Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fad813-d916-3860-b75c-a0810b8477c2.roa
File:                     d3fad813-d916-3860-b75c-a0810b8477c2.roa (raw, json)
Hash identifier:          rZltrw2LYgkey5TJofxTc+zJn/77ftgNiYZsrIn9DOs=
Subject key identifier:   09:B7:F0:DF:76:35:44:95:42:23:4E:E3:A3:22:22:56:5A:51:32:2E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAECB1EA40448142857300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fad813-d916-3860-b75c-a0810b8477c2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ec:b1:ea:40:44:81:42:85:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5d2f9bfc-41ea-417c-adf5-0a9b382714cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:41:85:e4:3e:5d:a8:6e:85:0f:1f:24:42:
                    85:c9:47:3f:b0:bf:b8:7f:f8:7c:57:da:63:a0:b0:
                    b9:8f:91:9c:cc:96:30:29:c0:fa:37:08:3b:30:63:
                    91:8c:29:74:a8:53:de:a3:48:c0:5b:64:05:bf:69:
                    5d:a8:d1:8a:c5:bc:2a:88:f1:1d:6e:3e:b1:2c:f9:
                    88:99:98:47:4f:ec:de:1a:03:56:f4:f2:6c:5a:04:
                    f0:f9:e8:8a:f8:1e:80:97:1d:58:21:a1:15:2c:8d:
                    7c:25:9b:80:08:01:38:1a:89:04:1b:f3:f4:6e:fe:
                    c9:37:a6:5b:31:72:e9:a8:9f:d7:45:02:8a:35:9e:
                    11:41:3b:1b:14:8e:8c:06:d8:12:35:23:b1:00:65:
                    da:c2:0a:91:8e:56:5d:28:56:db:6a:8e:89:8d:73:
                    2e:32:9a:67:d9:96:75:a7:6e:d9:2f:51:8c:8d:29:
                    16:21:b5:40:b3:e6:bc:fa:06:81:ae:60:42:4f:ca:
                    5c:3f:1b:04:f6:0c:56:3e:ab:4f:da:11:ed:25:67:
                    67:b5:8f:a8:35:b2:66:db:51:0e:b4:bc:b9:88:61:
                    f2:10:0a:d9:eb:6f:76:c4:e2:a7:ec:9b:5a:51:2b:
                    fc:89:03:72:6f:ac:cd:25:0d:7b:42:21:09:27:27:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B7:F0:DF:76:35:44:95:42:23:4E:E3:A3:22:22:56:5A:51:32:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fad813-d916-3860-b75c-a0810b8477c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:61:1b:c1:61:54:17:1a:eb:24:8e:b0:dd:41:73:75:09:be:
         53:de:34:e2:e4:9c:eb:be:04:73:7d:df:d7:f1:66:f6:25:26:
         7a:6e:46:59:4c:67:41:32:a3:c9:9e:75:0b:ff:50:10:04:15:
         5d:d7:22:86:9e:71:45:c5:67:7f:a2:94:cb:9a:85:a5:8b:72:
         9b:e7:ec:5e:21:d8:56:c2:66:db:3f:ae:94:f2:a0:e2:7c:49:
         c6:12:8b:47:1d:3e:5a:4d:9f:05:6f:67:af:6d:67:f0:9e:80:
         47:ca:89:a9:0b:e1:ae:03:64:c9:7c:e2:db:a4:e7:a8:45:ca:
         a9:46:bf:f5:e1:48:d1:1b:dd:2f:c1:ad:f5:31:37:38:d7:07:
         d7:bc:2d:3c:6d:ff:bd:bb:94:12:97:67:92:2e:d6:a4:a1:3e:
         1e:3e:d4:90:1b:57:42:2a:fd:d5:27:59:93:2d:88:7b:2f:f8:
         62:dd:79:9b:51:72:13:1b:4d:09:d6:0b:d5:a8:cc:23:ac:ab:
         83:28:49:e8:7d:37:b1:53:91:da:1f:33:cc:1c:a9:47:20:b3:
         f9:98:75:7a:09:10:1f:16:91:e2:d2:3f:8a:d6:7b:a0:d9:e1:
         0a:97:f2:e6:0e:13:ec:b7:46:a6:af:c8:9c:70:eb:cc:4f:02:
         98:75:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:18 2025 by rpki-client