Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c63bcf6-a3bd-36e3-be79-2ed1752bac1e.roa
File:                     8c63bcf6-a3bd-36e3-be79-2ed1752bac1e.roa (raw, json)
Hash identifier:          h4cZ94mOliQX7/GWzksSefoBERl25XLv4BZFrN2Gyv8=
Subject key identifier:   90:8B:58:7B:F9:03:45:1E:1F:3D:5C:39:3E:9A:82:DA:47:6A:9B:FB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811DD39C3A626D7FA22A50
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c63bcf6-a3bd-36e3-be79-2ed1752bac1e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1d:d3:9c:3a:62:6d:7f:a2:2a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=8cb71484-13ee-4e12-8dbc-a23ecf2a17cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:82:b3:9a:51:f3:86:cc:06:24:30:35:ba:
                    80:32:c5:4d:5e:56:d2:d8:ca:e3:8e:4f:b3:0d:de:
                    df:46:82:af:1c:ba:6f:8e:29:55:18:c6:b3:2a:5c:
                    65:e2:4e:93:42:ac:8d:09:46:8e:54:1f:80:00:c9:
                    b4:47:0b:ea:9a:f4:14:b3:61:cb:54:bf:1e:df:c9:
                    02:c9:2a:d7:2c:be:59:d3:dc:fd:e9:fb:ef:5b:8e:
                    c6:4f:db:bb:9c:78:4a:93:8c:1d:dc:3f:13:17:bf:
                    8a:6a:f5:46:bc:13:1f:7d:c6:9b:27:ac:86:68:e5:
                    67:f6:55:62:1c:5d:3f:14:27:03:c1:fa:4c:48:65:
                    27:2e:2f:4e:f1:ee:29:f3:87:ca:da:df:3f:b6:c8:
                    56:4a:7b:9c:a3:da:75:77:a8:9e:3d:2e:c5:28:77:
                    ef:7d:7e:4a:fd:2c:e6:de:f3:6d:91:ef:07:26:cf:
                    ca:a5:08:97:91:c7:74:f7:00:d8:e8:60:74:1a:81:
                    41:9e:db:74:02:36:a6:64:92:e5:ac:0f:38:c9:8f:
                    5d:6a:b6:f8:ff:cb:dc:9c:87:c6:39:2b:79:19:c7:
                    71:89:f2:b5:d8:f9:90:52:ec:de:66:9e:1c:c8:01:
                    df:ce:48:6a:de:41:f2:97:52:9b:ff:76:72:84:10:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8B:58:7B:F9:03:45:1E:1F:3D:5C:39:3E:9A:82:DA:47:6A:9B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c63bcf6-a3bd-36e3-be79-2ed1752bac1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:ac:00:9a:74:c3:29:22:44:bf:fe:eb:91:16:c1:d6:5f:
         d9:a7:ba:d7:86:90:82:8d:d4:00:54:71:a0:2f:d4:7f:45:2f:
         06:fd:e0:ec:9c:df:58:76:57:59:ca:d0:59:b9:7a:18:81:dd:
         a7:19:87:13:0e:03:52:3a:9d:46:0e:a2:5f:4d:ac:a9:06:52:
         16:45:25:d8:e9:c3:74:32:83:fd:4e:2d:3a:04:a9:77:d5:e6:
         6e:36:1c:6d:1f:cb:28:c4:ca:a3:26:75:5f:97:93:ba:b8:5e:
         c1:ff:a9:bd:99:dc:09:d7:59:90:21:d4:f4:74:e0:b9:95:5f:
         b6:63:58:ed:ff:86:26:a5:5d:3c:91:e8:ef:c2:cb:56:40:62:
         c6:86:6a:2b:a7:26:57:03:64:62:74:41:f9:e1:fc:8d:71:63:
         1e:f8:f8:f6:81:56:e5:c2:b4:96:70:df:5f:c8:0a:95:1f:e4:
         6f:20:2a:5c:1e:7c:9a:2c:43:2b:e7:5d:a3:8e:e8:82:e4:4a:
         bc:94:2e:80:5b:65:13:8a:1a:1e:65:cb:6e:52:fe:e1:18:21:
         82:87:7e:f8:bb:81:ff:99:f3:4e:38:64:ac:76:6e:71:f7:6a:
         8f:a8:37:5e:c3:6e:58:ed:ff:cc:ba:8a:cc:a7:6d:af:7f:9d:
         89:6c:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:13 2025 by rpki-client