Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a5c3607-cc0b-38c9-a7ee-86bec66eb226.roa
File:                     5a5c3607-cc0b-38c9-a7ee-86bec66eb226.roa (raw, json)
Hash identifier:          j6r7zJlqOUtcefy/G4cyJvVrBjcXn6c9W5bspSlD7Zw=
Subject key identifier:   CC:A8:39:D5:D6:80:7E:23:31:68:64:6E:00:DE:7E:7D:38:FE:B4:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA712480FFE15BA156BF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a5c3607-cc0b-38c9-a7ee-86bec66eb226.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:71:24:80:ff:e1:5b:a1:56:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=80d31539-37e2-4a8b-971a-5642dd7e7905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:84:7e:bd:75:04:4f:06:ae:dc:10:94:e1:
                    5a:2c:28:8e:25:9b:27:65:08:6c:46:a0:0f:7d:c4:
                    ef:d3:b3:1f:f2:c4:63:9e:0f:1f:13:78:32:f1:af:
                    0b:37:33:b0:10:fc:e8:c6:be:0e:0a:da:09:20:7e:
                    37:3b:84:b3:63:44:49:73:08:4d:f0:5e:94:9f:02:
                    08:eb:95:e4:66:00:6b:fb:e9:bb:7c:49:e4:73:2d:
                    2c:6c:28:49:02:8a:b2:a5:04:8d:84:3b:dd:51:19:
                    ba:e1:fc:dc:19:f6:c1:d9:d7:29:8b:fc:20:bd:83:
                    18:c2:43:2e:fa:97:53:ac:08:5e:b2:0f:a6:9e:00:
                    d9:fa:cd:62:6a:97:28:31:d6:62:6a:8f:af:6b:cd:
                    d4:2a:76:e7:17:5b:df:ad:36:10:c3:43:c7:c0:44:
                    ab:47:b5:32:a6:c9:eb:61:ea:6a:ff:07:ae:d2:07:
                    cb:cc:81:26:80:a3:5b:67:f7:16:09:39:87:2f:55:
                    ba:8d:aa:b9:d1:6c:82:da:49:ab:0e:62:0b:4a:0b:
                    42:01:0a:4a:eb:60:de:9e:ae:36:50:34:86:f2:bb:
                    bf:04:f4:7a:ba:51:e3:dc:40:a9:58:89:bd:3c:d3:
                    1f:82:d6:f3:66:90:1a:62:69:0a:52:18:7e:cf:5a:
                    06:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A8:39:D5:D6:80:7E:23:31:68:64:6E:00:DE:7E:7D:38:FE:B4:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a5c3607-cc0b-38c9-a7ee-86bec66eb226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:80:0d:8b:03:32:1d:49:f8:c7:aa:e8:05:40:ff:fa:a4:86:
         65:02:e4:06:fa:47:b1:57:8f:c5:60:04:b8:93:12:a8:84:c4:
         5b:d2:0a:e4:8e:50:c5:6a:b8:87:76:8f:75:c7:3c:45:ea:58:
         62:c9:a0:e8:f6:e2:fe:29:16:3e:1d:58:a9:9b:28:4c:ba:a5:
         69:20:5f:52:68:13:fb:eb:4d:d9:97:f7:eb:42:33:22:c8:39:
         63:6b:46:24:37:ca:50:94:35:a8:04:6f:36:b2:43:c2:04:d7:
         f9:cd:ce:42:c4:0e:1c:bf:1a:50:c2:da:c2:89:00:4a:3d:4b:
         d9:18:4c:7f:e8:48:36:17:94:0b:82:82:7f:ef:46:7d:f3:54:
         a6:bb:ab:dd:f6:c4:52:94:4a:b3:57:97:51:c8:61:15:c6:46:
         7f:40:ff:2b:ef:dc:57:2b:7c:40:40:04:02:f2:21:88:24:5c:
         02:8d:f7:5a:aa:86:bc:fb:0e:f2:02:ec:72:b0:52:ea:e2:97:
         b0:43:ff:a8:45:93:d9:cf:08:78:ff:f8:0b:b4:a0:36:26:9f:
         29:de:1b:4d:7e:f6:f0:74:c0:58:2c:52:d9:47:48:eb:d7:c6:
         d8:20:76:2e:34:09:01:a9:96:48:86:0d:77:ad:f3:35:18:4f:
         3c:ef:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:49:35 2025 by rpki-client