Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa1e98b5-a785-39db-8caa-1cc6249bbb54.roa
File:                     fa1e98b5-a785-39db-8caa-1cc6249bbb54.roa (raw, json)
Hash identifier:          YffmwvikidJYJHukxEKRA3eZ8GB+ooL2PHpiT1iCb7Y=
Subject key identifier:   88:4E:CC:6C:4B:9E:E3:AF:8F:F7:4C:22:CA:3B:EF:7F:C3:76:A9:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B87FC3969888F2553D20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa1e98b5-a785-39db-8caa-1cc6249bbb54.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.107.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b8:7f:c3:96:98:88:f2:55:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=15fe5451-6483-43c7-b430-443bc0bb42f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:ce:a7:b0:d7:ab:54:06:3c:f8:58:55:14:
                    01:bc:30:ad:9f:a5:25:15:53:68:b2:86:a7:d1:fa:
                    6d:db:2f:72:54:54:26:b8:ca:54:28:5e:a9:f9:db:
                    2a:bc:11:74:a7:9b:02:47:a7:8f:8a:66:c4:7f:b4:
                    67:07:29:5a:a2:c5:29:4c:19:85:61:35:73:a4:04:
                    1b:d6:fa:b5:f8:71:96:7c:0f:bd:0d:39:05:6d:06:
                    41:61:bf:71:7b:58:3c:5c:09:bc:4f:2a:a1:96:31:
                    cc:3f:33:ac:60:b5:c2:0f:cb:69:e8:9f:76:82:1d:
                    fe:0a:3d:67:8f:1e:29:de:b8:40:83:e3:2d:3d:c1:
                    77:b8:73:6a:07:e4:9c:d2:ef:c9:1b:26:02:15:58:
                    52:3c:0e:b9:92:cf:73:59:e8:65:4b:e3:05:1f:d0:
                    34:e8:cf:b9:bf:5e:cf:0e:79:ac:9c:fc:50:63:e5:
                    22:5f:20:55:aa:f7:15:49:70:34:23:e2:ba:63:ec:
                    9a:e6:ea:69:e4:d1:b2:37:64:26:4b:4f:2f:f2:3d:
                    3c:d8:76:0f:37:a1:1e:2a:bb:3b:b7:29:9b:b5:f0:
                    69:43:bc:db:ec:bc:a3:48:be:21:18:cc:e2:ca:29:
                    7c:82:44:33:ad:6f:27:42:c0:69:c5:36:9d:be:ba:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:CC:6C:4B:9E:E3:AF:8F:F7:4C:22:CA:3B:EF:7F:C3:76:A9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa1e98b5-a785-39db-8caa-1cc6249bbb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9b:c0:ee:c8:88:b6:51:eb:c5:32:24:ba:ec:ee:5f:e7:33:
         d4:7e:db:cf:65:c9:78:ad:ee:89:55:99:85:0a:19:5a:b5:8e:
         e5:a6:70:ef:3f:d7:ae:31:d1:c7:97:85:77:06:7e:a9:8d:8f:
         98:a8:c2:da:1d:df:14:27:89:74:c7:a4:e3:74:02:31:fa:05:
         c8:41:28:09:37:c9:c8:ee:03:e9:34:3d:f6:47:78:6b:e3:91:
         c6:97:57:22:1b:57:73:fe:03:d2:7c:29:c5:64:68:d3:7b:8c:
         e4:30:7a:95:13:b3:c9:6a:b2:c0:00:76:d4:ba:b6:78:8b:ba:
         7b:1d:b6:ce:b4:f3:ab:f6:8a:23:bb:8a:21:20:df:56:c8:66:
         f1:1e:2a:9c:84:fb:08:36:37:c4:93:d6:d7:7e:2d:5c:77:85:
         ae:f0:4a:42:90:3f:8f:0f:a1:af:cc:c6:d2:4d:82:74:c6:df:
         e7:9f:41:86:d7:3f:54:90:8f:84:5a:40:3b:c2:3b:cb:a1:d8:
         6e:b1:9c:88:b6:3e:d2:90:16:14:84:27:8a:c1:fe:c0:01:f3:
         57:03:c9:09:c8:6c:88:1d:1c:1e:60:3c:dd:83:31:38:c4:e7:
         0d:2e:e3:15:17:3b:57:c2:d4:c0:a7:9d:0f:8f:7c:da:d1:04:
         bf:dc:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:39 2025 by rpki-client