Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da6337bb-bfba-39b6-9bbf-1111a1746228.roa
File:                     da6337bb-bfba-39b6-9bbf-1111a1746228.roa (raw, json)
Hash identifier:          uK0GCpXgBoVC4WlTNlVVbN1LQJxRjbs8W8406fFCfSs=
Subject key identifier:   71:C5:BA:28:07:C0:17:6B:CD:6D:A7:08:00:BB:F3:19:B9:D3:6E:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8410FB41F14F0FD3B4268E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da6337bb-bfba-39b6-9bbf-1111a1746228.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        75.104.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:fb:41:f1:4f:0f:d3:b4:26:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ea36ef43-b0e7-4d40-bd76-398c8cd66510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:ab:74:22:80:81:97:86:8b:df:f5:08:c6:
                    0a:f3:f4:e0:4b:46:f7:7d:f0:7c:97:51:84:b0:2b:
                    72:b8:69:6f:7a:cb:3c:5b:4d:02:9c:6c:b7:84:e7:
                    ab:46:16:33:a5:bb:00:5e:e4:c1:29:28:89:a8:04:
                    42:73:2d:12:5d:0f:60:ef:5c:68:a0:33:77:c5:77:
                    92:c3:f5:aa:b9:7d:5a:a1:ca:06:f1:7a:86:57:1c:
                    28:1d:93:e1:5f:f9:5e:d4:54:e4:de:74:4b:23:7f:
                    09:0a:cc:6b:4b:a7:ab:d1:c5:fd:40:8d:92:d8:a9:
                    62:86:08:47:2b:44:1f:95:bb:2b:b8:b7:23:2f:ff:
                    de:4d:ec:96:bc:1b:d6:03:95:4c:1f:5f:0e:e9:cb:
                    43:e2:d1:5a:a2:c6:06:e3:ec:a1:5f:86:ef:c4:7c:
                    cd:b3:76:67:be:95:8b:26:9c:8f:61:02:97:9d:af:
                    b3:6e:00:cd:36:71:f5:ac:2a:98:28:5e:ca:ec:be:
                    ca:6f:25:19:2a:6c:5f:d4:05:48:7a:dc:00:03:bd:
                    98:fc:fb:47:3c:92:53:28:75:82:99:ac:a6:b3:ac:
                    7a:b5:f9:7c:fb:b4:a3:5f:38:7c:94:0d:90:64:d2:
                    b9:ca:c2:db:79:f5:e7:dd:53:14:68:78:34:0a:a4:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C5:BA:28:07:C0:17:6B:CD:6D:A7:08:00:BB:F3:19:B9:D3:6E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da6337bb-bfba-39b6-9bbf-1111a1746228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4c:e3:18:67:54:ae:f0:e9:c1:3c:28:6f:6f:c0:bc:80:a7:
         5b:21:ee:19:5f:5f:bd:d5:a9:c2:ff:23:24:44:32:cb:b4:a6:
         03:51:d7:d4:28:f9:1d:09:18:9a:7a:eb:d0:70:21:ed:c8:ac:
         b2:11:1b:72:a2:a6:26:94:59:46:15:4a:f2:17:61:9b:a8:1a:
         e1:2a:8f:30:91:64:7f:aa:00:31:6d:12:41:a0:91:bf:cd:e4:
         0e:c1:9c:0b:49:8a:dd:cd:14:4b:95:ba:d5:5a:fd:64:8d:50:
         81:58:99:2d:10:8a:19:a6:ea:b8:33:5e:fc:5e:c7:4a:14:d4:
         0b:5f:8d:f0:8f:9a:48:dd:27:61:b2:13:80:a8:e1:1c:68:c9:
         6f:d5:fd:f2:63:4b:da:4c:82:6f:81:dd:71:a1:f3:de:58:f0:
         13:ee:98:0a:54:cf:fa:12:23:8a:e3:4c:b4:c5:21:4f:07:95:
         f0:0f:37:58:65:44:ba:74:b0:59:4b:43:95:4e:23:21:21:fa:
         09:91:ce:85:00:64:af:b0:2d:67:00:b9:34:4f:35:86:f2:ce:
         90:c9:63:38:72:8e:1c:9c:85:31:e0:c1:22:1f:0d:c0:67:32:
         68:25:18:fa:c5:ce:ba:55:cb:25:91:fa:3f:a2:8f:06:27:20:
         2b:cc:4a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:53:47 2025 by rpki-client