Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/143be4c1-4cfa-30f4-b772-cf8169044e67.roa
File:                     143be4c1-4cfa-30f4-b772-cf8169044e67.roa (raw, json)
Hash identifier:          VeaVxCcZc8RycczIy9Ale/TbnnCL96fyKVVGYCXVxNk=
Subject key identifier:   5E:D5:E4:C2:5E:67:4D:A8:35:66:E0:65:4E:74:E5:9E:B0:EC:AF:7C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA71AC08409286399DC300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/143be4c1-4cfa-30f4-b772-cf8169044e67.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:71:ac:08:40:92:86:39:9d:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=87c0eba8-cdc4-4318-a310-313e2dd9662b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:86:bd:dd:6f:6e:35:59:e9:46:4e:16:91:
                    ba:45:49:24:01:39:7f:22:14:d2:47:8c:e7:c8:6e:
                    4b:7d:b8:8b:74:0e:47:53:9d:23:08:a1:16:79:9b:
                    0e:95:db:b3:02:75:b3:ba:1c:3c:68:6d:bc:61:56:
                    e2:5b:df:60:e7:e7:a8:87:3e:a5:a4:32:b2:0a:5f:
                    f1:1c:2e:34:54:c0:3f:f8:73:df:3f:61:cd:d5:1d:
                    e4:47:a2:3a:22:b6:7f:fc:7b:c5:73:df:cb:a5:16:
                    b9:c4:03:eb:e2:76:e7:34:7a:c2:b7:46:65:7e:74:
                    26:fb:26:b4:e4:2b:d2:9b:dc:fd:93:94:f8:08:1d:
                    90:00:bf:47:e4:20:5b:79:c7:3c:e8:f8:56:ac:95:
                    0d:5f:72:97:2c:be:ee:cf:bd:3f:dc:9b:e5:d1:f6:
                    31:27:a2:f0:ea:1a:6f:1f:39:ae:27:37:7b:7b:d3:
                    ef:13:86:d1:57:b8:35:b4:4b:f9:15:71:77:bb:15:
                    a1:ca:23:37:03:b7:8f:14:63:07:aa:ef:a1:e5:30:
                    f9:aa:e5:3b:1d:7c:78:c1:51:c6:ee:c0:ae:2a:f7:
                    17:f2:be:4e:84:1a:ce:8d:90:d9:47:29:e9:07:00:
                    a4:be:f2:91:5c:7a:25:f0:06:51:7b:80:42:65:13:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:E4:C2:5E:67:4D:A8:35:66:E0:65:4E:74:E5:9E:B0:EC:AF:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/143be4c1-4cfa-30f4-b772-cf8169044e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:8e:f8:d8:54:cd:f1:6a:e3:65:35:0b:4d:ba:87:1c:7a:
         7d:3f:04:2b:67:a7:30:17:2a:f7:9e:a6:7e:84:ce:af:31:2f:
         89:13:86:c5:3a:37:bc:d1:58:08:53:ab:ef:9d:7d:6e:9b:41:
         e6:9f:4d:64:ac:8f:db:bf:3d:ca:86:7d:7e:08:47:ce:9b:23:
         19:f9:06:74:f6:d8:b7:0e:63:46:80:a9:6c:80:aa:e3:5e:7f:
         35:9c:06:50:01:80:90:8d:f8:8c:80:4f:6f:05:23:91:7d:19:
         ad:27:f0:de:cc:7b:f2:63:a3:81:76:df:73:ee:7d:42:10:c4:
         7d:64:88:aa:29:96:dc:5a:84:7c:8e:9d:58:c8:da:2a:eb:63:
         34:04:f4:89:4f:7d:de:a5:87:79:1a:31:e0:34:75:5d:12:4e:
         68:49:06:b1:69:5d:9a:28:72:77:6f:37:ac:5e:01:a7:35:52:
         cf:aa:88:fa:07:1f:20:63:00:41:a8:96:e5:82:ea:b5:20:89:
         c3:38:07:e4:ff:a6:09:3c:f0:93:42:9a:8b:f1:50:db:7c:ed:
         52:08:b0:c6:a8:04:d5:b4:ff:54:cd:da:73:36:d5:56:b1:8a:
         5c:5e:ad:03:48:4c:27:1b:2c:ad:a2:ca:6c:86:10:73:2a:86:
         53:73:de:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkunGsCECShjmdwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ODdjMGViYTgtY2RjNC00MzE4LWEzMTAtMzEzZTJkZDk2NjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirOGvd1vbjVZ6UZOFpG6RUkkATl/IhTSR4zn
yG5LfbiLdA5HU50jCKEWeZsOlduzAnWzuhw8aG28YVbiW99g5+eohz6lpDKyCl/x
HC40VMA/+HPfP2HN1R3kR6I6IrZ//HvFc9/LpRa5xAPr4nbnNHrCt0ZlfnQm+ya0
5CvSm9z9k5T4CB2QAL9H5CBbecc86PhWrJUNX3KXLL7uz70/3Jvl0fYxJ6Lw6hpv
HzmuJzd7e9PvE4bRV7g1tEv5FXF3uxWhyiM3A7ePFGMHqu+h5TD5quU7HXx4wVHG
7sCuKvcX8r5OhBrOjZDZRynpBwCkvvKRXHol8AZRe4BCZRMY3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7V5MJeZ02oNWbgZU505Z6w7K98MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTQzYmU0YzEtNGNmYS0z
MGY0LWI3NzItY2Y4MTY5MDQ0ZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2pUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIOjvjYVM3xauNlNQtNuoccen0/BCtnpzAXKveepn6Ezq8xL4kThsU6
N7zRWAhTq++dfW6bQeafTWSsj9u/PcqGfX4IR86bIxn5BnT22LcOY0aAqWyAquNe
fzWcBlABgJCN+IyAT28FI5F9Ga0n8N7Me/Jjo4F233PufUIQxH1kiKopltxahHyO
nVjI2irrYzQE9IlPfd6lh3kaMeA0dV0STmhJBrFpXZoocndvN6xeAac1Us+qiPoH
HyBjAEGoluWC6rUgicM4B+T/pgk88JNCmovxUNt87VIIsMaoBNW0/1TN2nM21Vax
ilxerQNITCcbLK2iymyGEHMqhlNz3iU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:56:54 2025 by rpki-client