Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf49871c-2613-3dc8-b107-a461b538fe8c.roa
File:                     cf49871c-2613-3dc8-b107-a461b538fe8c.roa (raw, json)
Hash identifier:          pgKGg5/1XmhWCi06GcjT9nOkaezKrmUJk1nTsIXjha0=
Subject key identifier:   BA:BE:8F:E7:C8:BE:A4:24:31:AD:B8:7D:BD:DA:9E:27:B5:5A:B8:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C580FCB49F054B0B6D635C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf49871c-2613-3dc8-b107-a461b538fe8c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     40306
IP address blocks:        75.104.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:fc:b4:9f:05:4b:0b:6d:63:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d59ac63a-34c0-4859-b0b0-64d7a7cace21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:a2:b7:24:83:0e:ba:8b:2d:a8:82:1c:9a:
                    1b:36:20:7d:23:2c:40:c7:4d:82:5f:74:32:c4:37:
                    76:88:13:7a:00:6a:8e:19:35:5d:14:c6:7e:0c:73:
                    8e:6b:de:2e:dc:0f:06:e1:7e:b1:a4:4e:d3:82:65:
                    5b:0d:9b:63:c4:0c:6e:8e:7f:2b:c0:4d:96:cc:ab:
                    dd:bb:23:80:e1:fc:a2:eb:0f:53:59:b4:a1:28:42:
                    03:c2:7f:a0:ef:97:82:9f:01:e0:02:3d:56:ec:51:
                    74:69:b6:5c:f9:34:00:33:71:12:5b:82:f3:e1:ec:
                    c7:23:ff:86:db:33:ec:76:0e:11:77:87:52:8e:53:
                    9f:7f:49:76:9b:c7:46:48:60:8c:2a:75:f9:c6:f9:
                    45:07:4c:8d:a7:ef:78:8a:72:13:04:6e:a9:c4:46:
                    a7:8a:52:14:5f:a1:ca:7e:31:44:06:1c:43:73:12:
                    92:8d:4c:31:eb:c3:d5:1e:e0:44:50:e1:03:2f:8c:
                    d7:9f:a3:e4:3f:08:a6:ca:28:95:4e:ec:f8:aa:11:
                    60:7d:81:2d:ba:76:c5:90:52:f9:23:07:b9:ed:a0:
                    bd:ba:bd:e7:da:af:3b:c7:3d:9e:e0:63:e4:aa:04:
                    0f:7a:96:a9:e6:51:f6:b5:15:2f:a1:ad:ae:a0:3d:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BE:8F:E7:C8:BE:A4:24:31:AD:B8:7D:BD:DA:9E:27:B5:5A:B8:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf49871c-2613-3dc8-b107-a461b538fe8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:08:6b:af:ae:ee:27:7c:db:06:4e:04:7e:0f:94:c8:d1:c5:
         b7:e7:bd:f6:85:06:5f:89:3a:ea:76:6d:ac:81:e2:93:3c:a0:
         9e:48:5a:8c:b5:52:d7:d2:f6:ed:9f:9f:43:9a:ec:44:14:e5:
         c4:44:4f:cd:b3:d2:ff:61:0f:c7:14:5a:70:82:b6:ca:a5:e7:
         ac:18:3b:74:5e:92:a7:4e:56:73:10:c9:91:d4:67:21:a3:95:
         6b:f8:04:2f:a4:43:61:25:c1:d5:8b:29:f2:fd:ac:66:76:d5:
         b5:6c:c3:04:18:b4:46:68:3c:93:af:3b:d4:04:99:65:12:00:
         f4:e5:43:41:81:62:0b:94:1c:e4:6a:6a:a1:bc:49:63:c8:f9:
         d0:72:ee:5a:9a:9b:ed:f9:8a:46:f8:b4:0a:7a:74:1e:16:49:
         49:3b:ea:64:9c:13:0b:39:b2:73:61:f3:94:ec:ab:c1:06:89:
         86:67:18:6d:48:25:88:41:b7:80:87:51:1a:56:6b:33:19:f1:
         32:17:52:fd:87:a4:4c:76:d7:77:d7:83:a3:f0:41:8f:d4:49:
         b3:d1:6f:e8:da:4d:81:84:23:aa:d3:fa:94:23:3a:55:6a:c2:
         5f:d8:ec:a1:ba:2e:77:d7:77:c4:78:cf:71:1c:32:43:b7:69:
         ad:37:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:16 2025 by rpki-client