Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9da645e4-73fe-3d18-93a1-0ad13f952da5.roa
File:                     9da645e4-73fe-3d18-93a1-0ad13f952da5.roa (raw, json)
Hash identifier:          n3+Bf6hRJ5VpbMMBWdoxpbdrtOZuena65DzIGDYl2c0=
Subject key identifier:   CB:C9:AF:65:1C:7E:03:8C:DF:A4:3A:30:68:61:B2:2F:B7:29:6A:23
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581180DDA562582693400C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9da645e4-73fe-3d18-93a1-0ad13f952da5.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:18:0d:da:56:25:82:69:34:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0964277e-49b2-4bdb-bf85-0dfdd03f47dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:13:26:58:9e:26:39:67:98:bb:d9:78:02:d9:
                    35:ca:36:e3:97:cb:be:bc:52:aa:bc:61:27:b7:a4:
                    47:ea:08:75:9d:7e:44:76:84:02:b3:ad:f8:30:57:
                    d7:99:03:41:30:ac:bc:21:1a:f8:44:7b:db:81:09:
                    cc:46:9f:65:f2:28:f7:a7:62:d7:b9:22:4b:9f:ca:
                    42:2e:a6:94:b0:7f:7c:2f:07:3d:0f:63:66:84:e8:
                    88:17:ac:73:a8:7c:6c:9d:ec:64:59:2d:90:de:cf:
                    1f:7e:63:54:3c:b2:a0:92:c9:93:88:97:3e:1b:7f:
                    79:c9:0f:33:c0:b3:6b:8c:27:95:83:c6:d6:0b:43:
                    6b:b4:bb:8d:38:b0:e2:39:35:bf:1f:80:1d:7a:1e:
                    bc:80:62:c8:92:01:b1:cc:64:09:10:16:90:aa:85:
                    33:1f:21:25:10:a2:02:4b:b3:45:1d:51:c9:14:84:
                    8b:53:37:c6:65:7f:0f:d0:a0:1f:f3:62:e3:e7:ab:
                    e2:e9:e9:29:7c:a2:77:a9:d6:7b:21:1e:91:0f:40:
                    34:2e:fe:21:e8:16:cf:e5:6d:63:0f:7f:cf:80:c0:
                    85:9e:c3:37:ff:20:f0:da:a7:29:bc:75:fa:38:68:
                    23:74:8a:03:54:03:ad:7c:55:f2:cc:6b:7a:fc:a1:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C9:AF:65:1C:7E:03:8C:DF:A4:3A:30:68:61:B2:2F:B7:29:6A:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9da645e4-73fe-3d18-93a1-0ad13f952da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:91:b7:a3:05:82:ec:c0:fb:01:c2:5f:d4:b6:c2:28:79:
         93:74:fe:8e:88:61:28:33:ab:0d:97:5e:04:32:e0:9b:e1:81:
         3d:85:a9:c3:ef:42:31:d5:24:56:f5:6e:4d:30:bf:1f:92:d0:
         ae:47:22:2d:30:d5:7e:81:26:de:bf:e6:a0:d8:7b:78:41:cb:
         a0:90:53:f5:5c:13:25:49:f0:cc:37:9a:48:ba:07:e9:9d:3f:
         58:fb:05:1d:db:e0:0e:15:fa:80:69:30:3e:97:27:e7:00:25:
         a4:9c:a5:c7:3e:b9:8c:e5:5b:ab:23:be:e6:0e:c4:bf:fc:7e:
         89:0c:25:5f:92:7b:81:f4:4f:4b:8a:8a:76:a5:e6:b0:c2:54:
         0f:3b:71:37:de:ec:83:89:67:b7:36:55:84:d2:40:2a:e1:1d:
         63:ee:e2:64:1e:cc:e8:b0:4c:d3:3b:23:77:80:b7:e1:53:99:
         69:73:68:2c:57:28:a1:c9:4a:cf:0f:fd:2e:ef:5f:8a:55:31:
         a9:b3:d4:4a:ab:8d:0d:58:ca:9c:de:b7:78:91:47:cd:66:21:
         fd:ea:8d:77:8e:73:fd:c2:1a:7c:62:57:77:a7:e5:9c:e6:62:
         b7:88:42:2f:37:d7:ab:f9:9f:60:53:5d:f5:ec:7f:06:bd:a6:
         22:5e:0f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:19 2025 by rpki-client