Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9113f8d-abfe-39f6-8ec9-b7f41cedd159.roa
File:                     b9113f8d-abfe-39f6-8ec9-b7f41cedd159.roa (raw, json)
Hash identifier:          3z4DLLxt0O6piojNp4wD0/nfxIwGAhYb+4GVMPkkky4=
Subject key identifier:   79:F9:08:CB:BC:32:0F:AC:68:66:EB:84:2A:DB:0E:46:0F:01:17:FE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6EA6FB33BDD84F5AAC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9113f8d-abfe-39f6-8ec9-b7f41cedd159.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:6e:a6:fb:33:bd:d8:4f:5a:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=bec18167-017e-4c11-acc9-ee48f66c2017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:8f:ea:24:a5:72:e8:68:ae:d1:e9:d0:70:
                    cc:fd:35:5a:58:c1:34:ac:d0:5a:22:e4:6c:91:58:
                    c4:30:f8:ba:aa:a3:e5:32:b2:70:75:c1:18:de:51:
                    b0:17:f4:8b:16:7e:fc:00:71:7e:d5:08:24:8d:ba:
                    5a:86:2d:ce:6d:85:56:f7:b3:85:cf:44:29:b8:19:
                    f9:03:e1:3d:b3:c3:af:f8:0b:38:aa:37:43:6f:3d:
                    59:22:5e:48:0b:de:1f:f7:42:57:2a:63:58:4f:2f:
                    81:dd:f7:0b:f0:06:be:75:00:ff:94:de:7d:6f:fa:
                    9b:e9:d3:4a:05:fb:53:7c:2e:9e:f2:d4:02:60:41:
                    6b:cf:0a:3c:84:e4:25:11:f7:81:0c:db:10:92:a4:
                    8e:c8:73:96:7f:8e:c3:1a:d6:6b:15:b2:4c:01:ea:
                    96:1e:d5:e0:7e:55:04:bf:f6:03:54:1f:6f:d5:41:
                    26:80:91:2b:0e:a3:05:e0:30:02:b8:aa:2e:c4:73:
                    d4:8c:57:5e:03:8c:05:8e:85:6b:f5:8f:d1:1c:0d:
                    b9:4b:32:7d:78:e3:df:06:6b:dd:77:07:6f:fd:95:
                    de:c8:ca:fd:55:cf:b0:b9:cb:05:11:a6:94:99:be:
                    14:f7:44:11:73:87:07:2e:d7:ab:ef:4f:b2:7d:f4:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F9:08:CB:BC:32:0F:AC:68:66:EB:84:2A:DB:0E:46:0F:01:17:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9113f8d-abfe-39f6-8ec9-b7f41cedd159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:28:1e:01:ea:d1:e9:20:5d:10:7c:71:7f:7d:ec:ba:d2:91:
         bd:6e:7b:a3:c6:ec:c8:c7:6f:36:d7:41:f6:8b:b9:8a:d5:23:
         0b:e1:27:ec:d4:02:7d:a5:e3:ab:17:1a:e7:de:1a:a8:67:e4:
         82:41:df:2a:b1:b4:32:69:5c:97:b0:c9:9a:39:ba:99:4a:3a:
         1a:54:82:60:36:bd:a0:f6:ac:73:9c:50:75:78:2b:55:e6:45:
         77:11:87:a2:9c:60:8e:9a:9e:2c:a2:a6:59:37:a7:bd:47:5a:
         c4:b7:0d:bc:d1:bd:af:ba:dc:b4:88:7a:29:51:04:7d:cb:c6:
         40:60:4a:b6:bc:ab:21:84:2a:10:47:1c:dd:a9:d5:38:3e:8a:
         8c:38:8f:77:6e:b5:72:9d:22:0b:14:35:70:eb:ed:a8:88:d3:
         2d:a1:1c:70:90:38:91:c1:d1:a7:fe:21:3a:36:ec:e5:69:d1:
         ae:cf:76:98:e2:b9:5d:ee:df:19:80:75:28:65:e4:44:8a:da:
         b1:23:d5:88:c2:2b:0a:e3:4f:6d:df:01:c5:23:ee:fb:cd:fb:
         b0:f9:6f:48:71:9d:bc:5c:01:d9:30:bd:f6:1a:99:61:94:11:
         9e:3e:d2:50:e8:34:8d:ed:06:16:c1:73:ee:37:34:0a:34:c1:
         9a:d4:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:30 2025 by rpki-client