Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff541db3-479e-3e28-b0b4-6540dcf975b0.roa
File:                     ff541db3-479e-3e28-b0b4-6540dcf975b0.roa (raw, json)
Hash identifier:          QTr0uThQRFzBMTbYDBJtAQCJci33SpKPRHhsEFf6vrg=
Subject key identifier:   46:24:8B:21:30:90:9A:5D:1A:D6:FE:BD:92:2A:8C:2F:95:E6:7D:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841111743CB9E5EA24F10400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff541db3-479e-3e28-b0b4-6540dcf975b0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:11:74:3c:b9:e5:ea:24:f1:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b6a71a42-d385-42b7-b846-5a3c63c0a365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:86:94:12:31:e6:78:72:c0:46:24:f6:b7:
                    8f:a8:64:61:50:3a:73:46:31:0f:45:da:47:4e:d0:
                    be:19:a6:8d:24:0b:39:40:95:7f:f5:8b:0f:14:d6:
                    a5:c7:48:5d:54:b8:9c:4d:c8:43:42:40:f2:29:b9:
                    96:d2:5a:22:bd:d2:cb:9b:3d:93:ce:42:b5:e2:be:
                    34:5e:09:3d:f5:38:03:e8:9f:4e:44:a2:63:cf:70:
                    cf:4d:85:71:7d:bc:f9:bb:27:f4:79:01:b9:79:13:
                    75:ff:d6:9d:28:18:47:64:a7:02:fe:fb:c9:97:0d:
                    7b:0f:43:a3:93:58:7b:99:e8:d6:95:bd:19:ea:a9:
                    d6:34:0b:fb:8c:85:7c:21:db:8c:4a:be:6e:a2:fd:
                    b3:93:20:2c:bd:ae:ff:94:bf:7f:c0:0a:ce:b1:c2:
                    26:77:20:54:1a:5c:20:67:48:23:ef:77:1a:62:c5:
                    69:18:4f:98:2c:95:71:84:fa:2d:b8:a6:7c:08:bd:
                    84:b9:6f:71:3f:ea:f6:45:9e:d6:63:5d:9e:d6:ce:
                    01:59:37:a0:6e:db:59:ab:98:f0:60:24:cd:64:38:
                    da:b2:32:cb:c4:6d:fd:18:9d:1d:43:0a:99:a6:6c:
                    2c:b9:86:ee:03:7a:5f:c2:bc:b9:ac:87:59:b1:b1:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:24:8B:21:30:90:9A:5D:1A:D6:FE:BD:92:2A:8C:2F:95:E6:7D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff541db3-479e-3e28-b0b4-6540dcf975b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:74:df:19:20:d5:81:b0:b4:f2:6d:93:0c:45:c3:ca:cf:
         39:0e:24:15:ca:c4:4e:67:a0:e6:0c:bb:db:cb:b2:a3:29:47:
         6d:c9:7f:04:c4:5c:9d:69:b5:86:7d:6f:12:ee:60:c3:34:09:
         10:ac:cf:94:7a:6f:b1:b7:f6:70:09:9a:9c:8a:c9:06:95:df:
         a9:6d:10:34:7a:b0:71:f2:c8:b5:ba:a3:00:3f:ac:13:f5:40:
         e1:b0:53:65:9e:24:57:20:6e:c4:d4:b7:ea:c7:f7:1b:ee:8f:
         6d:58:31:c9:c3:88:b3:1b:5b:12:24:9c:47:b8:3f:e9:81:ee:
         f0:ef:e8:4e:c6:37:92:31:27:94:a8:fa:bb:ee:80:06:82:80:
         eb:f1:0f:76:59:98:7c:f9:4b:e7:f3:88:32:d0:13:40:73:56:
         f4:ec:98:11:bb:a6:25:c2:85:c3:04:5c:64:cb:b0:58:9f:3f:
         e9:90:a8:98:29:77:6d:17:e6:8f:cb:d4:db:7d:5f:6d:af:a5:
         d0:c1:29:56:3c:66:f1:20:a8:b2:ae:d8:4b:af:76:e5:d5:c0:
         7a:e6:72:59:cd:60:bf:fa:cc:42:63:ec:39:82:b3:ac:4f:d2:
         79:0d:23:ed:8a:e9:af:9e:17:bf:2a:e7:3f:81:06:89:48:00:
         f2:ca:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:44 2025 by rpki-client