Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/966ae33c-8fea-3d1e-b222-67d7751f9a6f.roa
File:                     966ae33c-8fea-3d1e-b222-67d7751f9a6f.roa (raw, json)
Hash identifier:          FDFjFkHHOTXZrXNL6Qo3xVYrWMw6R1WmHEpLaJmrFiU=
Subject key identifier:   01:F9:97:1E:80:29:A0:DD:B1:A4:8B:8F:69:44:E6:22:AE:4A:2C:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6960A0353799087D1B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/966ae33c-8fea-3d1e-b222-67d7751f9a6f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:69:60:a0:35:37:99:08:7d:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d887a4d1-35cf-4184-bf98-b769bcddec58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:b3:08:ed:83:d4:83:3c:8c:83:61:4d:65:
                    b5:3b:3f:2c:a7:78:c7:4c:e1:59:7f:6e:a7:5d:46:
                    03:cb:a4:bb:74:49:7a:f3:dd:9c:c7:bc:7d:dc:c4:
                    a4:6a:cd:fc:ba:64:e1:a5:72:c5:e9:70:9d:85:da:
                    80:07:79:80:f4:6f:31:6b:ca:6f:2d:54:2e:a6:f8:
                    1a:07:44:5e:56:84:97:62:d0:b3:86:be:12:c4:85:
                    31:67:13:d6:47:f6:73:01:5a:98:5b:c9:7a:4d:fb:
                    69:b1:00:f0:c0:95:6b:47:65:04:7b:64:d6:36:8f:
                    f4:36:8a:06:00:1d:19:f2:ab:22:55:9c:43:73:68:
                    eb:98:17:24:c5:0d:8f:3c:a5:7c:b3:5b:35:40:30:
                    5e:1c:84:6f:ac:3f:cc:fc:77:19:80:44:80:ca:1f:
                    82:72:2b:d2:43:f9:57:91:c2:c3:d5:8c:6b:d4:72:
                    c4:0c:3c:9c:bd:06:a3:bf:5b:f2:a5:68:83:2b:03:
                    11:18:0a:8f:be:7e:53:9e:19:54:49:9a:5b:37:23:
                    cb:b2:a4:92:30:51:5d:56:40:4c:47:0e:9a:c2:f9:
                    29:f9:72:20:53:19:be:1b:cc:f1:3e:57:81:a0:74:
                    9c:db:53:39:3b:d7:be:25:39:9b:c2:19:e0:5f:c6:
                    77:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:97:1E:80:29:A0:DD:B1:A4:8B:8F:69:44:E6:22:AE:4A:2C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/966ae33c-8fea-3d1e-b222-67d7751f9a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:d2:23:00:b5:ac:01:67:4f:57:a6:bf:49:7c:87:1b:3b:
         9c:2f:d0:bc:cf:4c:5e:a1:ed:0f:9f:5f:7b:4a:47:e4:8d:a4:
         9a:0a:0b:fd:44:c2:c5:c9:4e:0c:89:ec:d9:ec:b3:40:ae:9a:
         e4:a9:26:2b:a2:b9:da:5c:1b:9d:bf:52:78:c6:0e:e3:50:7f:
         a9:37:1d:8a:8d:b7:f7:74:63:c9:ad:9f:99:35:16:76:0f:1e:
         d2:f3:61:a4:14:1c:8a:65:25:ba:45:86:4a:65:39:91:0f:fa:
         7f:54:76:ff:ef:32:89:0e:67:dc:29:4b:ef:85:3e:8c:b1:ed:
         9a:a7:47:5c:9a:1d:6f:42:27:4a:67:ff:65:65:32:4e:92:73:
         43:d8:71:e6:43:48:8c:5f:6b:e6:3c:87:ce:bc:0d:ca:fd:e7:
         70:ae:14:bb:ba:cb:b0:a6:e1:73:bd:9a:78:00:6c:67:14:29:
         ec:c3:da:d0:0f:f0:e5:cc:1c:6e:7d:9f:1f:f0:b8:02:67:63:
         0a:11:1c:ee:a5:b7:47:c6:ca:5c:10:0e:55:5a:60:1e:92:84:
         0e:59:49:90:e8:86:24:0f:ea:93:f3:3a:b5:20:b3:5e:a2:31:
         57:e7:8b:70:17:37:a0:1c:d4:16:bb:2e:45:5d:98:57:77:40:
         f3:a7:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:22:09 2025 by rpki-client