Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b5540f4-36e6-33ef-a4e6-2067d17b9602.roa
File:                     0b5540f4-36e6-33ef-a4e6-2067d17b9602.roa (raw, json)
Hash identifier:          sjmp29dhSrFBxvUtbAIPI5yO5NRFYV4Bj/br9TeItv4=
Subject key identifier:   2F:C2:7E:A9:50:7F:49:76:48:D6:55:0D:45:1B:7E:30:82:6F:52:0F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411BFA091D7F84197077600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b5540f4-36e6-33ef-a4e6-2067d17b9602.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:bf:a0:91:d7:f8:41:97:07:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5001ccba-8c74-4c57-b450-30e7346365e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:ab:f3:b5:f6:4c:0c:82:21:d7:72:e6:62:
                    04:3a:39:ee:46:de:4a:ce:67:ef:3d:9e:b3:7d:b9:
                    65:cb:ed:05:5b:a3:ca:e4:7c:e2:0f:48:a4:41:9b:
                    59:11:23:33:a5:29:04:9c:94:4c:35:b7:ac:c7:14:
                    0d:ae:ad:b2:3e:68:51:f2:d2:36:50:f7:83:97:4d:
                    fb:0c:21:90:8e:f5:1e:b0:cc:40:04:b7:ee:bb:de:
                    50:b5:96:db:6b:38:28:b0:ed:9c:4b:81:f0:d5:18:
                    cc:fe:77:b4:44:be:75:b6:51:c9:5c:91:8e:1d:33:
                    98:81:e0:7b:fc:64:31:24:4a:01:e6:d3:99:57:76:
                    30:3b:a7:1d:38:0a:67:9c:89:5e:58:97:3c:ad:c4:
                    97:15:8a:04:e5:ba:5e:23:83:21:dc:0d:d8:ee:2c:
                    d1:b5:cc:43:3a:b0:b3:e7:b8:a1:a4:0f:59:fe:76:
                    e9:fa:17:be:05:c4:e8:50:ba:8f:6a:e0:3b:4e:b4:
                    d9:46:cf:98:fa:9f:d7:c8:7c:31:f6:ef:50:07:1b:
                    ca:f2:95:61:20:67:8c:25:81:fe:e7:c8:3a:a6:dc:
                    c4:2c:58:59:69:c3:2b:6a:b3:ba:f8:17:b1:f6:f2:
                    0d:71:cf:5a:a8:18:78:66:ac:e7:cb:7b:a6:74:06:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C2:7E:A9:50:7F:49:76:48:D6:55:0D:45:1B:7E:30:82:6F:52:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b5540f4-36e6-33ef-a4e6-2067d17b9602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:01:ec:73:e6:b7:ae:1e:87:18:65:0f:e1:4b:d5:ba:64:0a:
         87:18:d6:0f:24:81:60:86:7d:2d:a8:ba:f3:67:ff:8b:5b:77:
         98:77:59:5d:d1:bb:ca:6d:9c:9f:a4:85:48:4c:5f:4a:86:17:
         db:3a:7b:51:7d:07:60:1f:ca:d1:39:79:7c:87:9d:27:95:85:
         3d:17:8f:1a:5c:f2:6f:ac:bc:71:0f:82:17:6d:68:8f:90:66:
         ec:f2:6b:b9:27:81:40:cb:7b:f8:1c:2e:e5:81:29:43:fd:e7:
         98:ec:54:7d:3f:af:d1:5c:e5:f8:a5:14:96:0f:84:25:81:cd:
         26:43:fa:d8:c8:a5:4c:9d:27:8e:9a:87:f3:48:45:d3:20:92:
         0d:ba:0d:be:66:8d:22:cc:09:a2:52:d3:ae:d8:a6:93:59:c0:
         cd:27:0a:9a:f8:c4:fc:e2:d4:86:87:85:2b:b6:4a:ff:6f:6a:
         bb:24:81:4b:ad:c8:65:f5:f7:4d:9f:bf:53:a2:85:83:47:aa:
         09:e6:7a:e3:72:13:a6:50:fe:a2:60:f2:af:e5:93:64:34:05:
         af:50:b8:6f:06:b3:49:5f:05:99:70:23:84:4f:33:33:6f:f3:
         3d:ac:c5:b8:8f:0d:8a:22:1b:dd:19:a1:1e:41:d7:af:4f:5c:
         5d:52:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:08:02 2025 by rpki-client