Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab29adfb-861f-3360-84d1-eed3d3535203.roa
File:                     ab29adfb-861f-3360-84d1-eed3d3535203.roa (raw, json)
Hash identifier:          b/oaBXrl1Q3aKHbq/FDJuoZvmVKf3goVXcSs7BOXs8c=
Subject key identifier:   FE:2A:4D:48:FA:1C:70:85:D8:73:05:C7:F4:96:40:7C:38:49:A9:77
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006677F572A8C481E9150A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab29adfb-861f-3360-84d1-eed3d3535203.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        75.112.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:67:7f:57:2a:8c:48:1e:91:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=1bc0d79a-a65c-4aca-974c-5dfacbfabda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:15:88:88:65:26:bc:ab:50:3d:e5:62:27:
                    58:6b:23:98:81:db:9c:16:dc:ec:f7:44:ee:60:33:
                    b4:c3:66:4d:d4:3d:e1:5e:d8:92:25:44:1e:a7:bf:
                    cf:ca:b1:f8:d7:42:40:78:e4:62:c6:0a:43:4d:7c:
                    6a:b0:b9:ce:c0:1a:10:7b:68:80:8a:9c:7b:d0:dc:
                    db:b6:fd:cb:b1:e8:6e:cb:ea:d7:a7:c6:25:c7:12:
                    48:1e:fc:8c:5f:bb:71:d1:b0:4e:a5:0a:a5:26:e1:
                    80:2c:0b:c4:af:8e:f6:4c:2f:fb:bf:cd:71:33:dc:
                    4d:a9:f2:00:b3:c5:ca:e6:18:af:0e:02:93:51:5d:
                    fc:2c:b2:fb:c0:ce:33:99:8f:01:28:bd:5f:24:f6:
                    fe:66:60:c0:2e:1a:9e:f6:1a:1d:7e:45:6f:85:ce:
                    4b:c9:fa:f5:09:60:4e:03:08:d8:37:6e:66:53:a2:
                    d2:ca:30:29:fc:3b:04:e8:61:47:66:ee:7b:70:86:
                    4e:fd:22:a6:66:22:11:41:9c:82:3c:8a:a4:a2:c5:
                    4a:24:1f:32:5d:14:b4:95:18:09:c4:7e:36:bd:82:
                    7b:15:a8:85:e3:49:ce:51:a6:f2:5e:3f:fc:65:af:
                    81:a5:58:a1:65:e7:11:b0:b4:d0:4e:f8:b3:c6:a9:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2A:4D:48:FA:1C:70:85:D8:73:05:C7:F4:96:40:7C:38:49:A9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab29adfb-861f-3360-84d1-eed3d3535203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ea:77:a2:1b:f5:c4:4b:36:92:ea:43:50:1a:d2:0a:82:f9:
         65:30:cd:8e:1a:68:7a:02:d4:26:36:2a:73:6e:80:2b:cb:a4:
         ad:dc:ae:b1:60:cb:94:d3:6d:bc:e2:6f:3c:00:ed:5a:32:89:
         27:9d:3b:d8:04:fc:17:e5:68:84:3d:e2:d0:c2:92:b3:04:da:
         6a:a3:20:97:94:b1:d0:15:ee:dc:ec:af:36:f6:a1:6a:a9:6d:
         82:f9:eb:cb:09:e4:39:91:4a:53:0e:dc:48:7b:52:35:fa:40:
         05:77:2d:36:45:ef:54:ba:46:33:66:a5:cb:74:09:9c:89:3d:
         eb:26:67:44:65:a4:12:f1:12:42:a2:ef:6e:c8:65:fa:af:03:
         f7:31:06:0d:5e:31:f1:8a:4b:f3:bb:6a:3a:91:3e:00:3b:b0:
         47:a4:5f:dc:2b:d6:00:57:f6:cd:f1:ac:4d:9e:79:bc:10:b7:
         5e:f1:03:d2:04:76:92:2e:10:08:b5:38:84:2e:66:31:ad:b5:
         2c:24:f9:bf:69:ee:f4:0b:45:c8:f2:e9:78:e4:5f:39:3e:16:
         4a:60:6a:d7:3c:46:e8:a7:7b:0e:3f:c2:1d:23:34:d1:83:c8:
         b2:4d:70:0d:60:7d:f0:5b:fc:ef:49:38:9f:1e:2b:88:fc:06:
         8c:cd:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:15:15 2025 by rpki-client