Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59d762cd-a053-34b0-b899-189db3f21374.roa
File:                     59d762cd-a053-34b0-b899-189db3f21374.roa (raw, json)
Hash identifier:          GQcAFc2Ziro4cV9WGoenaoU1BfDmOnoomHGGXK6NGaM=
Subject key identifier:   9B:42:F5:2B:15:39:0A:0C:44:92:2B:B5:E5:1D:F8:C9:84:B2:81:36
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5812B37E6704D34F67F1D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59d762cd-a053-34b0-b899-189db3f21374.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.107.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:2b:37:e6:70:4d:34:f6:7f:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7aae8564-0ec5-494f-8883-a56d471bbb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:84:52:74:7a:25:90:47:83:af:19:2f:28:
                    98:d9:f0:0f:b0:00:2f:d6:24:e9:df:bc:5e:e5:e3:
                    b7:52:81:d3:68:56:80:9c:a1:cd:15:84:5a:81:d8:
                    9c:d3:a6:fb:1e:1b:6c:e1:26:46:cd:6b:34:1e:75:
                    f6:15:54:9a:8e:c6:66:8f:08:f9:28:90:0f:04:3a:
                    90:0b:8f:32:2b:11:7a:d7:58:51:2b:e9:0d:fb:1b:
                    01:f5:cb:71:48:41:2a:07:f8:16:dd:cc:42:ad:ea:
                    ac:2f:57:8b:51:6a:45:ce:4c:50:89:b4:07:db:83:
                    7f:1d:63:5e:be:fd:80:51:6d:4b:e8:4e:cf:2a:aa:
                    63:c3:d0:15:e1:91:1c:06:2d:df:58:20:8b:67:c9:
                    ce:95:12:fd:14:7c:b7:33:0c:ef:a8:9b:43:7a:54:
                    c2:f9:4b:b1:17:3d:57:48:ee:80:3c:12:ea:db:b8:
                    62:ff:5c:c7:b1:f6:50:68:c3:8e:a5:28:f8:d4:18:
                    be:99:0b:97:e3:ca:03:f3:ab:2b:e1:a9:60:94:e4:
                    3f:99:a9:09:fe:7b:03:66:f7:1f:bc:cb:03:4b:57:
                    15:95:23:f7:2b:14:1e:54:e7:33:17:90:ef:b1:9c:
                    c3:9f:39:ea:53:8f:c0:a3:12:64:a7:26:cb:dc:72:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:42:F5:2B:15:39:0A:0C:44:92:2B:B5:E5:1D:F8:C9:84:B2:81:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59d762cd-a053-34b0-b899-189db3f21374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:aa:e5:b0:51:ac:9f:a4:a2:1e:0c:33:07:9d:52:7a:6f:72:
         7a:65:71:b7:5a:1f:11:ff:d2:ae:d0:99:69:e0:81:f6:bc:98:
         a8:f5:92:37:9c:df:cb:13:a3:57:b4:cf:db:36:df:a7:ac:5a:
         fe:a7:05:d9:e2:c5:f1:82:c3:b9:00:39:b5:d8:2c:97:4c:04:
         98:d1:11:57:d4:34:0d:f3:89:38:7e:1f:72:70:b2:89:94:f1:
         60:46:d4:30:ad:7c:fe:d9:74:7b:02:cc:2a:5b:07:55:36:40:
         b8:cc:d9:10:a6:a3:25:83:7b:07:87:27:3a:be:c0:9c:af:be:
         0b:34:bf:96:ba:80:4c:2e:7c:0e:a0:e8:32:d1:ed:22:81:f1:
         4d:c1:b2:54:17:12:04:32:50:3e:5b:6e:cd:76:b1:7d:e3:d1:
         fe:63:0e:d0:ab:62:63:32:6b:76:9c:f7:3f:f1:c0:77:86:ab:
         bd:dc:72:9c:77:4d:20:ed:36:ab:33:3d:0d:51:7e:64:80:62:
         b8:1d:02:76:4d:ba:e9:f1:e4:4a:05:f7:1c:2f:3c:2a:4f:2c:
         ac:b1:f5:a3:f3:76:23:43:7b:f4:2f:30:ab:ed:9f:5c:43:16:
         a9:20:26:72:43:03:16:1d:8c:73:0e:21:04:73:ef:1a:f7:0c:
         56:a3:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:58 2025 by rpki-client