Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/889d5620-873f-3359-89df-3debf0c55549.roa
File:                     889d5620-873f-3359-89df-3debf0c55549.roa (raw, json)
Hash identifier:          yWugFRjJKFQgZYrNj1JEihDL8l7vggbbgEPVuyifL+o=
Subject key identifier:   4A:16:90:6A:7B:01:16:41:1E:48:E4:20:22:8C:4F:5D:F4:94:52:57
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848CDE114B241BF09120270BA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/889d5620-873f-3359-89df-3debf0c55549.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     7155
IP address blocks:        75.104.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:14:b2:41:bf:09:12:02:70:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=526034af-36db-4c25-9a71-031baf3e2f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:92:eb:05:ed:90:5b:c2:10:d1:1b:f3:8a:
                    9c:6e:29:ca:15:01:bb:a0:7f:25:da:9f:5b:7e:71:
                    df:e1:03:e5:b5:a6:32:bc:86:37:3c:6e:18:a5:71:
                    93:81:6d:b3:fd:4f:37:a8:b6:26:9f:82:07:0a:de:
                    a7:b0:13:b3:09:e4:23:89:8e:a5:39:7e:0c:6f:b1:
                    44:ed:c6:18:3b:b2:5e:d0:61:2c:f1:65:41:93:85:
                    02:8b:a2:d6:3b:a9:3a:6e:50:a2:e3:a7:b7:67:d7:
                    80:fe:df:3f:64:2b:a5:c0:c0:65:87:b1:d6:81:c5:
                    60:45:b2:38:3c:b4:1b:82:81:68:55:51:f7:e9:78:
                    3e:72:3a:a6:f8:7d:05:f5:c4:87:88:c4:f3:5f:8f:
                    dd:77:0f:78:71:f7:b7:6c:59:52:c7:e3:02:70:91:
                    0b:9e:15:bd:af:8a:c2:5a:85:e3:b6:28:09:5a:ea:
                    3f:e2:b4:85:53:87:9a:0b:e5:ff:e0:3b:53:19:82:
                    b6:4d:7f:d4:ef:de:84:c0:68:8b:73:b1:1a:a4:a8:
                    4b:75:dd:27:e7:a7:b6:81:dd:e2:25:0c:1b:31:a6:
                    7d:f7:ef:0e:25:cf:e2:9e:fa:c3:1d:30:34:84:70:
                    04:36:1b:13:2a:f4:f7:16:51:43:18:0c:3f:8d:90:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:16:90:6A:7B:01:16:41:1E:48:E4:20:22:8C:4F:5D:F4:94:52:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/889d5620-873f-3359-89df-3debf0c55549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:a0:3a:36:2d:39:77:43:2c:0d:87:5c:0d:7b:c0:3f:0c:
         c1:90:30:2d:61:c7:3d:d8:d2:dc:65:12:3f:3a:bb:0d:5b:55:
         71:64:2a:8e:60:49:d2:ec:38:c7:e6:83:30:5b:c1:32:82:cb:
         e3:c3:d1:80:82:aa:18:a2:40:a5:b0:d7:b3:03:26:fa:93:43:
         f4:58:63:1f:88:80:a6:76:aa:c5:2e:a0:f9:2b:3a:34:59:f5:
         1c:83:51:aa:0c:d6:c2:af:81:31:c9:49:9e:ba:33:a6:48:d3:
         36:32:1b:13:a5:c9:59:61:44:d3:b1:43:86:47:73:47:61:8d:
         a4:06:55:af:31:16:e0:55:1a:5b:3a:d6:9e:a9:72:3e:06:3c:
         c7:0c:c4:10:96:a8:a4:35:d7:0f:ef:93:1a:f1:81:2e:f6:01:
         ef:5c:4b:05:67:ed:0a:27:b6:64:15:9e:97:c2:d2:5f:2d:d5:
         d5:55:6f:e7:fb:7c:59:57:1d:34:ba:ee:3e:53:75:fa:2f:06:
         b8:07:3a:f5:2e:ce:11:ec:26:65:e4:fd:13:ea:a9:fe:a7:2a:
         20:53:6d:f7:dd:12:ca:91:4b:0a:ad:ea:e7:22:30:3e:40:73:
         bb:a4:41:be:27:9c:1b:d5:0d:14:69:64:97:ff:ae:0d:ed:92:
         73:de:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:48 2025 by rpki-client