Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecd51dba-c0ae-3b9d-ba96-7507829bbdd9.roa
File:                     ecd51dba-c0ae-3b9d-ba96-7507829bbdd9.roa (raw, json)
Hash identifier:          6vsSZYUW05AWyII1SJsam2XnUkz+f1Eab+WpSinGDeM=
Subject key identifier:   E5:73:FD:58:EC:33:0D:FC:61:70:45:F1:E0:42:3F:3C:90:CB:A1:72
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581A6BF589EF26F6C84A7C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecd51dba-c0ae-3b9d-ba96-7507829bbdd9.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.104.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:a6:bf:58:9e:f2:6f:6c:84:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b0ba392e-ec7c-4898-8bb6-68e892300a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:af:85:ae:e8:66:cc:32:e0:e8:ed:0b:03:
                    d5:55:ab:69:85:51:a3:a8:4b:11:4b:8c:d0:21:7b:
                    f4:36:e4:4f:ce:b6:2e:cb:50:94:14:81:82:d2:62:
                    a0:45:cf:23:66:62:48:10:cc:fc:09:a1:29:36:d2:
                    02:92:1f:4d:d7:dc:19:0d:e5:8a:30:ce:94:8d:72:
                    80:d5:f7:32:cb:18:d8:5d:d1:bf:96:b6:0c:49:8d:
                    f5:cf:83:60:85:58:33:d5:b3:c4:df:ef:b8:ab:60:
                    cd:a1:6a:40:a9:ef:8a:01:3f:f9:35:f6:ed:ea:56:
                    be:93:fc:1a:04:fc:99:20:d5:e2:0f:1f:78:2c:a6:
                    fe:66:27:31:d4:ac:ea:da:f6:e7:5e:72:b4:f3:8b:
                    77:2f:1a:92:47:91:39:b8:7a:1b:d3:f0:7c:47:e2:
                    41:00:10:2b:fb:fc:e1:92:87:3a:0a:ce:6b:90:62:
                    04:b0:8e:24:bf:95:08:f5:5f:9a:60:d1:b4:33:40:
                    c6:2b:ae:d8:84:92:eb:e0:8c:e4:5f:e0:53:fc:2f:
                    07:1f:6d:bb:d1:68:e1:ee:2b:79:ec:52:be:65:78:
                    0a:88:70:69:23:f6:e1:e5:f9:56:9b:eb:0e:9e:6c:
                    66:58:f9:14:48:fe:89:35:53:c3:78:ce:6e:25:48:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:73:FD:58:EC:33:0D:FC:61:70:45:F1:E0:42:3F:3C:90:CB:A1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecd51dba-c0ae-3b9d-ba96-7507829bbdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:00:8d:ed:02:7c:63:af:e1:54:ef:52:5c:80:5c:ad:2c:2d:
         a3:df:ea:a9:42:1b:60:07:80:5f:93:bd:6e:d1:51:45:2c:02:
         59:b9:71:0d:b2:3f:09:d6:7f:06:b0:fb:c6:d1:aa:f1:e2:71:
         bc:fb:99:d2:1c:7b:fc:9b:94:13:8b:1d:50:d0:b3:e3:3b:3f:
         e7:b3:17:9c:ba:6c:1a:15:ca:9c:b4:c5:5b:dd:c1:ca:85:a3:
         0e:de:1b:c5:01:b3:bd:03:f6:2d:41:35:d0:3e:ae:ac:e2:d4:
         9b:d5:e8:da:61:b7:86:e7:15:47:02:f7:85:8c:9a:cf:e1:eb:
         e3:ea:7c:81:8d:d8:54:d9:8c:d1:db:b0:79:76:68:df:19:4b:
         97:b6:14:35:db:2f:d9:e5:21:71:63:c0:ee:40:b1:90:b6:fa:
         9e:2b:41:ee:fa:84:f6:a3:b7:27:89:23:1f:59:78:49:23:25:
         6f:cf:88:83:39:8f:b8:34:18:b2:75:e5:b1:fa:f2:40:37:62:
         03:10:1b:c9:a9:d3:b7:24:28:6c:69:1f:d7:3d:19:b7:fc:cb:
         00:2a:43:65:78:07:2d:c9:69:d2:34:2b:6f:cd:01:87:f6:2e:
         9f:cb:44:48:e1:da:8c:54:63:5f:99:93:2f:f8:4f:c6:3a:c0:
         74:a0:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:39 2025 by rpki-client