Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d199ab24-99be-3cf0-b035-79360a930422.roa
File:                     d199ab24-99be-3cf0-b035-79360a930422.roa (raw, json)
Hash identifier:          WMCHdV+ZCKPrVLMZVWom2YCK9jc+cQCAaAXSaRApQjI=
Subject key identifier:   28:1C:9C:69:8C:93:3B:4D:BC:62:63:13:F8:50:B1:AE:97:66:BF:A7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB0A01B62787F76F29AA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d199ab24-99be-3cf0-b035-79360a930422.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.106.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:0a:01:b6:27:87:f7:6f:29:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5d5eb881-b495-4478-9927-15c645baa417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:7c:94:21:5d:26:fb:e7:78:e4:c5:84:53:
                    bb:40:37:f7:e1:fc:46:75:25:49:a6:34:d4:83:d4:
                    35:fd:ac:f0:27:78:00:b7:10:65:1c:34:aa:91:bd:
                    94:fe:8b:4e:2b:1d:1a:f4:38:a5:b7:e5:30:57:d6:
                    51:ea:ef:8d:ab:73:e7:f0:58:b2:e3:0b:f1:c0:a7:
                    e4:dc:fe:91:94:76:a0:09:d8:a1:1e:5d:80:9c:24:
                    09:9b:74:5e:ed:26:53:41:4a:24:b3:c7:11:b1:25:
                    02:c3:09:18:f7:0b:ba:f6:bc:1c:62:0c:dd:a2:4b:
                    09:e8:bf:c0:30:f8:16:cc:b9:d1:77:64:4e:24:43:
                    ca:2e:44:be:05:19:d1:e8:a9:9d:2b:9e:bf:95:1b:
                    ab:d5:05:07:ca:a7:36:88:3c:c2:03:9a:a2:48:a7:
                    4d:06:95:de:d4:3a:ef:e5:30:f7:0d:d8:2b:48:76:
                    4d:1e:39:9a:e0:a0:a5:d4:71:90:58:a6:ac:31:07:
                    b8:41:3a:ea:9c:f9:b1:b5:fd:2d:39:0b:e5:96:a4:
                    aa:e6:8b:ba:b0:9b:e1:15:95:3e:05:2d:7f:e4:61:
                    4d:63:7e:25:06:20:f4:64:a1:da:a2:e1:56:65:ac:
                    7d:7f:c9:c2:c4:a9:f8:c4:64:91:d6:cb:e6:60:dc:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1C:9C:69:8C:93:3B:4D:BC:62:63:13:F8:50:B1:AE:97:66:BF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d199ab24-99be-3cf0-b035-79360a930422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:95:92:b2:ad:13:85:e8:89:dd:29:18:aa:29:95:54:16:ac:
         69:df:34:50:8f:ee:74:72:ea:0c:cf:37:05:24:75:2f:07:af:
         cc:15:64:66:05:c8:22:b5:78:93:7a:57:77:eb:98:f3:82:83:
         72:49:c6:32:58:c9:77:f2:35:3a:fb:f4:d1:1d:25:6e:fc:31:
         8d:0d:10:c7:a6:f8:ec:87:83:90:07:49:86:d0:14:2e:9d:e6:
         77:60:34:4b:2e:09:7f:af:eb:81:d9:6f:a6:0f:03:4a:de:ec:
         1b:9e:e2:be:8d:c9:69:ae:d0:dd:86:d3:88:90:7d:5c:2b:65:
         66:4c:d5:9c:04:10:96:12:ba:f5:63:ef:25:48:79:98:bc:27:
         e0:49:77:7a:e6:57:65:d5:e4:98:f4:34:bf:77:2e:cb:5e:17:
         64:95:ac:a9:a2:32:33:7b:b3:8a:e9:e0:ae:ef:eb:67:dd:14:
         96:0c:16:65:d2:c0:87:4b:a2:cf:05:9f:00:01:8b:09:4e:2c:
         98:c0:fe:3f:27:63:4b:a2:10:85:cb:c0:53:cf:8d:27:b5:8e:
         c9:13:9c:02:e7:4f:b9:70:d6:60:d3:5b:88:be:38:87:59:7f:
         1c:6e:98:f7:ce:c5:a7:5b:8c:c6:42:f9:05:ad:2a:b7:d7:22:
         c6:79:b5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:25:24 2025 by rpki-client