Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9928a1ce-651a-3a18-a164-ca4494d0bcc5.roa
File:                     9928a1ce-651a-3a18-a164-ca4494d0bcc5.roa (raw, json)
Hash identifier:          LqV2/maH1wutLPreE/oPUAGTBjVZTsopowleiS/lqCc=
Subject key identifier:   57:58:81:6C:E0:EB:1D:0B:6B:1E:8F:04:44:0D:48:C6:BF:AB:D7:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA637A553B7C16CA6A7B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9928a1ce-651a-3a18-a164-ca4494d0bcc5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:63:7a:55:3b:7c:16:ca:6a:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9d1d04f4-5665-4ec4-a58d-adea348e1cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:23:7d:8e:b7:59:14:7f:25:34:27:33:e4:
                    5e:67:4b:ba:c4:8f:09:cd:74:87:6f:05:d5:a4:44:
                    60:df:d9:d1:5a:fe:c0:70:0a:09:09:b4:9c:3a:e6:
                    0c:7d:eb:80:ee:00:da:0c:fd:9b:60:5b:d4:a3:2d:
                    6f:76:2b:da:66:1e:f8:a5:3b:0f:f4:c7:1e:27:0b:
                    d1:37:45:f4:5c:dc:28:b3:51:57:b0:ce:61:5b:64:
                    e9:b0:06:ce:2c:ee:f4:54:96:8f:41:8d:28:a6:f5:
                    85:4c:0d:66:31:c1:58:79:ea:d8:e2:48:bf:3a:ad:
                    12:2f:72:19:db:dc:d9:42:2e:02:5d:06:a4:1b:3a:
                    d6:a4:6b:f9:ab:d6:da:3d:a2:bd:1f:78:06:7d:16:
                    5f:52:43:01:98:ad:d1:8a:38:54:0d:41:c2:c8:49:
                    0a:bf:96:a2:d7:f6:93:9c:8d:57:28:86:1b:c9:62:
                    0d:e2:3d:99:8c:04:c7:90:f4:6c:e0:69:a4:ba:94:
                    6f:24:4a:bb:f8:98:5d:1c:27:c8:48:da:8b:94:8b:
                    f6:b5:a4:93:ed:40:7b:48:34:fa:05:8b:dd:3a:d9:
                    bc:10:6a:bd:e3:08:76:7a:ce:b7:67:2a:7d:cb:c2:
                    12:3e:a8:91:81:bd:bc:36:1f:0c:2e:8a:eb:cf:3f:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:81:6C:E0:EB:1D:0B:6B:1E:8F:04:44:0D:48:C6:BF:AB:D7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9928a1ce-651a-3a18-a164-ca4494d0bcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:f1:95:99:34:24:82:54:55:bf:b4:80:68:29:36:5c:a3:
         c7:78:89:52:ec:62:6a:61:bd:db:f1:fa:5b:85:61:36:3c:84:
         45:06:7d:74:50:ac:45:22:88:68:9a:b9:a6:e6:08:87:25:c0:
         55:c2:3a:a3:88:bf:89:98:e4:cc:89:4f:67:c4:89:0f:db:d4:
         09:11:e6:e9:4d:46:bc:c8:7d:5e:cc:ab:07:8b:09:8b:e7:0b:
         9a:f5:44:6b:c8:4d:3d:ab:6a:7a:d6:be:67:60:c6:5f:4f:9a:
         8c:64:17:7a:0d:7f:69:29:8f:06:ff:a5:56:e3:a0:33:36:ad:
         52:24:5d:82:d9:33:c2:f7:1d:0c:c2:74:1e:1a:ab:90:07:a8:
         1d:6b:43:f7:bb:db:3e:22:f9:ac:54:d6:7b:d4:d4:71:d7:fa:
         46:a0:c0:ad:c0:d7:e2:8c:ce:1d:37:74:f5:0e:4e:63:c3:86:
         8d:5d:13:b3:12:3d:f5:41:06:ba:4b:0e:49:11:94:09:14:bb:
         07:46:ec:9b:eb:f6:94:d7:f0:71:84:14:97:56:00:fa:73:cb:
         dc:44:d8:98:55:02:89:c7:93:fa:0a:1d:41:a9:a0:e6:90:4d:
         ea:55:d8:89:72:18:82:ab:8e:09:d0:f5:c3:d4:30:86:8a:b9:
         c5:57:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:25 2025 by rpki-client