Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cadc6614-a806-34e6-9b66-a36566a7bf65.roa
File:                     cadc6614-a806-34e6-9b66-a36566a7bf65.roa (raw, json)
Hash identifier:          cc/PVPw12Pu11/HXb55Kzh6Hr4JMm2M9CCZLeXQwibs=
Subject key identifier:   66:1B:CE:5F:B3:46:74:AA:E1:DB:E7:BE:8C:C7:4D:7E:12:8C:B3:CC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581052EA6C5444F3D236900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cadc6614-a806-34e6-9b66-a36566a7bf65.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:05:2e:a6:c5:44:4f:3d:23:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6f3647d5-64d1-412c-8a2f-44bd9d6ae992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:c2:b8:94:3a:f6:95:d3:4c:e0:53:45:f1:
                    a8:c0:3d:9f:b9:e6:b8:cf:9d:d9:e5:c5:08:be:db:
                    2a:05:75:ee:13:7d:39:88:57:7e:1a:de:28:3c:cf:
                    0f:a9:ad:c9:1b:cc:d0:2e:95:e9:ab:89:31:5e:4b:
                    a2:02:45:8c:2b:6c:f1:5b:b1:eb:c6:6a:a8:5b:96:
                    c5:a0:11:b3:73:e2:78:9f:6b:c9:68:4b:9c:d3:ea:
                    bb:50:c4:6a:5f:08:bd:13:3c:c3:f5:96:4c:65:fa:
                    33:6d:53:2f:55:c4:f3:37:98:c4:e2:44:20:ff:2b:
                    62:eb:24:69:cb:43:c7:4d:aa:6a:31:42:36:d6:16:
                    33:82:f0:d3:ec:5e:29:5d:7e:70:98:c3:9a:d3:c8:
                    44:cb:63:09:a5:e9:61:4f:27:ce:1a:18:e5:66:de:
                    1c:22:22:45:90:6c:a7:fa:cf:c4:41:df:a7:ac:af:
                    10:19:9a:a9:ad:7d:63:9c:96:13:9c:a7:9a:3b:81:
                    4f:96:e7:16:22:8c:57:1c:1d:06:93:a3:45:49:7e:
                    09:2d:84:44:31:f5:cb:7a:71:6a:48:fe:8d:cc:d7:
                    c2:62:27:84:ce:79:fd:b9:57:c9:b7:00:f8:0c:d9:
                    be:01:f9:d9:49:cd:f9:53:f7:8b:6e:77:0e:6f:06:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1B:CE:5F:B3:46:74:AA:E1:DB:E7:BE:8C:C7:4D:7E:12:8C:B3:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cadc6614-a806-34e6-9b66-a36566a7bf65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:50:f4:e7:4c:02:fb:97:75:91:6d:7b:0c:90:7b:1d:3c:
         dc:31:b8:b2:7a:a2:76:22:fa:4f:a8:c6:10:79:14:75:d8:27:
         32:8e:ac:70:f1:99:e0:19:56:4e:5f:c3:b3:70:64:b1:20:12:
         58:d9:b3:fc:a1:28:fd:4f:e2:e5:7b:f3:d5:fc:d2:b0:d0:cb:
         e1:7a:da:3a:84:ae:51:1d:eb:3f:d9:6b:a4:81:26:32:80:ec:
         f2:38:f8:d1:89:65:42:e0:dc:3d:cf:5a:cf:b7:d1:6a:a5:65:
         c3:6e:2e:e0:5e:33:9d:05:e5:17:b2:f4:af:f0:2f:d3:42:0d:
         c1:cd:ce:88:49:2d:9f:42:6e:51:b1:13:7c:df:2c:0c:c7:3d:
         29:d4:4b:a0:b9:83:6e:ed:10:30:3d:87:2f:89:bb:29:d1:3d:
         34:a3:ca:f9:8d:e8:8a:29:bf:84:f5:f6:dd:a8:db:71:1a:40:
         39:13:32:56:4f:4f:5c:b9:5d:bf:c7:19:f6:98:15:ee:20:3b:
         9a:e3:0b:88:e7:f1:6b:3b:5b:e9:33:2c:9b:9f:f8:7c:7c:41:
         93:54:d2:48:ba:42:db:69:2a:6e:58:b0:73:ba:6f:c6:14:45:
         80:8a:3c:f4:1e:99:8b:98:65:08:9f:37:c2:d2:fa:dd:cf:ae:
         d2:14:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:06 2025 by rpki-client