a9:
                    77:a1:40:b2:05:b3:71:39:80:2d:16:bf:10:6a:d4:
                    51:c5:4e:eb:2d:2d:46:b6:c3:cb:47:69:8d:f5:9f:
                    19:ac:40:c3:02:c3:51:ae:13:9e:59:c7:6c:d9:5e:
                    b8:4c:80:70:3c:a6:ad:c6:57:32:c5:35:34:37:e8:
                    0c:4d:d6:eb:a9:45:f0:b7:97:7f:08:d9:47:ad:b7:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2E:E3:EA:CB:CE:31:67:0E:C6:AE:3A:36:A3:F8:1A:62:10:5F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083b155a-4575-3bc3-b481-d473ea8960c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:c4:21:5e:69:84:22:3e:fb:72:c1:4c:63:ae:d1:a4:99:
         97:69:14:00:94:44:fc:e4:5b:2a:7a:bd:a2:9c:95:28:e8:ff:
         f2:c9:16:e4:06:99:54:07:5f:0e:7c:56:b3:d2:4b:bf:45:16:
         2a:3d:2b:cb:10:e6:fd:ed:85:67:75:90:6e:8b:08:0d:6e:dc:
         7f:c9:99:01:7e:1b:31:84:3f:b5:9e:83:a9:a5:76:eb:5d:6e:
         b0:8d:e8:e1:e3:cf:4a:d4:de:53:d3:82:60:e1:95:6b:43:72:
         80:84:04:a1:98:97:9b:0f:e8:f8:4f:b4:d2:76:ca:c5:53:2b:
         82:96:71:df:fc:5a:c2:6e:a8:c2:99:9a:20:58:49:83:84:b2:
         7d:32:cc:03:a8:0d:e8:6f:49:e2:05:19:58:d1:bd:7b:9f:51:
         39:57:27:67:2b:ef:98:6e:09:f6:b8:ac:f5:ef:e2:80:7a:da:
         c5:aa:c2:8d:36:e7:42:b1:8c:eb:aa:f8:b8:39:41:52:ef:71:
         e6:9f:54:68:d5:45:80:4a:a8:e5:e0:74:9e:a2:3c:5d:c5:82:
         b6:28:ec:dc:82:52:e2:27:8a:c6:8b:8d:21:92:5b:90:56:18:
         76:59:4b:df:c0:aa:6b:2b:63:43:80:04:05:60:b2:08:28:1b:
         04:df:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:45 2025 by rpki-client