Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efcc5c07-47c5-3b94-b746-94f7981690fe.roa
File:                     efcc5c07-47c5-3b94-b746-94f7981690fe.roa (raw, json)
Hash identifier:          pB5CDR2d9EuH9/8/Oz9q+nwYyKtJuddKoIGlrZq2GJI=
Subject key identifier:   86:AE:4D:8E:2E:C9:78:BD:3C:27:21:30:23:2B:E3:8F:5F:74:98:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811BCA1CB54D59E7A66B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efcc5c07-47c5-3b94-b746-94f7981690fe.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1b:ca:1c:b5:4d:59:e7:a6:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=14172e79-7922-40e8-ad6a-f6db94d1f230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f5:4d:0f:1a:ed:45:50:aa:7f:5b:18:06:d5:
                    15:e1:6d:8f:48:00:62:7b:49:c2:20:68:82:2e:9d:
                    8e:89:92:98:db:c2:d9:78:f2:93:d8:c4:67:e8:8a:
                    46:0b:77:8a:77:9f:99:3d:80:7c:23:30:35:11:05:
                    8f:ac:8a:02:4e:eb:01:e4:b0:e3:73:8b:27:28:36:
                    25:5b:7c:64:53:69:0d:8c:39:e1:6b:25:3c:3b:39:
                    b1:e0:2a:e9:71:b3:9a:89:c1:55:39:29:94:d6:ff:
                    f0:15:99:17:c4:3f:6d:b0:be:fc:73:05:82:2d:74:
                    57:87:17:b4:16:db:e1:01:8f:86:c9:19:34:3e:95:
                    0e:a8:6b:53:8c:58:14:1b:53:42:9d:76:ec:f8:90:
                    a7:a8:5d:5c:4b:cf:d4:d4:41:34:c9:12:c4:2c:9b:
                    f6:8c:69:50:ad:ab:9f:27:b7:10:fa:03:3d:da:dd:
                    bf:75:fe:55:51:2f:87:dd:98:66:a5:da:88:55:b8:
                    0e:f0:e3:b1:2f:de:38:7d:b3:43:4c:f4:66:e8:e0:
                    8a:fb:6b:4a:d4:5d:21:c5:3b:63:d2:fc:71:b8:85:
                    0d:9b:99:fc:97:13:3b:fd:49:aa:e8:f1:66:e6:34:
                    9f:0f:cf:93:8c:12:be:22:6b:7b:36:54:4f:20:37:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AE:4D:8E:2E:C9:78:BD:3C:27:21:30:23:2B:E3:8F:5F:74:98:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efcc5c07-47c5-3b94-b746-94f7981690fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ae:19:c5:90:7b:89:e9:f8:9d:f6:c2:fb:1b:6f:bb:a8:d9:
         39:7f:be:7c:97:c9:94:45:ad:db:9b:1c:cd:8a:7d:9d:1d:e8:
         4c:af:4d:ee:35:30:7a:0e:ea:74:ed:42:b9:23:f7:d4:0e:4b:
         56:4f:b3:19:34:b5:6a:80:2a:99:7e:db:5a:9f:4e:1b:fa:7f:
         9b:be:31:31:33:79:79:c5:00:a1:5d:31:f9:c8:fc:62:a5:7d:
         98:1b:f3:10:30:cf:49:18:27:dc:41:ba:fb:84:67:00:f3:25:
         6b:d3:c8:82:7f:d8:1a:90:79:23:e2:a8:f6:18:c0:62:27:e2:
         96:72:10:fc:fd:54:f1:48:2c:2c:f1:be:f5:f8:5f:90:70:a2:
         aa:fb:93:a3:f3:22:63:c4:2a:f9:77:ee:ff:92:35:ba:89:08:
         44:08:77:a9:b3:a3:1b:b2:88:36:ae:28:29:19:7c:de:c4:90:
         d7:7a:21:d1:b2:b8:4b:dd:6b:01:b8:51:64:b4:bf:f2:98:b6:
         99:79:02:a2:fb:c7:bf:53:5c:70:07:de:61:80:b4:96:dd:f6:
         3f:47:26:30:ff:30:cc:6c:f7:c4:dc:14:0d:b6:2b:81:82:a8:
         fe:29:0f:87:c9:e4:0e:04:b5:13:5d:02:01:17:12:8a:b6:18:
         5c:76:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:30 2025 by rpki-client