Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb115f43-190c-3408-85f1-302a92002133.roa
File:                     fb115f43-190c-3408-85f1-302a92002133.roa (raw, json)
Hash identifier:          VW5Ha2urlUZOWs+eV7fOv+qcTTy0DX54XlEK0BLYfZ4=
Subject key identifier:   6F:83:5A:00:00:D0:46:5C:21:D8:E0:DF:20:B2:DF:A5:E8:AF:CC:BD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA6D047713B7FDCE4A0AA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb115f43-190c-3408-85f1-302a92002133.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:6d:04:77:13:b7:fd:ce:4a:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a3fa86b2-eab8-4ceb-8a7f-eff4345568ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:2c:0a:41:f5:1a:62:3b:49:c4:50:ac:83:
                    ca:e5:0d:67:25:29:d4:fb:dc:7c:07:17:60:8d:3f:
                    73:56:35:41:4f:2f:fc:d9:df:25:86:b5:97:50:4e:
                    f6:d7:34:ac:cf:b9:64:40:72:a1:ed:dc:93:93:9a:
                    7b:fb:dc:e5:b1:11:76:83:a7:84:b5:a5:92:42:9d:
                    6b:09:db:4b:00:a2:fc:ec:6f:e0:5e:e8:49:5d:d2:
                    77:c4:90:67:82:af:59:22:5c:55:1e:9c:79:1e:8d:
                    2a:95:b8:08:03:14:e0:82:d2:5a:1e:0d:b3:98:f1:
                    0d:35:99:df:8f:d9:d8:1c:87:97:1d:db:66:ca:4b:
                    31:4f:f7:82:14:8a:10:54:43:a5:96:23:27:62:02:
                    9a:c4:c7:20:98:2c:7a:80:bd:4b:1b:64:93:ec:f5:
                    06:ad:7c:10:72:bc:8d:51:26:ca:86:7f:76:b0:99:
                    ce:8d:80:7f:43:ba:d8:3a:a6:6b:cf:c4:59:52:a2:
                    79:f4:af:b9:e9:91:b7:b6:40:5b:2c:b8:e9:a9:cd:
                    18:6e:58:85:d5:f4:9c:78:b8:79:58:dd:db:d0:89:
                    27:e4:11:ef:e8:14:10:ac:02:0a:17:23:35:45:e5:
                    1c:01:40:43:f8:1f:de:46:66:9c:ff:b1:a5:04:6c:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:83:5A:00:00:D0:46:5C:21:D8:E0:DF:20:B2:DF:A5:E8:AF:CC:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb115f43-190c-3408-85f1-302a92002133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:c8:d3:6d:5f:32:68:aa:2b:cb:9c:70:e5:39:04:d5:db:
         5a:1f:3e:65:da:d5:b7:b7:f8:98:b1:26:58:d0:9f:9f:5a:c6:
         19:6e:eb:5b:77:0e:c8:2d:84:3d:49:d4:e0:c4:71:1d:bd:8c:
         ae:eb:91:00:79:5c:6f:05:72:06:3f:2c:c1:a1:c6:40:7c:59:
         77:c3:11:44:50:fb:3c:2d:5f:09:10:b8:a7:24:dd:9c:4f:17:
         d8:0d:b5:f5:0a:a6:0a:d5:bd:a3:5b:98:ce:8b:1d:5a:da:f5:
         bf:37:83:32:f0:f1:49:bf:4d:a4:6a:6c:f8:01:a4:87:8f:73:
         19:1c:19:34:eb:37:42:94:1d:fb:22:9e:69:69:48:19:03:a9:
         66:62:ad:ec:19:c4:a4:d0:dd:9f:da:ee:0e:59:01:5a:bb:6e:
         24:ff:f3:07:e7:d7:c8:bd:2d:92:c6:ef:78:f2:88:da:54:ee:
         f2:68:66:09:dd:9b:d5:74:ea:c8:ef:a0:a8:db:75:17:7a:21:
         f9:13:a5:9e:4c:e1:ad:de:20:e2:9a:2d:a1:60:c7:e6:c8:e8:
         dc:18:de:29:40:53:fe:aa:d1:61:67:ad:93:90:f3:dd:f9:b1:
         46:2c:fb:b7:4b:2c:d8:e9:ec:fc:a2:81:f8:f2:ef:e7:76:99:
         cd:3d:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:48:23 2025 by rpki-client