Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec6781b-e342-33f9-bf00-475999ffdb6e.roa
File:                     bec6781b-e342-33f9-bf00-475999ffdb6e.roa (raw, json)
Hash identifier:          d2rClu9gYzQi+faA8YzVsyA9hqQogVEu3EB4M3wnyTQ=
Subject key identifier:   57:84:2C:58:AB:6B:02:E1:EC:4C:7C:70:87:BF:C7:A2:6B:29:2A:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5812F38FF4174A9B6E2BE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec6781b-e342-33f9-bf00-475999ffdb6e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.107.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:2f:38:ff:41:74:a9:b6:e2:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b77469d4-8313-4e7a-90a6-5a47f97cb8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:66:68:67:06:b5:65:9e:80:74:60:4d:65:
                    2f:61:a5:3f:07:85:a7:94:f7:10:cd:3d:ad:b1:88:
                    8c:78:82:e5:8f:01:f2:13:31:50:a4:b8:c7:ec:53:
                    c2:4d:08:e9:83:2a:63:ce:4a:a6:73:dc:73:ac:3d:
                    42:c4:a2:ae:b9:1f:1f:d4:f6:53:27:d3:7d:24:bb:
                    d1:42:cb:a6:61:c8:3c:9a:0e:b6:ab:71:29:79:e5:
                    f4:01:5c:4c:2d:d0:fd:cf:b9:76:7c:21:89:7a:81:
                    46:29:7e:28:d3:9c:6b:a7:ff:ce:34:a0:00:8d:66:
                    d6:ad:c9:2c:e4:ee:21:60:03:f7:d3:a6:02:c3:07:
                    88:36:1d:04:96:3b:76:13:4b:93:39:71:05:e0:0e:
                    0a:cc:76:03:ea:0e:30:cf:7c:dc:09:49:55:08:12:
                    01:05:f8:ba:6b:43:2f:f1:a2:c0:92:1c:cf:41:19:
                    a5:1b:91:36:3b:8f:6f:45:3b:80:33:f6:c9:bc:53:
                    9d:41:9c:78:b9:df:1a:2e:b6:d1:ba:5f:14:cf:58:
                    bc:95:31:8b:5d:56:1a:69:e6:28:41:a8:5a:2b:80:
                    f0:e8:34:b5:00:53:e9:7f:79:c3:27:64:0e:ca:35:
                    7d:b6:ec:38:70:26:5b:fe:9b:5f:9d:d5:3d:fd:e2:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:84:2C:58:AB:6B:02:E1:EC:4C:7C:70:87:BF:C7:A2:6B:29:2A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec6781b-e342-33f9-bf00-475999ffdb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:40:da:11:c3:0f:e6:7b:ff:7d:0a:ac:bf:41:a1:fa:ec:4e:
         e1:5e:b2:1b:3b:f9:a1:06:9f:98:1c:c3:25:b7:f2:d9:c4:ca:
         9a:24:e6:ca:7c:5c:4a:98:b5:5e:ab:de:e8:82:f5:11:42:b9:
         d8:de:f0:85:9f:66:76:89:f9:30:61:b2:5d:21:ae:60:d7:11:
         f3:56:bd:96:12:3f:18:e3:a3:62:cc:99:94:7d:31:3a:0b:c9:
         3c:26:56:bb:d0:0a:94:43:4b:1e:27:c8:ba:66:6b:f2:14:17:
         1d:99:92:8e:ac:d9:f1:51:68:b5:08:67:88:74:37:79:50:ea:
         23:fe:95:69:2a:7b:4c:e2:4f:f8:43:85:c3:8a:74:65:1e:a6:
         d2:61:8b:9e:00:c1:1f:26:48:30:67:03:45:3d:44:93:7c:a2:
         5b:cb:58:dc:d1:6b:cf:54:bb:af:cf:0c:36:c7:56:e6:17:92:
         df:2a:4e:f7:f6:09:23:e5:f2:88:db:cc:1d:6e:38:ff:12:f8:
         11:df:79:46:46:47:d2:d8:e4:3e:e5:4d:6e:06:1d:10:9b:70:
         c3:d9:b1:65:66:ee:cd:79:e3:c8:7b:aa:65:4a:13:09:62:3d:
         a6:a3:61:ee:ca:4c:02:42:d2:4b:bb:87:1f:81:0d:fd:51:13:
         23:28:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:43 2025 by rpki-client