Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a3cc5ab-b496-36e3-9fde-3a46acbc1cfd.roa
File:                     1a3cc5ab-b496-36e3-9fde-3a46acbc1cfd.roa (raw, json)
Hash identifier:          rRao9DWNjoSFV/L3s/SE5rOV7L6NhA4YqMyDnhCV634=
Subject key identifier:   4A:E5:17:A6:3C:A0:59:89:66:B9:5B:2F:54:95:F4:3B:80:5D:18:B0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B5AFDCB4486E1339E500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a3cc5ab-b496-36e3-9fde-3a46acbc1cfd.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b5:af:dc:b4:48:6e:13:39:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=764939fd-7d65-4cde-bd8c-c5c8b3b35bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:08:8e:46:4d:2b:9d:e5:60:b4:81:52:4a:f7:
                    ec:b7:d3:e6:99:e6:8e:17:24:4f:c0:51:de:10:3e:
                    6f:7e:80:ac:6e:f8:3d:4c:33:c2:ef:49:dc:a7:cc:
                    3a:f4:76:7f:c0:ef:fd:1e:d6:4d:3f:5a:23:33:50:
                    48:21:8f:58:03:1f:2e:ac:03:a1:63:95:53:48:c0:
                    37:5a:ec:8e:aa:c1:3f:ac:52:db:ae:5b:ba:b7:07:
                    ad:32:73:28:d4:b8:d9:eb:40:f6:e4:a2:21:21:23:
                    39:61:c6:35:8c:3b:27:31:a1:eb:80:fe:5d:45:76:
                    f5:f2:70:18:83:e4:10:0d:0c:97:51:fc:05:62:4a:
                    a7:2d:73:1d:85:95:9b:e6:e2:c8:4e:2a:a5:95:33:
                    22:9d:90:0b:4f:f6:60:37:f6:6f:cf:20:1d:30:41:
                    33:ab:55:32:31:74:f3:11:0d:58:e3:61:13:01:20:
                    73:93:fe:cb:63:43:17:73:b2:f4:9c:3e:c7:a9:a6:
                    55:a0:ff:13:1c:f6:3a:b0:a5:5d:78:83:77:6a:3a:
                    28:e8:99:8f:ae:f9:2b:79:18:a5:f9:61:ca:27:79:
                    72:b9:e9:f7:c3:ce:81:12:7d:a1:f6:c7:67:b7:1b:
                    e0:aa:3c:e2:b1:40:7e:c1:fe:7c:e6:1c:2b:7a:2b:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E5:17:A6:3C:A0:59:89:66:B9:5B:2F:54:95:F4:3B:80:5D:18:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a3cc5ab-b496-36e3-9fde-3a46acbc1cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:da:a1:be:4b:e2:9b:1c:34:06:f7:da:4f:e4:b5:a4:95:cd:
         0e:fa:fb:ff:ac:8f:72:0b:f9:f7:fd:ef:48:f2:d8:cd:a6:a8:
         57:02:cb:33:5c:f5:a6:11:46:fe:e8:01:fa:1d:65:1f:9e:e3:
         b8:bc:d8:79:e2:7c:76:84:89:57:04:6c:35:57:8f:9d:1a:d5:
         b4:57:95:20:4c:c9:1d:5d:d4:97:4d:10:d9:13:2d:4d:a5:02:
         10:af:4f:03:26:a2:6b:e1:ab:b5:ae:13:65:b1:3a:a3:b4:02:
         ca:0a:a8:87:ae:14:d4:d8:78:6b:65:a2:7e:d2:4b:43:0e:fa:
         2d:aa:ba:9d:1d:bf:25:41:83:31:22:e1:8e:a5:1e:bd:df:56:
         ba:db:c1:8a:ff:be:de:30:f3:b1:55:fc:0e:48:bc:9b:f6:71:
         47:42:bf:3d:cb:30:b9:4d:40:01:34:98:26:d2:b6:3e:64:3e:
         da:72:96:5b:12:82:02:9b:20:e5:3f:de:f8:12:7b:67:52:8a:
         a9:5a:06:6a:23:d0:3e:97:3f:d4:5b:da:a4:4b:7b:b6:be:26:
         92:2b:ee:fd:26:64:ca:2f:89:bd:5c:50:b2:18:ca:a4:54:3d:
         42:63:e8:45:3a:0d:3f:e2:2e:e4:3c:e4:26:bc:cf:69:5b:58:
         2e:8b:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:55 2025 by rpki-client