Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cfe1563-19af-3470-9ebe-01e9fcaf8463.roa
File:                     5cfe1563-19af-3470-9ebe-01e9fcaf8463.roa (raw, json)
Hash identifier:          wH3l/TS7KTo2FU8Wulu0OIJNqXN3yzr7iGLr2Q4vjrA=
Subject key identifier:   F6:2F:0A:99:39:6B:43:8F:63:9B:6D:B2:8D:35:45:73:F4:B6:1E:19
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581135FD87CB23BC2EBC380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cfe1563-19af-3470-9ebe-01e9fcaf8463.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:13:5f:d8:7c:b2:3b:c2:eb:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=4c727db5-ca94-4fcb-b4fb-6eaf1ad27b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:43:d6:06:96:f1:e0:0a:7f:9c:61:20:7e:
                    a3:61:56:17:64:9f:11:2f:ce:e3:1f:3f:df:bc:c8:
                    9d:80:0f:79:4f:6a:4a:6b:71:c7:d8:58:ff:c2:08:
                    0c:a1:36:ed:26:bf:a3:e2:75:b4:aa:a6:3f:39:e1:
                    fe:6e:94:ad:6b:96:7c:9b:68:cc:28:18:16:44:0b:
                    8f:2d:7d:da:3c:00:b8:a4:2d:02:9a:37:69:fb:8f:
                    f9:bd:f6:ab:15:ae:f1:93:e7:6b:67:7c:7c:ce:1e:
                    37:4b:7b:b7:65:2b:c6:24:12:70:05:16:7c:d6:28:
                    a3:7b:a2:1e:34:2e:89:1b:5c:35:2b:12:83:5b:0c:
                    4f:f4:f0:cf:72:b7:0d:6a:33:fd:73:8d:f8:a6:55:
                    1c:8d:45:2c:2b:cb:06:5a:f6:9f:29:7e:18:25:7a:
                    ad:58:54:44:d8:65:df:08:ed:2d:e2:56:f3:cb:23:
                    da:27:b2:4f:66:ab:44:1c:84:2d:f9:4c:95:d2:ef:
                    59:cd:9a:6d:16:e3:c7:bd:de:da:b0:ad:cb:46:b1:
                    5c:83:08:0f:eb:ee:04:35:3d:f2:13:a0:fe:07:ce:
                    f7:28:42:74:8e:c4:9c:88:45:86:1f:28:6b:fe:1e:
                    fb:57:d1:ce:d4:26:65:0b:f9:0d:9c:3d:cb:76:1c:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:0A:99:39:6B:43:8F:63:9B:6D:B2:8D:35:45:73:F4:B6:1E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cfe1563-19af-3470-9ebe-01e9fcaf8463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:03:00:52:0f:43:d7:55:d4:5b:b1:02:a2:ae:61:b4:51:2f:
         b5:22:ee:5d:4c:20:d6:b5:f7:29:bd:a8:03:f8:a6:37:3e:84:
         3b:d0:cc:2d:ce:1a:4f:2c:1d:48:d1:64:85:40:27:54:4e:28:
         9e:5c:56:cb:42:25:79:b0:50:40:93:9c:36:6b:34:6d:37:c2:
         46:b3:97:b4:64:26:c1:19:85:90:56:49:99:ba:33:97:54:d7:
         c9:62:b1:15:b4:43:fd:56:4d:bc:e1:0d:f1:03:2e:b8:4c:fc:
         cf:41:c4:78:16:26:02:2b:f8:35:fe:a8:d0:b1:cf:48:54:71:
         31:73:db:9b:71:93:2d:ac:24:a2:b3:a9:8b:83:64:db:6c:50:
         7e:6e:05:c9:1b:90:ad:8f:2b:7a:2c:2a:af:80:79:6c:62:2e:
         c7:fd:e1:9c:25:dc:73:7d:ee:13:d8:24:9b:c4:5a:9b:fe:36:
         ad:12:19:19:31:1f:e0:02:04:01:6c:18:22:45:b6:ba:8a:4d:
         3f:b6:4f:99:c8:9b:51:1d:96:25:95:39:76:a9:f5:d1:9d:96:
         01:67:db:fe:80:8d:7d:84:4a:0d:ca:9c:6c:24:8f:28:37:86:
         fc:8a:da:e6:a4:af:91:dc:2f:5e:b1:8a:30:62:dd:c8:a7:39:
         e5:ee:84:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:03 2025 by rpki-client