Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2440e5ed-9eec-3cc5-ac06-222ceca02c46.roa
File:                     2440e5ed-9eec-3cc5-ac06-222ceca02c46.roa (raw, json)
Hash identifier:          A8a5xo8gorA5sQzjsxciZxgpThZBn2x1/T78byaJ0r0=
Subject key identifier:   D2:CF:05:4B:64:E3:5B:CF:B8:11:BD:91:1E:D1:46:F8:50:1C:91:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411199077CF1A14C0FDDB40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2440e5ed-9eec-3cc5-ac06-222ceca02c46.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.105.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:19:90:77:cf:1a:14:c0:fd:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=466622fc-b848-49b8-876c-9c65e4b1217b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:81:55:cc:d5:b7:7f:23:a0:d2:36:83:bd:
                    c1:17:6b:b9:b4:34:4f:31:80:d6:9b:03:98:79:b2:
                    8e:fe:1e:1a:21:b9:cb:98:b0:05:95:1e:dc:8b:ac:
                    17:8c:fe:e0:62:ae:da:56:68:d2:66:20:39:14:20:
                    96:65:bd:ec:40:b1:ba:fe:30:d5:6a:96:73:b2:f7:
                    3a:37:69:30:2b:6c:20:e3:5c:93:96:5a:47:1e:55:
                    a1:31:7b:37:a9:54:62:e1:ce:9c:8f:e8:67:28:6a:
                    5f:31:8a:a0:fa:46:48:f6:2b:c2:88:11:d9:69:b5:
                    8c:a5:b1:e1:07:aa:e1:ce:4f:fa:94:08:ec:2b:ce:
                    f9:ff:a1:1a:2a:8d:ca:26:cf:4f:70:b2:92:fa:e8:
                    75:68:9d:95:3b:e5:cf:93:9c:24:ac:d5:3b:d8:93:
                    fc:d6:a5:31:13:07:ed:7c:10:63:b1:da:0f:06:35:
                    12:4c:da:59:91:2d:c4:6d:80:68:c3:1e:8a:1f:57:
                    ed:f4:2a:08:27:97:5b:0e:2c:dc:5d:d0:63:11:28:
                    cb:32:dd:a2:56:66:5a:80:cf:ed:b7:8b:6a:e1:29:
                    6f:ea:9e:64:8a:9d:32:61:b3:a5:f7:d2:f6:9d:0d:
                    c2:c8:fe:7c:91:9c:c1:72:d3:1c:21:76:7e:67:61:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CF:05:4B:64:E3:5B:CF:B8:11:BD:91:1E:D1:46:F8:50:1C:91:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2440e5ed-9eec-3cc5-ac06-222ceca02c46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:02:27:aa:50:45:67:94:5b:61:63:cd:2c:53:b2:9c:d3:
         c5:5d:e1:28:b4:0b:8c:55:2a:73:6c:a2:39:c2:b4:e7:c2:6b:
         b7:9c:fb:c0:65:71:2f:8c:51:c9:f2:05:48:1b:95:07:ae:a8:
         fa:3d:25:7b:9e:d8:bf:a8:38:ef:bf:79:c2:ac:4a:ae:b6:2e:
         a0:87:0f:b0:df:6c:49:37:9d:cf:77:d1:43:a1:3b:bd:bb:d2:
         4d:56:b2:07:9e:7a:5e:17:1e:25:05:a9:9d:9a:ea:2a:94:ab:
         0d:c6:a5:3f:c9:03:f4:8e:9e:95:53:90:9d:7a:ce:12:a4:40:
         f4:4a:05:43:89:87:66:d3:70:bf:58:9c:84:c6:b3:22:fe:3e:
         2b:31:92:f8:23:92:68:e1:09:08:75:22:c3:d5:ea:5b:d6:80:
         6d:a7:37:ee:a9:9a:ff:4b:7f:96:cc:d9:b5:f1:e0:46:dc:dd:
         bb:c2:b0:06:d3:d1:92:3b:3d:2d:60:7e:08:c5:78:2a:3a:37:
         45:a6:9b:99:74:66:3c:a0:44:87:5c:1f:2c:89:87:6a:b8:b1:
         94:9f:ea:4c:cc:fa:c0:96:60:eb:20:e6:25:86:1d:e4:e9:5b:
         36:db:be:fd:09:54:fd:61:91:36:48:48:90:ae:61:2a:b0:e3:
         b7:e9:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:12:36 2025 by rpki-client