Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9df0648c-3de2-3bbc-9c40-d3342299d552.roa
File:                     9df0648c-3de2-3bbc-9c40-d3342299d552.roa (raw, json)
Hash identifier:          js9kxXMmY3RlT+H4tkk1kgHux4xPY/PwUCbKghlBwCE=
Subject key identifier:   AE:59:5B:00:15:82:9F:6C:1C:5D:85:B5:EF:64:C6:85:F7:03:82:FD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6DDA0BFC8CBE1173F6E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9df0648c-3de2-3bbc-9c40-d3342299d552.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:6d:da:0b:fc:8c:be:11:73:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ee637e87-4ede-4718-94ae-57e75f776a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:71:9e:ac:2a:30:9a:26:f0:9b:df:19:01:
                    55:4e:ff:0d:13:93:3c:2b:77:11:53:0c:f0:e1:3c:
                    0b:66:54:07:90:90:0c:ea:38:39:13:18:2f:12:0f:
                    f6:5a:6c:61:24:94:dd:d7:67:4e:a0:02:aa:b2:aa:
                    42:e9:d7:a1:14:e4:6d:99:e4:92:7e:6f:81:b8:05:
                    8e:f9:d9:b3:23:a0:82:4b:c8:55:b2:f8:69:63:d9:
                    5e:10:29:b5:c9:45:c3:45:5f:ca:53:05:32:41:cd:
                    c6:b5:cf:e6:28:bb:4d:58:e4:f3:4d:2d:22:b8:7c:
                    fe:b0:42:d5:2b:19:04:9b:75:be:76:72:da:a0:82:
                    1c:62:f8:33:2a:19:ad:d7:10:c4:93:77:c3:bc:9a:
                    14:b2:84:5d:2c:eb:28:b4:f3:a3:70:15:b3:12:6a:
                    b6:51:4a:ea:69:5b:b2:3e:f7:11:8a:1e:5c:10:1a:
                    89:5f:e1:43:2c:e7:85:05:01:4c:b9:bd:c7:2c:25:
                    41:b1:d1:a3:d0:e1:75:4b:5c:b0:7f:06:37:65:d1:
                    ef:0d:51:4c:93:bc:4b:1a:e7:a4:e2:4c:d7:69:11:
                    0d:bb:00:67:b5:cd:09:57:b2:60:e9:a8:35:2a:ea:
                    2a:ae:09:94:ee:fa:1c:0a:d6:84:af:4f:63:53:f2:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:59:5B:00:15:82:9F:6C:1C:5D:85:B5:EF:64:C6:85:F7:03:82:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9df0648c-3de2-3bbc-9c40-d3342299d552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:07:95:e2:99:96:76:d0:bd:ce:16:e4:89:3e:b6:d4:b2:20:
         52:16:80:1f:f1:8b:16:fd:ef:ed:68:e6:72:62:58:8b:43:3a:
         01:6d:64:7b:ad:05:13:fc:a7:a1:a7:cb:59:5b:f3:71:b5:8c:
         b0:0c:99:76:4a:d6:63:f2:fa:cd:c2:72:5a:9d:d5:c5:de:62:
         f4:4b:1c:03:da:c9:b4:61:72:05:ee:0f:c1:62:28:c6:90:1a:
         15:69:be:be:9a:21:91:1d:0d:8e:8f:ea:8e:b1:a2:7a:74:50:
         71:8b:57:82:3f:3f:ad:49:3e:48:86:1e:4a:28:34:30:3b:61:
         d0:d0:9d:f7:2a:aa:46:0d:bd:0f:79:1c:a6:bb:b2:ef:f0:df:
         48:89:e2:ed:3a:f3:41:a9:6f:06:c7:69:b0:24:e6:2d:75:5f:
         4f:52:58:71:e0:d8:80:ef:1d:10:c6:87:d4:01:0c:f6:72:63:
         44:13:ed:67:9d:62:af:c7:cc:92:f4:27:84:18:28:9c:02:30:
         fc:63:5e:d1:80:70:81:07:6c:64:96:34:bc:fd:ce:2a:92:4b:
         3f:cd:8b:7b:c7:5b:91:7e:e6:c9:b9:fa:d1:79:c5:c7:d1:53:
         70:6a:fe:50:09:6b:a0:c5:04:9a:c4:42:3c:0c:fc:bf:02:da:
         2c:ec:e7:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkum3aC/yMvhFz9uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZWU2MzdlODctNGVkZS00NzE4LTk0YWUtNTdlNzVmNzc2YTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9FxnqwqMJom8JvfGQFVTv8NE5M8K3cRUwzw
4TwLZlQHkJAM6jg5ExgvEg/2WmxhJJTd12dOoAKqsqpC6dehFORtmeSSfm+BuAWO
+dmzI6CCS8hVsvhpY9leECm1yUXDRV/KUwUyQc3Gtc/mKLtNWOTzTS0iuHz+sELV
KxkEm3W+dnLaoIIcYvgzKhmt1xDEk3fDvJoUsoRdLOsotPOjcBWzEmq2UUrqaVuy
PvcRih5cEBqJX+FDLOeFBQFMub3HLCVBsdGj0OF1S1ywfwY3ZdHvDVFMk7xLGuek
4kzXaRENuwBntc0JV7Jg6ag1KuoqrgmU7vocCtaEr09jU/JaLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK5ZWwAVgp9sHF2Fte9kxoX3A4L9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWRmMDY0OGMtM2RlMi0z
YmJjLTljNDAtZDMzNDIyOTlkNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2nnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIHleKZlnbQvc4W5Ik+ttSyIFIWgB/xixb97+1o5nJiWItDOgFtZHut
BRP8p6Gny1lb83G1jLAMmXZK1mPy+s3Cclqd1cXeYvRLHAPaybRhcgXuD8FiKMaQ
GhVpvr6aIZEdDY6P6o6xonp0UHGLV4I/P61JPkiGHkooNDA7YdDQnfcqqkYNvQ95
HKa7su/w30iJ4u0680GpbwbHabAk5i11X09SWHHg2IDvHRDGh9QBDPZyY0QT7Wed
Yq/HzJL0J4QYKJwCMPxjXtGAcIEHbGSWNLz9ziqSSz/Ni3vHW5F+5sm5+tF5xcfR
U3Bq/lAJa6DFBJrEQjwM/L8C2izs59I=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:29:18 2025 by rpki-client