Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f074263-725f-3247-84a3-f1c731fa22f3.roa
File:                     1f074263-725f-3247-84a3-f1c731fa22f3.roa (raw, json)
Hash identifier:          RiDXvgTzHQxZazBTrfUw4ld//D2qTF6reDXy01HSn1I=
Subject key identifier:   B4:98:6E:37:A2:F7:36:52:7A:3D:2F:B3:44:CF:79:80:69:35:7A:7B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411255EABA73ED24A8C6260
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f074263-725f-3247-84a3-f1c731fa22f3.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:25:5e:ab:a7:3e:d2:4a:8c:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=dd780ec4-352a-4f79-bf9d-05ade6d9e1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:13:6d:44:8e:ae:25:54:cb:76:eb:2b:e6:ec:
                    77:c6:fd:e5:ef:5b:38:46:6b:ae:7f:5b:34:e3:95:
                    2e:26:79:e4:4d:6b:01:9a:07:7f:45:86:7c:cc:65:
                    ea:97:1f:70:5d:d2:e5:cf:d7:97:a8:4e:1f:09:93:
                    c6:37:2f:a0:3b:18:a3:8c:06:6a:1a:cf:67:3e:82:
                    bf:7e:55:97:da:ab:7e:86:87:95:da:ed:ec:11:8a:
                    28:67:68:a4:2c:7d:7e:bb:84:17:e0:c6:79:cf:55:
                    bf:b0:78:47:c6:f1:30:17:22:2c:1b:d4:b0:29:68:
                    ee:d1:49:76:b9:ef:75:57:c7:cb:3e:54:5e:69:68:
                    1d:5a:73:dc:84:60:4d:0d:5d:ac:9a:c4:bf:09:e5:
                    b9:49:a9:29:4f:9a:e7:09:97:32:2b:64:03:6b:28:
                    aa:b9:af:a9:26:c4:62:b5:e1:20:68:28:2b:e2:6b:
                    7b:85:65:f2:0d:1c:8d:49:12:3a:48:50:a0:36:a8:
                    93:12:91:26:95:ab:7f:da:50:46:16:f1:f2:27:2a:
                    0f:e1:c6:48:d3:2e:df:8b:03:56:16:ce:90:4f:2f:
                    8a:18:0f:79:33:93:e2:66:f4:46:c5:53:74:7b:de:
                    ba:8a:39:a1:e0:20:86:32:6e:20:04:56:05:98:88:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:98:6E:37:A2:F7:36:52:7A:3D:2F:B3:44:CF:79:80:69:35:7A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f074263-725f-3247-84a3-f1c731fa22f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a4:cb:1c:b2:1c:24:9d:5f:1e:8a:64:89:3f:ac:fb:7a:e8:
         3a:e6:dd:b3:3f:8d:d5:b3:43:3f:6b:26:13:e7:cf:a6:14:a4:
         60:7a:8c:62:f7:67:4a:66:fe:37:ee:91:9f:d8:07:c0:01:76:
         92:a9:6a:7f:3e:21:7f:45:64:26:4e:2d:3e:ca:f6:1e:8e:1e:
         87:5b:0c:0c:f9:f9:c8:66:68:77:45:a3:38:54:2e:dd:99:db:
         40:27:92:ff:0d:ae:50:ba:86:62:6e:3e:9b:13:9f:43:1e:fc:
         ad:f3:8e:15:e4:91:a3:00:01:ff:f7:fe:b9:d6:86:09:d7:0e:
         e5:51:6d:09:e4:ed:d8:76:8a:94:a3:01:17:4d:f4:16:24:27:
         39:42:f4:b7:53:8e:eb:27:60:c9:21:51:6b:31:41:dd:46:85:
         ae:64:9d:91:18:41:36:d3:b1:5b:06:95:3c:33:7f:04:47:6a:
         a2:aa:82:5e:35:37:cc:d9:64:f4:4b:fc:e2:de:85:2f:ae:a3:
         86:c2:43:07:9f:d0:ff:f4:7f:f0:37:04:79:75:a0:45:27:a3:
         02:18:1f:2c:0b:33:1e:d8:0e:f4:25:a8:77:27:8a:e4:28:d2:
         05:e1:90:22:cf:2d:72:5b:8f:cb:39:97:d0:9e:8d:b3:33:a6:
         fc:fe:80:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:57 2025 by rpki-client