Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9975b603-221b-355e-81cb-d14076444a0a.roa
File:                     9975b603-221b-355e-81cb-d14076444a0a.roa (raw, json)
Hash identifier:          vTTVQ3lTHiykCSiamd6ICye+AfrJ9o8dtR5HCQfPt20=
Subject key identifier:   B6:2F:31:96:86:04:00:40:93:FF:05:1A:48:52:ED:98:F6:77:79:F4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841111DB3A99E941C32FBC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9975b603-221b-355e-81cb-d14076444a0a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:11:db:3a:99:e9:41:c3:2f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=210147ac-e756-4bdb-9183-2d85abbe28e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:29:24:5c:43:50:e6:18:2c:f1:5a:71:69:
                    9a:c1:6d:8a:09:60:03:34:86:de:47:63:e6:0c:83:
                    a7:89:ae:55:14:96:15:2e:6f:5c:09:19:21:26:e6:
                    44:67:3d:09:62:52:91:2b:a7:05:f5:31:53:4d:1e:
                    4e:19:c7:f6:46:b8:de:9b:48:2c:fe:16:96:ae:af:
                    52:54:61:b5:0f:ee:d0:00:4d:3c:98:5c:07:4b:34:
                    83:cf:c2:4a:b1:9b:3a:e8:50:cf:4a:5c:39:cb:bf:
                    15:1b:f3:44:f8:b3:ef:ae:49:64:23:4e:93:01:ce:
                    72:43:78:01:a9:43:50:1b:79:90:7d:de:06:1f:d2:
                    1d:7e:67:a8:f3:38:b3:e4:bb:3e:6d:3d:e3:44:bb:
                    7d:66:2f:9f:43:39:b7:01:95:36:96:bb:32:47:a4:
                    19:92:d5:cf:55:2f:80:75:b2:c6:bc:07:64:46:03:
                    1e:34:c1:e6:3b:53:6c:eb:fc:08:c1:92:77:fa:0d:
                    b3:f5:b7:30:8e:d1:a6:90:86:71:43:68:d4:03:61:
                    1d:0a:fa:ed:8b:d6:90:57:98:0d:36:30:1a:2f:4c:
                    90:c7:65:7b:31:40:3b:a9:5c:1c:fa:dd:bb:04:1d:
                    61:af:be:c1:8e:5f:cc:81:75:ac:6d:e3:7d:c0:57:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2F:31:96:86:04:00:40:93:FF:05:1A:48:52:ED:98:F6:77:79:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9975b603-221b-355e-81cb-d14076444a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:a6:d3:0c:cc:9a:ab:6f:ef:9f:77:ce:fd:ef:37:4d:2e:
         0a:29:57:bc:c1:62:4c:f5:32:74:1f:88:06:1d:8c:6f:89:80:
         7e:ac:d3:8e:0a:81:9c:9e:0f:e3:06:a1:55:c2:82:e2:39:28:
         c1:f4:62:e6:b7:41:74:1c:3f:2f:ff:e3:b4:17:ef:62:29:f3:
         49:da:6e:42:a3:3b:dc:8d:3c:bd:fb:ba:3b:b1:54:66:bc:a2:
         fb:4c:38:56:6c:c1:15:01:87:eb:36:02:25:aa:4b:8b:be:9a:
         c6:6f:77:5b:34:1b:e1:91:c8:08:70:b5:b4:9b:a0:5f:57:be:
         d9:1d:70:05:bb:9f:90:04:c8:c0:79:f1:a7:f4:8f:72:9b:6d:
         54:ec:ac:ca:cf:e5:70:3f:ff:dd:a2:12:6b:64:a0:29:e3:be:
         d3:ea:74:77:a3:0a:1a:a4:96:39:5f:4a:7e:37:e3:00:43:a7:
         2d:1c:fd:71:bc:e9:b6:73:d8:86:76:78:b7:63:85:03:8b:20:
         7f:8d:06:0a:2e:0b:17:cc:97:6e:15:40:83:38:44:48:c3:f5:
         99:5b:d2:e5:e7:45:35:aa:21:d2:b9:7b:5a:ef:b0:10:6d:d6:
         32:93:9d:62:53:d6:2a:dd:16:80:46:98:f3:42:43:a3:63:c3:
         85:c3:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:52 2025 by rpki-client