Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1859007e-2cac-3c73-992e-ac8b29b7cc1e.roa
File:                     1859007e-2cac-3c73-992e-ac8b29b7cc1e.roa (raw, json)
Hash identifier:          uJC3tFkgGKi7bUVFMOJN2oFNINoYBOrknyWFOFVF3us=
Subject key identifier:   68:21:E1:62:F0:A2:76:FF:79:7D:70:2B:92:CE:BB:51:61:4E:DC:C1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6D930A2A74F381185B20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1859007e-2cac-3c73-992e-ac8b29b7cc1e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:6d:93:0a:2a:74:f3:81:18:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=6b62f62a-93f1-4a96-b2df-d202658e38df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:f4:d4:0e:96:10:9d:f5:7d:63:00:c2:73:
                    05:97:72:13:8c:d7:d4:e7:6d:22:d5:fd:8f:b3:cc:
                    60:b3:f3:53:48:08:df:32:03:d7:d6:90:1e:44:37:
                    b9:4f:f3:c9:f7:43:af:ee:3e:6d:09:60:6e:45:12:
                    21:06:5d:58:ff:c5:16:3a:53:2d:92:db:96:08:b8:
                    fa:6c:fc:b7:52:05:99:9a:af:d3:2f:7a:26:a2:ce:
                    48:03:2d:3b:be:70:30:ef:e6:4f:12:43:20:84:82:
                    46:eb:21:9a:b9:27:91:c4:f3:9b:87:14:69:98:95:
                    aa:8c:18:55:14:de:db:56:bc:d9:b6:35:6b:b9:d7:
                    91:6d:c7:0b:fd:14:42:22:55:15:68:4a:68:a4:21:
                    7b:e8:1e:b8:35:b7:67:63:2e:03:35:6e:ba:42:ac:
                    55:5f:72:a2:3d:88:4d:50:91:98:1a:ce:81:ca:99:
                    fc:f8:5f:45:d8:90:41:c7:e0:78:5e:51:a6:ac:3a:
                    53:2f:f1:88:28:b0:76:39:ee:fa:5b:3d:9c:c8:e5:
                    f8:90:c1:b0:13:b6:a7:94:cd:d8:a1:8f:4e:02:fa:
                    32:f9:a1:6c:c2:e3:83:8e:76:90:2b:61:40:37:9f:
                    fe:f0:18:12:7b:1f:37:88:1a:55:74:a1:84:d3:d3:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:21:E1:62:F0:A2:76:FF:79:7D:70:2B:92:CE:BB:51:61:4E:DC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1859007e-2cac-3c73-992e-ac8b29b7cc1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:21:21:b7:8a:40:fc:b4:34:5d:16:4b:a4:8f:eb:e1:23:b5:
         13:fc:4f:40:ee:1c:30:a9:01:70:19:f3:bc:8e:fa:dc:27:8f:
         6e:46:8b:8e:dd:69:db:cf:88:7c:6c:89:65:c7:b4:d3:36:96:
         10:a4:a5:85:c8:b7:f9:4f:8b:9f:6f:2e:b9:3a:cf:49:1e:f8:
         e5:8f:72:71:8b:dc:db:a5:18:9a:29:68:16:4d:1a:5b:9f:8e:
         4b:9e:f2:d6:d0:d4:5c:f4:70:f2:0c:41:0f:f9:21:d2:b9:49:
         e5:99:1c:79:eb:8c:2a:23:38:b5:7c:29:96:c2:7e:ce:19:b4:
         df:05:4c:32:16:4d:e8:c2:67:6e:d7:ff:03:ea:72:0c:b4:c7:
         6c:d9:9c:7a:f5:95:05:bf:51:68:71:8c:70:fd:25:72:ca:e5:
         8e:4a:6b:c9:4a:eb:15:e1:09:19:b7:bb:ad:95:0f:28:0f:56:
         70:2c:3f:f4:39:db:ae:65:6c:aa:3e:aa:d7:02:bc:53:8d:eb:
         4f:b3:4c:f2:a1:e2:b7:1d:df:a1:84:ce:f3:fc:7a:5e:56:54:
         af:23:63:aa:1e:c7:ec:8e:de:17:48:e3:a0:8f:54:52:33:13:
         4c:74:ac:c8:89:1e:52:d5:d5:42:1f:74:00:b5:67:e5:b7:86:
         a3:ad:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:11:35 2025 by rpki-client