Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/6f03fa82-80f0-3628-b19c-b094d90e0b7a.roa
File:                     6f03fa82-80f0-3628-b19c-b094d90e0b7a.roa (raw, json)
Hash identifier:          HA9q9zkpfzo+rNqF3dUxblEWjJ96okK9pydeNnFHkTE=
Subject key identifier:   2E:6F:FA:53:C3:B6:B1:CD:4C:1C:3B:59:53:91:97:CA:15:6D:53:3F
Certificate issuer:       /CN=7981ca6b-952a-4908-a513-7b300be24271
Certificate serial:       010D0C9F43285848EC967D8459DCF5A0DF33FA00
Authority key identifier: 89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/6f03fa82-80f0-3628-b19c-b094d90e0b7a.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     396950
IP address blocks:        185.212.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:7d:84:59:dc:f5:a0:df:33:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ca6b-952a-4908-a513-7b300be24271
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=4760ff4d-a1c8-444e-b167-77d98a697242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:6d:94:5d:a1:d6:24:c9:ec:d6:41:50:1c:
                    41:70:9e:6b:23:94:08:56:20:a0:dd:fb:26:fe:4c:
                    79:40:c3:3a:2d:d8:96:39:df:0e:32:36:e2:cb:a5:
                    00:04:c1:07:d6:1c:75:5e:89:03:b2:b6:37:37:92:
                    f8:70:51:b4:18:99:5a:ab:8e:96:54:2f:3b:1b:ec:
                    34:d5:87:17:bc:4c:e5:b2:35:61:23:b9:e8:38:c1:
                    ca:85:d6:74:82:ea:6e:f6:ef:d3:b5:36:c6:7c:cc:
                    c8:8a:77:fe:4f:0d:86:f3:b5:9c:97:0c:a5:51:77:
                    f1:50:45:f3:c7:e2:99:ab:68:b4:95:5a:bd:c2:ad:
                    16:64:d4:0c:2f:92:e1:da:66:60:1f:82:5a:f6:98:
                    59:72:e0:85:57:1d:db:e6:3b:c7:c2:61:fa:a4:c1:
                    bd:53:41:3b:1c:9a:8a:bd:9a:07:50:11:28:42:ac:
                    c2:a0:13:f8:02:ad:ee:67:31:bd:d5:5a:e9:f2:55:
                    64:52:b2:4e:10:88:67:70:d5:92:2d:bd:d6:36:9c:
                    07:60:bf:57:5a:2b:ed:98:51:90:60:4c:ac:63:e4:
                    fd:fa:2b:98:fc:5b:eb:5d:d5:70:60:93:a2:03:8e:
                    b7:dd:de:52:fc:43:3f:c4:1c:66:26:2d:6d:d3:0c:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6F:FA:53:C3:B6:B1:CD:4C:1C:3B:59:53:91:97:CA:15:6D:53:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/6f03fa82-80f0-3628-b19c-b094d90e0b7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl

            X509v3 Authority Key Identifier:
                keyid:89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:71:a8:ed:79:39:8c:1e:7b:bd:68:28:4b:1c:71:82:55:fd:
         8e:ea:23:ac:87:6c:d6:73:b5:b9:31:8d:a4:1d:ae:5e:2b:ae:
         24:00:7b:ca:2b:bf:e9:5a:55:d0:35:0a:05:fe:73:f7:3c:6f:
         f2:76:ed:03:b7:81:c7:32:05:12:6c:bf:31:fb:5d:40:84:32:
         34:66:dd:15:63:5f:92:81:67:9a:66:05:98:6e:27:57:4a:ab:
         d3:8e:d5:e8:62:63:96:ae:12:79:af:8e:cb:f8:6e:84:ec:2c:
         e7:4f:31:b7:15:d8:a7:48:32:ba:9a:48:c5:32:d8:11:f2:50:
         db:6d:3f:07:5c:2a:e1:33:51:3d:a2:7c:3b:a4:5d:1b:30:ef:
         bb:b8:e8:88:e2:b6:0d:c4:c9:62:59:04:c8:c2:f5:8b:d4:68:
         1b:93:71:94:9b:5c:d9:d3:9a:e8:28:59:98:ec:db:9d:87:e3:
         1a:fc:b3:84:8b:b8:93:83:6e:91:9a:29:df:59:0f:42:f0:d9:
         b3:c1:fc:d2:9d:75:92:78:4a:d0:d8:0c:25:25:97:73:6f:71:
         49:1b:3b:42:5e:3d:65:b8:62:aa:d1:f0:97:53:ac:51:65:5f:
         5e:8e:4c:36:73:de:95:09:0d:17:63:62:83:ea:7e:aa:84:99:
         b3:63:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:35 2025 by rpki-client