Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0acfd44b-8d22-33b3-837f-3113f92bf915.roa
File:                     0acfd44b-8d22-33b3-837f-3113f92bf915.roa (raw, json)
Hash identifier:          JRHm1hAnzPzwgbw0/GpgN0kyd1Y8fSnm6OiLIXirON8=
Subject key identifier:   2E:D3:FD:64:45:B7:B0:CF:5F:C7:26:8A:74:36:92:A4:92:09:9D:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDA5EF0D4AEA5B66EFDD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0acfd44b-8d22-33b3-837f-3113f92bf915.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:a5:ef:0d:4a:ea:5b:66:ef:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bf5c7951-c5a1-4b52-b415-a396bc915b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e8:f7:b3:9c:89:96:8c:89:ba:c7:ae:2f:13:
                    f3:7f:68:52:5b:30:f9:5e:4b:c8:4b:f9:cb:d0:42:
                    a5:bd:df:bb:94:18:f2:e9:da:12:87:ef:b8:0d:b3:
                    14:2a:b6:61:09:6d:ec:ea:07:87:ef:ae:eb:ee:5d:
                    ed:f3:39:dc:e3:d1:ab:41:2e:65:ee:db:4b:a7:d1:
                    f0:53:36:c1:e8:41:1d:66:ef:f1:6f:96:59:6f:b8:
                    29:7f:83:e9:7c:de:4a:5e:01:20:1c:6b:a8:90:8b:
                    7a:d8:a6:57:cd:1b:19:cf:35:24:6a:84:c3:72:75:
                    9a:1f:a1:1d:55:35:b3:63:74:5e:36:a2:f8:26:c5:
                    b5:bd:06:10:a4:49:91:20:ab:dc:a7:2c:b1:1a:03:
                    43:97:c4:2a:b7:bc:56:09:68:aa:0e:fb:7e:19:cf:
                    a2:15:69:d9:30:dc:57:2f:8e:eb:24:37:cc:b2:52:
                    87:46:75:69:bb:c2:b7:d0:20:fe:51:00:63:7c:0e:
                    a8:f8:5a:b4:e5:09:a4:74:9a:a7:16:b9:cc:53:3a:
                    e3:b9:80:d5:27:a2:a6:cc:9e:3b:2a:3f:d2:92:85:
                    fb:30:e1:dc:59:f9:f8:46:9e:32:e7:1f:16:25:fa:
                    76:05:af:e8:79:bb:a5:f9:81:96:38:70:c1:20:e3:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D3:FD:64:45:B7:B0:CF:5F:C7:26:8A:74:36:92:A4:92:09:9D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0acfd44b-8d22-33b3-837f-3113f92bf915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:66:a1:cb:8f:b8:54:c3:11:ff:a9:b0:40:6c:98:1e:f5:fc:
         7e:68:1c:e1:ca:ed:74:3c:e7:0d:d0:77:d3:41:f8:d7:79:0c:
         28:e8:70:c9:12:ae:11:8e:7b:a8:9a:0a:56:ab:7a:46:b1:72:
         19:03:82:b0:53:f6:9e:02:d4:0b:a3:b0:3e:f3:a1:f3:2a:32:
         1e:36:ad:6e:08:65:9b:a0:68:70:98:da:a6:a2:93:9d:c9:e9:
         2a:6c:f4:63:56:48:9c:8b:ae:22:42:61:b6:82:02:61:dd:d2:
         27:4b:29:4d:eb:ec:40:ad:5f:cf:1e:64:67:3b:bc:6b:59:16:
         38:66:88:43:d4:6d:ed:7e:63:70:06:fa:3b:e5:47:d7:14:46:
         71:6f:2a:7f:58:54:a7:58:c1:68:bc:94:79:98:6e:21:59:f3:
         df:5a:9f:55:f1:f8:20:83:f1:b4:1a:92:8a:40:93:6d:23:65:
         57:16:7d:e8:2e:83:f0:f7:07:4c:36:15:fb:2d:f6:ed:60:16:
         d9:31:82:18:ed:e5:92:9e:71:a1:4e:4c:77:be:87:19:3e:7e:
         89:c8:7d:63:95:ce:78:d1:cc:08:87:e5:35:91:59:93:c8:9f:
         0a:51:40:7b:ad:41:0c:4c:24:00:71:0d:0c:77:ff:b7:66:64:
         52:92:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:05 2025 by rpki-client