Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e4f6308-f260-3ecc-9b38-533262a4826e.roa
File:                     3e4f6308-f260-3ecc-9b38-533262a4826e.roa (raw, json)
Hash identifier:          QOqs3/IlmiQssD3DX0qOlHcsPO5TGiL8kwsnZVvuX/s=
Subject key identifier:   CE:91:E6:8E:69:7C:3C:ED:AE:34:B2:1B:A7:96:AA:93:7F:03:51:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B3820A13891320EFB5C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e4f6308-f260-3ecc-9b38-533262a4826e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b3:82:0a:13:89:13:20:ef:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=80aeec4a-8d4f-41d9-bcbc-de1c888cbfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:75:a8:a1:9a:c7:67:06:6d:4d:ed:25:75:7a:
                    0a:3a:bd:1a:37:ca:fe:72:3c:b4:62:22:c7:12:4d:
                    6f:6a:73:c9:89:c9:e1:07:7e:1d:21:86:72:dd:59:
                    74:f1:13:36:48:e0:ff:34:f8:45:7d:97:1d:fd:cf:
                    b7:b8:61:0b:e6:b2:76:8a:ff:80:0b:30:11:ee:1a:
                    36:5a:97:c5:71:e8:57:07:29:78:4d:c5:87:a6:b1:
                    e0:d4:b7:c8:4e:80:ce:94:16:4a:f4:05:4f:61:a7:
                    df:e4:db:a7:db:f1:7a:bb:af:e1:97:31:47:03:c2:
                    31:56:ff:c2:60:13:ac:d7:16:0c:27:e1:d2:69:3e:
                    46:a2:84:6e:32:5b:2f:e3:d6:0c:c8:a2:6e:fa:25:
                    b5:32:0d:22:dc:fa:78:b3:d3:0f:5f:00:f8:ea:bb:
                    42:37:75:93:74:20:d9:c2:ea:f1:0e:41:d5:5c:35:
                    16:42:43:92:05:b8:ee:d2:37:de:6e:3d:1d:ef:86:
                    5e:ad:ef:ab:56:47:5e:7a:d5:e6:9d:4f:1f:37:13:
                    6b:50:dd:4c:8d:16:97:4b:31:be:f2:5f:17:f3:37:
                    93:7e:cb:8b:e2:fb:88:d8:9a:76:35:93:04:f2:42:
                    2f:4e:c4:34:a8:11:63:63:94:4b:14:29:54:69:3c:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:E6:8E:69:7C:3C:ED:AE:34:B2:1B:A7:96:AA:93:7F:03:51:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e4f6308-f260-3ecc-9b38-533262a4826e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1b:19:b5:90:d2:ab:ff:00:a5:1b:53:20:7f:d1:6c:11:9d:
         4d:d1:2e:81:70:d6:72:fd:8e:5c:97:b5:5f:08:bf:4a:49:ea:
         42:23:0d:ce:b9:2a:37:9a:85:03:1c:e4:2e:6e:2c:ba:ba:fb:
         54:b3:21:8e:77:d4:6c:59:f0:c2:6c:4e:c0:4b:14:8e:f3:a6:
         2a:2a:83:b1:65:50:f2:e8:e6:bd:fd:92:b8:d9:f2:02:4a:33:
         e6:fd:7c:5c:bc:37:da:42:dc:11:0c:d7:a6:9e:7d:a5:e2:25:
         0b:ec:02:37:31:16:36:fd:3c:95:43:30:b3:61:27:ae:6d:c2:
         6a:2e:76:35:67:42:c3:62:bd:f9:3a:a0:d2:6f:ca:e6:2e:91:
         65:5d:34:21:26:7e:81:c3:46:60:e2:af:75:d6:c7:5f:94:bf:
         5a:ce:34:cb:aa:a4:bc:74:7a:96:35:68:e7:cf:04:26:aa:63:
         f6:ec:e0:1e:ee:4c:d3:28:7b:7d:e7:ee:37:1c:aa:25:38:9b:
         e9:62:75:04:36:70:01:41:5e:e4:b4:10:02:53:a6:a0:75:4f:
         7c:dd:6e:5b:88:0f:17:34:55:75:d0:7b:67:e5:c6:64:cf:30:
         09:2e:ca:1c:6c:0b:43:42:d9:ff:23:7d:43:01:3f:d6:be:05:
         44:72:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:51 2025 by rpki-client