Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4da38c3a-c88d-3076-bbef-ccf5edbc8fe2.roa
File:                     4da38c3a-c88d-3076-bbef-ccf5edbc8fe2.roa (raw, json)
Hash identifier:          VAi8Xn6NDSFR40TfxtfQWSPeHuUGp4JHMCmqFCTMYsM=
Subject key identifier:   D3:BD:0A:CE:1D:3B:AE:BD:A7:17:82:A1:25:D0:0B:1F:1B:29:E8:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581BCBEAADC99D8F6131040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4da38c3a-c88d-3076-bbef-ccf5edbc8fe2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.107.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:bc:be:aa:dc:99:d8:f6:13:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=ca6337e0-5be4-4c0d-b058-0821670156ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:f3:fc:d0:08:f0:b2:66:39:f7:38:cc:a6:
                    22:34:a0:b4:38:74:ac:6b:5f:0b:e3:76:e3:ca:66:
                    1f:03:51:0d:43:bc:1c:4c:68:5f:ef:d7:1a:b0:52:
                    15:9b:19:27:9e:b9:1e:83:36:eb:86:7b:ce:3b:98:
                    53:44:29:08:88:b3:5c:4b:2a:6e:59:a3:6f:c8:59:
                    8f:47:b7:d1:77:ec:7f:18:1c:a0:c4:df:fd:ec:aa:
                    07:24:7e:77:30:89:19:e8:35:3e:28:27:b2:ca:9e:
                    6e:bf:cf:c8:be:4c:bd:01:76:25:9b:a0:03:b2:5a:
                    d1:81:df:8f:94:71:40:49:8b:ab:c9:37:62:ea:06:
                    2c:31:48:06:95:cc:1f:33:28:a2:a5:ca:4e:65:10:
                    77:29:a5:ab:9d:09:d2:b9:4d:6c:b0:73:92:1a:e4:
                    45:42:94:3a:1b:f9:68:21:22:c5:c0:d3:5e:bd:1d:
                    e2:8b:14:57:c8:d1:4c:6b:77:1e:b0:1e:bb:7a:98:
                    de:2d:3f:2d:dc:bd:b4:ce:be:c3:67:1f:69:7f:e0:
                    75:54:82:ac:85:31:35:f6:b8:b9:de:92:5e:b4:e1:
                    93:f3:ac:64:ec:2c:da:fb:ed:3f:d0:3e:90:50:23:
                    89:ef:cc:17:6c:fd:23:d3:98:6f:58:d6:32:7b:c5:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BD:0A:CE:1D:3B:AE:BD:A7:17:82:A1:25:D0:0B:1F:1B:29:E8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4da38c3a-c88d-3076-bbef-ccf5edbc8fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:b4:68:d6:2a:fe:19:bb:63:92:43:e8:9a:87:9b:52:a9:
         d9:5e:e4:e8:47:98:09:35:53:d7:be:99:f7:18:0f:ce:a1:e7:
         a5:cf:b8:98:e2:69:b5:25:b3:52:0d:18:76:f1:30:50:56:2e:
         b6:0c:c9:fc:2e:fb:5b:27:83:20:6c:c3:b2:4e:b5:c8:99:ed:
         04:24:5b:82:e8:b1:54:df:b2:27:8a:17:64:4a:95:ee:93:d1:
         ea:5f:65:c2:42:e9:e1:6e:3d:e6:75:a5:47:fb:5e:15:3a:c1:
         92:85:ac:17:d3:5a:9f:5d:7f:23:e2:43:ac:e1:6e:4b:94:19:
         1f:af:18:54:f9:72:63:16:56:cc:0e:5c:a8:0f:ee:42:67:b1:
         89:35:aa:92:ff:dd:22:d0:1d:98:ec:74:fe:d9:c7:58:52:f1:
         97:0b:cd:bf:ed:59:37:84:91:33:38:d5:92:a1:aa:0a:04:bd:
         7d:f6:05:6e:e9:98:29:f7:3d:c5:af:1e:09:f3:c8:99:0e:9d:
         ce:94:e1:f7:ea:d7:ad:34:cc:59:7c:1b:62:f1:6b:b0:c4:1b:
         08:30:7c:a9:7f:1d:ab:ce:17:0b:14:9a:83:70:ab:2f:25:1a:
         12:be:27:16:da:74:86:8d:bc:ca:bd:72:7d:91:78:01:20:7d:
         42:6d:3b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:03 2025 by rpki-client