Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07f1246d-ce11-3da6-be44-d1ab394aea9f.roa
File:                     07f1246d-ce11-3da6-be44-d1ab394aea9f.roa (raw, json)
Hash identifier:          dDQqq1+69gc/9VoWZsfjp5cYazx5MNL13lhGhkE+m3k=
Subject key identifier:   0A:95:68:67:20:7B:67:47:F0:B3:30:2F:B0:C8:B9:63:E7:8E:1B:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDAB36838D5A0AA356D080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07f1246d-ce11-3da6-be44-d1ab394aea9f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:ab:36:83:8d:5a:0a:a3:56:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1708aa1c-3d49-4e84-9c1a-1604fc5f79ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:14:9e:ea:4c:80:81:a9:53:f0:01:fe:29:
                    ff:f5:c7:31:dc:d3:5f:48:9a:c8:d6:34:2a:77:73:
                    74:37:7c:3e:b7:13:f0:49:67:cf:00:31:f1:ac:55:
                    fa:5c:3e:88:85:8a:85:cd:1b:2c:99:8f:87:cf:60:
                    db:e7:24:68:3e:5a:64:13:0c:f7:1a:11:ca:f3:5e:
                    07:b6:04:af:bb:7a:9d:03:d4:69:8c:c0:bd:d4:c8:
                    2a:bb:2f:e6:cd:ec:90:3f:64:ce:b8:ce:d4:1d:0a:
                    0a:6d:d5:31:9b:d2:45:51:8e:ca:22:ee:d6:61:ec:
                    35:85:ee:81:1c:82:75:2f:40:d5:aa:49:7f:2c:8d:
                    f2:a9:5a:f7:32:de:6f:3b:82:e7:14:3d:8c:75:ad:
                    12:b9:69:75:a5:58:94:08:d6:3d:5d:e7:3b:71:5a:
                    4a:98:e4:82:4b:34:c6:bb:be:1b:fe:b6:70:eb:68:
                    69:ea:92:00:cd:89:f8:be:40:16:23:7e:c1:c6:82:
                    3d:7f:28:7a:60:b5:ed:30:9b:7b:2c:e5:5a:18:42:
                    a2:34:47:16:d6:ba:3c:03:f5:1f:2a:6f:77:2f:9a:
                    4b:c7:5d:69:68:e8:a1:eb:36:30:f4:fc:6a:62:84:
                    7c:ca:60:cd:ae:f7:8e:79:7a:e4:42:86:dd:69:39:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:95:68:67:20:7B:67:47:F0:B3:30:2F:B0:C8:B9:63:E7:8E:1B:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07f1246d-ce11-3da6-be44-d1ab394aea9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:96:de:40:d8:b9:8e:8f:9a:c0:a7:40:e3:a7:7f:8f:fc:6b:
         83:d9:3e:bf:91:3b:14:71:cd:fa:ff:89:5b:e4:4f:89:57:91:
         da:1f:4e:bd:79:8b:36:7f:44:32:93:5b:8c:e0:39:2c:55:e8:
         c7:f7:9a:61:c0:58:5e:95:53:64:6c:49:89:59:46:29:04:a0:
         31:6f:07:39:3f:f0:bf:ee:4b:8d:56:90:d5:ae:32:39:4c:ec:
         b1:3b:dd:25:65:8b:40:36:95:fb:bb:9b:b6:05:ce:00:7e:3d:
         56:09:df:3c:3b:cc:60:c8:38:ce:fc:ec:e5:3d:27:e4:da:27:
         df:09:9d:90:7e:01:71:f9:b1:4a:8d:ad:b9:15:fb:04:d0:b5:
         c4:d0:8b:a6:ad:80:ef:4e:d4:d1:c9:5f:a7:e5:7f:1e:9c:af:
         6a:3e:fd:45:9d:a6:64:3f:e2:ce:73:06:0c:11:19:45:77:b3:
         fe:19:64:41:ca:ad:84:22:e7:a4:ad:91:66:b1:a1:6d:a4:5c:
         cd:5d:c3:cb:5c:1f:61:8f:fa:be:a3:b7:ed:0b:e5:a4:85:d1:
         05:34:5e:4f:d0:8e:90:9f:2b:1b:46:b8:95:1f:ae:74:f2:04:
         e1:77:b6:d5:84:78:e0:e6:cd:18:93:55:dd:b6:32:65:d6:94:
         6f:54:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:44 2025 by rpki-client