Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74585316-e1f0-3bdb-b799-f903d43bdce5.roa
File:                     74585316-e1f0-3bdb-b799-f903d43bdce5.roa (raw, json)
Hash identifier:          B2DPwbdL2JfuBz9jO/IcaiDo0kPnZGHU2cTwD667ilw=
Subject key identifier:   6C:81:29:4B:A0:C7:06:AE:64:80:99:1A:4C:4A:1D:11:86:3B:AB:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6A270B31E2805A131500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74585316-e1f0-3bdb-b799-f903d43bdce5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:6a:27:0b:31:e2:80:5a:13:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=0aab798a-fb88-4fae-8020-4950ef1c5a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:e6:51:e5:b8:61:29:84:7a:25:f0:1c:cb:
                    cf:81:48:b1:96:7a:fd:8c:4e:c6:ae:b7:5a:2f:5c:
                    31:b1:5b:f7:2b:c4:1c:f8:8b:f9:04:ba:9f:5a:b8:
                    f5:bd:ed:a6:63:d4:97:a0:be:b6:d5:f2:72:ec:3e:
                    7f:c2:ae:29:90:76:85:ae:10:b0:3d:f4:ce:31:df:
                    b1:97:bd:aa:a2:c9:f8:ff:6e:32:5d:87:9d:19:42:
                    05:71:e6:b5:4b:64:02:15:37:aa:17:53:c5:05:7b:
                    5a:6e:25:fb:ff:2a:ba:48:9b:a2:80:dd:fe:6c:b6:
                    ba:30:4b:b9:a8:66:99:61:e9:ff:59:be:75:69:5b:
                    32:9b:02:bf:0a:62:95:41:86:5f:8a:59:ab:95:ed:
                    22:a8:45:51:34:81:23:f4:e0:95:f5:b9:3b:58:77:
                    82:95:2d:72:e4:67:60:73:9a:73:83:82:22:6c:f7:
                    b5:c8:4e:9b:37:c4:e0:20:fa:61:95:4e:3a:fb:13:
                    72:f2:aa:74:52:1b:81:8f:85:8f:3f:57:74:34:9f:
                    ab:34:87:98:45:ea:de:01:22:37:57:be:4d:89:ea:
                    1d:63:51:d6:3a:94:62:9e:b7:c7:2d:f7:34:62:9e:
                    34:51:0c:48:de:ac:3c:45:ae:67:d3:a5:3d:8c:84:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:81:29:4B:A0:C7:06:AE:64:80:99:1A:4C:4A:1D:11:86:3B:AB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74585316-e1f0-3bdb-b799-f903d43bdce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:38:94:d9:cb:9e:b5:c5:ad:16:1a:dc:fe:91:bc:97:77:84:
         0b:3a:82:f0:25:33:38:c2:cc:49:c2:63:78:f7:7a:76:5e:a2:
         91:20:e1:95:f1:12:3b:16:90:af:64:2b:a9:cd:89:20:22:9a:
         8f:fd:ba:ed:5b:99:fe:82:cd:59:1e:af:e3:21:6c:12:3c:8f:
         87:77:32:2f:35:69:f3:ad:91:d0:66:b3:ce:8a:06:17:9d:46:
         59:f5:7e:61:35:c2:68:14:91:87:40:e8:03:95:48:a4:bc:06:
         e3:10:8a:2f:e7:42:dc:a3:6e:8c:73:e7:13:43:30:00:c6:2c:
         2d:6a:1b:7c:86:6d:3f:6e:b8:1b:9f:45:1a:27:82:91:21:cc:
         cb:39:ed:e6:50:e1:5e:c8:7f:0f:dc:11:23:cc:ef:78:07:0a:
         68:32:22:c3:fb:36:ad:33:3d:76:89:c8:d4:9f:90:ea:1e:83:
         4b:6f:d1:a8:05:fc:18:a7:03:01:ca:50:9c:d2:d4:1f:80:24:
         ba:89:df:4f:97:87:3b:66:b1:b6:ea:ff:b4:eb:93:2a:89:06:
         5e:9e:ab:72:dc:c2:ae:f6:78:f2:e3:73:0f:3b:a1:c2:60:bd:
         26:36:fb:45:0b:a9:f9:79:ba:64:1c:b6:b7:78:e0:fb:3b:5a:
         00:72:7e:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumonCzHigFoTFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MGFhYjc5OGEtZmI4OC00ZmFlLTgwMjAtNDk1MGVmMWM1YTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwnmUeW4YSmEeiXwHMvPgUixlnr9jE7Grrda
L1wxsVv3K8Qc+Iv5BLqfWrj1ve2mY9SXoL621fJy7D5/wq4pkHaFrhCwPfTOMd+x
l72qosn4/24yXYedGUIFcea1S2QCFTeqF1PFBXtabiX7/yq6SJuigN3+bLa6MEu5
qGaZYen/Wb51aVsymwK/CmKVQYZfilmrle0iqEVRNIEj9OCV9bk7WHeClS1y5Gdg
c5pzg4IibPe1yE6bN8TgIPphlU46+xNy8qp0UhuBj4WPP1d0NJ+rNIeYRereASI3
V75NieodY1HWOpRinrfHLfc0Yp40UQxI3qw8Ra5n06U9jITQjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGyBKUugxwauZICZGkxKHRGGO6sNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzQ1ODUzMTYtZTFmMC0z
YmRiLWI3OTktZjkwM2Q0M2JkY2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2lgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADU4lNnLnrXFrRYa3P6RvJd3hAs6gvAlMzjCzEnCY3j3enZeopEg4ZXx
EjsWkK9kK6nNiSAimo/9uu1bmf6CzVker+MhbBI8j4d3Mi81afOtkdBms86KBhed
Rln1fmE1wmgUkYdA6AOVSKS8BuMQii/nQtyjboxz5xNDMADGLC1qG3yGbT9uuBuf
RRongpEhzMs57eZQ4V7Ifw/cESPM73gHCmgyIsP7Nq0zPXaJyNSfkOoeg0tv0agF
/BinAwHKUJzS1B+AJLqJ30+Xhztmsbbq/7TrkyqJBl6eq3Lcwq72ePLjcw87ocJg
vSY2+0ULqfl5umQctrd44Ps7WgByft4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:18 2025 by rpki-client