Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d11ea852-544c-3366-b560-a888f455b931.roa
File:                     d11ea852-544c-3366-b560-a888f455b931.roa (raw, json)
Hash identifier:          2Rpf7JBhXsblZT7SZj5vyThWlQ3BNgHEKjkEY+WgFSI=
Subject key identifier:   C3:DB:03:68:4F:5C:2A:F5:5B:3F:94:64:D2:06:D1:EA:49:6E:0D:F5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411D4AD9B04AF81677DF400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d11ea852-544c-3366-b560-a888f455b931.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:d4:ad:9b:04:af:81:67:7d:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=bd70d4bb-5982-4a96-902a-554b9c7be61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:88:45:b0:b2:a6:7e:6a:68:9a:6a:4e:3e:
                    30:27:24:56:d9:5c:af:e8:61:76:d2:6f:1f:5e:97:
                    f0:1c:2b:3e:c4:7c:00:c1:08:21:b5:7f:5c:03:12:
                    b7:d7:4d:01:5c:05:b2:c1:17:ca:d1:31:b0:3a:81:
                    7b:80:7b:a7:80:45:e2:b8:a8:3c:d5:9a:2c:c4:09:
                    7e:24:c4:17:4f:39:9a:6f:a9:ae:42:a4:d9:16:31:
                    9b:c8:69:d7:d7:4a:b7:88:c3:40:82:6d:47:00:f3:
                    68:1c:c0:91:73:98:5b:8a:84:b2:6b:d6:ea:8c:36:
                    38:a9:29:50:f4:79:5e:3e:17:c3:c9:82:12:14:2b:
                    59:a7:3f:7d:cc:78:1b:35:5f:9e:be:ce:63:15:1e:
                    b8:43:b8:30:ab:d9:80:51:19:7e:3a:1c:20:6d:a3:
                    08:8d:52:d1:87:1f:8a:9c:11:1e:08:df:dc:3a:0d:
                    91:e8:bb:2a:73:3d:f5:9a:6b:bc:69:da:0d:b8:57:
                    e6:f0:c4:a5:a6:78:c2:0f:60:03:47:2f:96:f3:d3:
                    1c:76:81:65:ad:eb:90:d3:24:8a:06:5b:f1:1d:ff:
                    24:bb:d7:a5:cd:fa:a8:5f:ab:59:0d:57:9c:cc:54:
                    6d:86:32:62:c4:9a:77:75:89:50:cd:25:3a:fc:79:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DB:03:68:4F:5C:2A:F5:5B:3F:94:64:D2:06:D1:EA:49:6E:0D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d11ea852-544c-3366-b560-a888f455b931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:97:50:78:e6:ac:75:6a:9c:65:9a:6b:cb:b5:29:c0:15:
         e4:6e:8b:04:60:c6:17:cf:23:3d:b4:f9:3f:e0:7c:8b:63:8d:
         7d:19:99:8f:9d:fd:eb:0f:84:1b:f6:37:42:9d:6d:31:82:67:
         0d:9c:7b:d9:6c:d4:04:71:9e:9c:61:c5:6a:be:25:93:5c:15:
         4e:92:4d:73:ca:bd:a5:40:75:12:f2:7e:a0:1a:2e:f9:14:fa:
         39:fa:3c:2c:13:76:69:26:e5:f3:cd:f1:55:ba:b7:1c:d4:d2:
         6c:26:36:3e:cc:60:ab:17:b9:ac:f9:cb:2e:cf:95:9f:7c:43:
         b3:01:18:3a:37:73:af:34:8d:1a:b1:b9:8a:b3:3a:70:27:0f:
         bf:d4:48:79:d0:5b:6a:91:48:7e:a5:07:27:1c:ab:99:a3:42:
         5a:5e:3c:23:76:20:d0:55:84:b5:0b:8c:0f:27:5e:3f:73:27:
         45:76:fa:7b:63:b5:b8:28:c9:97:33:cf:41:65:f6:3b:2c:a0:
         1d:ec:dd:eb:5d:25:62:af:8c:8a:74:82:bb:65:59:1a:83:3e:
         77:e5:c0:59:2b:9c:27:b5:c5:8c:28:de:fa:ea:6b:f7:8d:ed:
         f1:ce:59:9b:bf:13:23:36:fb:e2:42:e5:10:21:ce:56:20:90:
         79:1c:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:15:26 2025 by rpki-client