Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3dc80296-5fcc-3d8d-8deb-1db2e7b323c2.roa
File:                     3dc80296-5fcc-3d8d-8deb-1db2e7b323c2.roa (raw, json)
Hash identifier:          ioD7aANDtzopJKPrl83qyIjzDf+7JhgKobYQjbBx1UU=
Subject key identifier:   3A:B0:78:DF:F2:95:43:8C:A7:FE:AA:16:05:F7:00:75:D5:17:B4:75
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAFDCFB579EBE115940700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3dc80296-5fcc-3d8d-8deb-1db2e7b323c2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:fd:cf:b5:79:eb:e1:15:94:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b4d66ba3-4f8a-4a74-a547-9e9301621702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:9d:60:3b:9e:7d:a2:82:30:d4:15:88:bc:
                    1c:32:f4:5b:55:45:4f:4c:d1:f5:f3:65:c3:ad:80:
                    1c:a6:05:a2:85:8b:14:0d:1c:72:99:b6:60:33:81:
                    e2:c2:80:39:c0:99:70:28:de:6e:bb:eb:3f:86:35:
                    01:ea:ea:bc:43:53:70:8c:cc:11:01:79:a2:d3:7e:
                    3a:9c:2b:4d:22:21:a4:01:52:66:1d:26:47:c9:27:
                    c5:b5:fe:d6:1d:2b:41:ac:a1:64:2f:01:11:39:07:
                    96:a6:ac:94:7f:e6:b0:d7:07:ff:f0:7a:b5:4c:6d:
                    d9:e1:a6:5a:80:fd:3f:1d:7e:c0:8e:47:4b:7e:40:
                    2b:b9:45:8d:17:73:59:46:e8:fa:69:53:2b:a6:3e:
                    f7:c1:06:57:7f:20:5a:20:2b:00:e5:a4:9f:fb:ea:
                    ce:ea:83:20:90:ec:51:22:58:18:17:1a:ef:c5:e1:
                    5f:cc:36:31:80:8b:e2:14:b6:2e:bb:b3:61:1d:14:
                    9d:c2:0e:16:a2:9c:c1:b8:af:ee:ed:d4:50:37:3f:
                    6c:ce:6f:54:3c:18:16:3e:05:7c:b3:71:d9:62:12:
                    d5:21:6d:b2:33:a4:80:c9:32:7c:22:ef:03:51:cc:
                    52:03:af:04:e3:16:f0:0c:7e:0f:e0:9b:2e:4e:71:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:78:DF:F2:95:43:8C:A7:FE:AA:16:05:F7:00:75:D5:17:B4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3dc80296-5fcc-3d8d-8deb-1db2e7b323c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:84:dd:51:4a:ba:69:14:06:56:eb:76:b4:48:e0:4e:0d:06:
         38:4e:08:ed:4b:3d:5b:69:96:db:ea:50:51:3d:76:c1:42:57:
         c3:b3:42:b6:cd:84:93:c6:06:2e:1e:4a:28:bb:58:f3:1d:59:
         72:a5:d9:75:b0:30:f7:d9:de:52:d7:98:44:59:d0:b3:7a:75:
         a5:56:fa:6d:f3:75:50:70:98:f9:32:5c:0c:90:fd:31:e1:58:
         92:9b:52:d8:c4:5d:fb:c8:5f:6d:22:8d:54:4c:32:b1:3d:13:
         eb:28:33:a7:7c:1d:dc:fb:56:d8:f9:31:06:8d:64:d4:b8:eb:
         b0:a1:61:99:c5:c2:e9:07:96:08:b5:bf:33:8a:44:19:c6:c3:
         92:66:9a:43:2e:97:12:25:5e:cf:21:1d:20:6c:bc:fd:c8:e5:
         ca:8b:99:17:3c:4f:8d:83:20:f1:8d:08:31:60:fa:7b:9e:25:
         b3:c2:c5:5a:4b:37:13:e2:79:cd:65:aa:38:0b:10:d8:13:07:
         32:57:83:02:ac:0f:1a:6f:3d:a5:16:90:fe:08:96:2a:d8:8b:
         3f:63:ba:8c:15:e6:43:a8:a8:4e:91:65:97:d3:54:62:e6:db:
         d0:2b:b0:0c:7d:ae:7c:f1:65:95:1e:f0:df:f2:6e:8e:84:37:
         aa:ac:c3:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuv3PtXnr4RWUBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YjRkNjZiYTMtNGY4YS00YTc0LWE1NDctOWU5MzAxNjIxNzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmedYDuefaKCMNQViLwcMvRbVUVPTNH182XD
rYAcpgWihYsUDRxymbZgM4HiwoA5wJlwKN5uu+s/hjUB6uq8Q1NwjMwRAXmi0346
nCtNIiGkAVJmHSZHySfFtf7WHStBrKFkLwEROQeWpqyUf+aw1wf/8Hq1TG3Z4aZa
gP0/HX7AjkdLfkAruUWNF3NZRuj6aVMrpj73wQZXfyBaICsA5aSf++rO6oMgkOxR
IlgYFxrvxeFfzDYxgIviFLYuu7NhHRSdwg4WopzBuK/u7dRQNz9szm9UPBgWPgV8
s3HZYhLVIW2yM6SAyTJ8Iu8DUcxSA68E4xbwDH4P4JsuTnGaYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqweN/ylUOMp/6qFgX3AHXVF7R1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2RjODAyOTYtNWZjYy0z
ZDhkLThkZWItMWRiMmU3YjMyM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2l1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiE3VFKumkUBlbrdrRI4E4NBjhOCO1LPVtpltvqUFE9dsFCV8OzQrbN
hJPGBi4eSii7WPMdWXKl2XWwMPfZ3lLXmERZ0LN6daVW+m3zdVBwmPkyXAyQ/THh
WJKbUtjEXfvIX20ijVRMMrE9E+soM6d8Hdz7Vtj5MQaNZNS467ChYZnFwukHlgi1
vzOKRBnGw5JmmkMulxIlXs8hHSBsvP3I5cqLmRc8T42DIPGNCDFg+nueJbPCxVpL
NxPiec1lqjgLENgTBzJXgwKsDxpvPaUWkP4IlirYiz9juowV5kOoqE6RZZfTVGLm
29ArsAx9rnzxZZUe8N/ybo6EN6qsw+Y=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:29 2025 by rpki-client