Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1bac3da-880b-34ff-b1c8-bcdf5472ae7a.roa
File:                     b1bac3da-880b-34ff-b1c8-bcdf5472ae7a.roa (raw, json)
Hash identifier:          q795aCrWi1R4QAtbLT7ha+gaYKTB96tVFIi7JFjBCTg=
Subject key identifier:   38:35:D8:3B:D8:E4:A6:60:8F:2B:49:E8:98:FD:9D:E7:AE:D5:43:A9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAEC8E299255AA2BE9CC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1bac3da-880b-34ff-b1c8-bcdf5472ae7a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ec:8e:29:92:55:aa:2b:e9:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ef25ce79-4f61-4a0e-a926-ba10bc8557c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0c:10:a2:70:98:2d:92:eb:c2:04:f1:13:fd:
                    b8:21:62:8c:27:b2:74:57:66:46:e9:d4:42:d3:43:
                    0b:b7:75:90:3e:8d:48:62:9b:7c:75:13:02:28:6d:
                    0d:8d:a5:9e:3a:57:0e:91:b0:3e:f2:4c:95:fd:00:
                    76:87:3a:b0:0c:39:13:ec:fb:87:92:ae:8b:ea:d5:
                    fa:7a:45:4a:e9:a9:67:c8:29:4a:54:7a:76:90:3f:
                    1c:dc:34:11:13:42:d3:8f:14:d3:9d:c6:d4:c5:89:
                    81:62:f5:c7:17:0a:0d:61:27:22:42:1b:67:7b:59:
                    3e:dd:66:a3:e1:f6:25:e3:02:d5:b3:88:b4:10:c2:
                    ac:ab:52:35:12:99:a1:e5:64:3f:73:e3:5c:28:66:
                    22:a7:b4:21:e3:60:c2:8f:df:64:d9:74:10:10:8a:
                    6f:e9:ce:37:a9:53:48:63:ed:48:4e:83:36:5d:39:
                    49:cf:92:90:d1:0b:ff:e8:73:e0:04:8f:fb:b0:d1:
                    ca:52:4d:84:34:86:bd:7b:ac:93:e1:2f:c1:01:2f:
                    a3:3e:b6:d8:a8:29:6f:b4:5e:7b:e5:78:6d:e8:68:
                    3a:7c:30:80:d7:52:43:e2:b0:c0:08:1f:b9:46:58:
                    a7:fe:28:91:7a:01:20:2e:d4:47:bc:be:ef:98:a4:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:D8:3B:D8:E4:A6:60:8F:2B:49:E8:98:FD:9D:E7:AE:D5:43:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1bac3da-880b-34ff-b1c8-bcdf5472ae7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:c6:d3:28:46:2d:7f:92:76:ba:86:17:b1:71:0c:38:55:d2:
         a6:96:bf:80:12:ba:67:77:0c:5d:16:49:bb:53:48:ad:63:74:
         77:51:48:19:26:93:e7:2c:7e:56:00:fb:f3:27:ee:51:91:6c:
         5a:d0:97:bd:ad:5a:db:63:5c:30:f1:ec:4b:83:92:0e:4d:3b:
         86:45:9a:20:7e:7d:6b:27:37:20:68:55:35:dd:c7:9b:66:4a:
         9b:48:6c:6f:7a:1d:77:70:c0:71:43:18:d0:65:61:cb:56:a4:
         8a:34:11:13:9d:03:0c:49:00:1a:45:36:96:bb:48:d6:a8:6d:
         2a:a1:35:4d:67:f1:91:10:4e:0f:20:4a:52:8a:3a:24:01:11:
         51:67:98:41:a4:a0:d0:04:4a:b7:e9:db:ce:58:e5:cd:c2:0f:
         93:eb:cd:57:9f:44:d4:b6:94:58:cd:55:1f:3e:85:dd:aa:90:
         ff:f3:ca:85:7b:99:b5:18:43:28:4e:65:51:c6:67:58:a4:de:
         92:35:8e:c1:bb:cc:a7:e4:51:98:31:45:3b:a4:28:82:69:ea:
         3d:5e:eb:71:47:af:56:67:da:44:eb:e8:91:69:fa:6f:bf:16:
         aa:8d:51:5c:ec:a2:0e:84:89:df:f1:8a:82:8f:8e:93:da:dd:
         53:44:cd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:11 2025 by rpki-client