Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef31a364-5475-30a9-8bf3-ba2ca88338e1.roa
File:                     ef31a364-5475-30a9-8bf3-ba2ca88338e1.roa (raw, json)
Hash identifier:          2UWaIql34Ct1dKpPw9mnwIsRKoq5o1UwYEUVAs1WWiI=
Subject key identifier:   93:49:3E:27:97:0C:90:6C:7C:53:BC:3F:5D:56:C1:B3:F8:F2:5E:1A
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848F4F69C4B63BEAD74AC83EC00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef31a364-5475-30a9-8bf3-ba2ca88338e1.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     26100
IP address blocks:        137.75.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9c:4b:63:be:ad:74:ac:83:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=f2e5312c-091c-42ce-a41c-6ff97b1e1cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:f5:a0:78:cf:71:5b:b3:7c:58:fc:3e:49:
                    bb:c7:c8:8e:94:1a:90:bc:89:60:45:91:cd:95:6a:
                    96:5d:ec:0c:8f:b9:aa:be:22:51:ce:74:c1:2b:b5:
                    9a:c1:46:6b:be:c9:8e:64:5f:42:7e:cd:b1:a5:b2:
                    c1:d8:92:4e:38:36:46:b7:4c:27:63:94:05:33:98:
                    db:ec:de:e8:85:9b:5e:38:5d:e4:0d:df:e9:65:a0:
                    85:2d:63:b4:00:e1:72:7c:11:92:69:69:91:c5:8c:
                    81:bd:ef:ab:0e:a0:74:eb:e8:1e:44:03:3c:03:8c:
                    1b:6e:20:96:67:ec:83:82:fd:24:f7:63:76:a3:44:
                    c3:4b:84:7f:04:22:7e:e6:b0:e0:62:fc:e8:b2:70:
                    09:f5:68:40:b3:f1:d9:3d:19:6d:52:67:e7:6c:17:
                    9f:6d:6a:5d:cd:3b:b7:fc:4b:5e:17:e5:96:68:4e:
                    6d:63:04:c8:43:c0:a5:b7:5d:1c:2b:76:e2:28:0c:
                    17:f4:ac:7e:1f:1a:b1:78:d4:0d:a5:34:58:5f:89:
                    f5:e4:28:d6:96:d8:9d:db:77:55:1c:9e:7b:e4:90:
                    5f:e7:95:cc:dc:c0:3e:ea:64:45:90:b6:4b:81:b5:
                    55:69:e7:71:44:b1:99:45:e8:17:98:e6:52:36:21:
                    87:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:3E:27:97:0C:90:6C:7C:53:BC:3F:5D:56:C1:B3:F8:F2:5E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ef31a364-5475-30a9-8bf3-ba2ca88338e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:d0:9f:b1:41:dd:50:8c:ec:97:c0:bf:b5:ad:45:8c:e0:
         60:ea:29:03:25:fb:00:97:79:49:84:78:04:68:96:c3:2c:0c:
         9d:d5:c3:40:49:fa:2f:ba:ff:b9:c3:78:3e:9b:0b:bb:f7:f9:
         ae:25:73:3f:6e:aa:f1:80:57:9a:99:e3:1a:ad:48:50:db:ae:
         58:dd:8b:37:c4:67:e6:8d:cb:aa:1d:17:99:f2:b7:b0:df:1e:
         0f:36:68:44:e7:84:ca:02:c8:fd:bb:44:c7:f3:f4:43:de:9d:
         73:77:7a:fb:09:c8:87:56:01:db:f3:57:aa:14:1f:e5:60:ea:
         f0:29:2d:66:55:5e:f8:5d:91:af:be:d8:40:6d:00:b1:c4:c5:
         bb:e2:e4:8b:ce:82:10:ca:2f:d8:60:88:18:a4:86:e8:79:22:
         69:d4:50:74:25:4b:84:bb:91:1b:2a:b9:85:f8:68:aa:07:48:
         6c:85:03:c9:e2:09:2e:95:3a:73:04:d6:f9:70:7a:ea:31:00:
         dd:7c:01:32:1f:e2:03:98:39:a9:df:79:2c:18:1c:6b:de:d9:
         36:95:7f:cc:11:a8:ba:d5:b6:31:86:34:97:2a:a8:14:1f:1b:
         16:85:ec:78:41:99:ab:d5:9c:ed:b2:41:ec:d1:1b:e2:b4:63:
         4c:28:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:38 2025 by rpki-client