Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e35bcf3-4578-3ed8-a76a-2b1c59671641.roa
File:                     5e35bcf3-4578-3ed8-a76a-2b1c59671641.roa (raw, json)
Hash identifier:          AAiwHkafFpzAyWJ1TZd+AtC2F7M8ttaLhj8QYJ+5yjk=
Subject key identifier:   86:8E:45:06:46:06:14:0A:9A:A2:6E:1E:77:F7:3B:3D:0E:D2:AD:2C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58113B717F8C90E3AAFADC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e35bcf3-4578-3ed8-a76a-2b1c59671641.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:13:b7:17:f8:c9:0e:3a:af:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b58ca1ae-7113-446f-a65c-2cfe96bd235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:6e:d1:7a:4e:f2:65:03:10:9c:e2:b8:31:
                    1b:32:6e:06:c1:17:65:d7:cb:c2:a6:d3:62:17:8c:
                    f2:06:70:5f:09:76:79:5f:54:9d:dd:71:b0:23:00:
                    a7:c8:d3:b0:a4:2c:9e:07:d8:d5:5f:3f:94:6e:20:
                    06:e7:87:1b:b5:cc:39:df:09:d3:b6:ef:1e:a6:e7:
                    87:37:ee:f2:5e:b7:0f:74:ed:7c:66:c1:c5:35:f7:
                    20:9b:0e:76:3f:73:45:da:0a:25:ad:39:1a:82:f7:
                    c3:18:3f:3d:0c:f7:86:89:e0:95:ec:09:13:b4:e3:
                    8f:b7:3e:32:7f:af:59:c1:af:59:c8:bf:c9:97:88:
                    0d:7d:73:2c:47:89:2b:83:1e:a4:74:91:5b:e0:9a:
                    3a:6f:9c:2a:41:9b:d1:f6:66:f8:83:4d:d6:31:22:
                    55:a2:73:55:14:4c:3e:9d:81:2f:1e:77:71:46:49:
                    ee:a7:81:1e:92:7e:d5:98:f4:ae:95:9c:60:35:7d:
                    e7:8a:2b:d7:05:a1:eb:8e:f5:78:3d:55:ca:05:b9:
                    9c:92:1b:6f:3c:1e:20:c9:2a:81:bc:ac:54:64:05:
                    64:cc:61:56:dd:0e:2f:7c:30:39:d0:aa:c4:97:70:
                    e2:4e:6b:ea:21:41:d4:ec:e5:11:0d:a2:46:4c:54:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:45:06:46:06:14:0A:9A:A2:6E:1E:77:F7:3B:3D:0E:D2:AD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e35bcf3-4578-3ed8-a76a-2b1c59671641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:18:16:66:5f:b6:c2:f3:96:30:33:34:b2:5d:0f:49:eb:88:
         f1:0b:35:48:42:8b:0a:c3:d9:46:bb:0a:45:c4:09:e3:ef:10:
         d2:d5:b0:85:0a:83:b7:ac:92:51:b7:2b:38:ab:07:a9:63:30:
         41:22:22:a0:c5:17:3f:72:ff:0b:b1:3a:b9:04:37:ce:a6:7a:
         88:7f:3b:e7:be:45:a0:35:1f:d4:b8:9a:61:42:43:cb:3b:af:
         8d:d4:25:bd:12:2c:bc:87:c5:cd:af:2f:f5:9b:4a:ac:b1:58:
         2c:a2:e1:b8:86:a0:d4:55:75:77:22:2d:86:d8:d8:19:89:c6:
         9d:f8:b1:53:b8:4e:d8:22:ce:9f:39:da:ff:75:dc:43:35:38:
         c5:b6:ae:61:87:ae:db:4b:ce:e0:15:e5:9d:a5:a5:ff:af:2b:
         22:83:a7:c5:73:80:90:e9:18:a3:54:b2:47:f9:12:7b:48:48:
         35:5c:91:00:2c:40:7d:33:cd:be:2e:d4:98:e2:fd:e2:a6:53:
         0c:3d:19:d8:05:c0:1d:e6:6d:b3:44:77:4a:e1:0f:6c:51:f5:
         3b:99:47:3f:28:43:3f:01:dd:32:f4:5e:80:03:08:ae:b2:6a:
         ad:7c:7f:ba:15:6e:66:26:c7:b2:53:0b:c3:cb:37:ba:7b:15:
         aa:47:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:19 2025 by rpki-client