Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138cc82b-b543-3da6-9928-38e24d9ffdf9.roa
File:                     138cc82b-b543-3da6-9928-38e24d9ffdf9.roa (raw, json)
Hash identifier:          CWq6SNS2eUk/Y0hBuK9i2HKcP4he+uhraBAWzVUymQg=
Subject key identifier:   45:DB:30:D0:F6:28:18:9F:10:52:FC:72:CC:9D:90:37:46:57:EF:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9C2FBEE31890DACEF4C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138cc82b-b543-3da6-9928-38e24d9ffdf9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:9c:2f:be:e3:18:90:da:ce:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2ae27286-c7e7-490d-9f56-945976d24537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:3a:b7:37:06:0e:8e:14:fd:a5:41:1f:bf:
                    60:83:29:4e:1f:a7:a3:3d:dc:7f:d9:65:7e:3d:0e:
                    97:a4:aa:56:60:0e:3c:f5:65:19:d2:df:bc:f0:2a:
                    15:ad:9d:88:81:ba:d3:84:e1:55:92:b3:47:15:2b:
                    04:62:64:da:e5:66:61:5b:ba:7f:96:df:10:17:c6:
                    9e:5e:76:fd:13:7f:29:1e:08:b8:d4:12:3b:ed:97:
                    6d:b0:db:0a:11:1d:15:23:bb:ac:0a:82:ef:cb:cd:
                    f4:ad:5d:bd:cb:29:48:19:9c:d9:c6:2f:36:da:d0:
                    5f:47:54:fa:b0:f6:09:95:a1:35:f6:db:d2:44:fe:
                    9d:95:03:0b:65:9e:78:87:a4:79:0c:6c:e9:28:f1:
                    ba:62:76:c3:e6:b2:79:55:23:8f:7b:aa:c8:4a:a3:
                    91:40:af:0d:a7:9e:e8:03:a3:d5:fa:87:57:2c:84:
                    fe:86:7d:0c:d3:47:ad:db:60:66:19:a3:d5:4c:99:
                    a7:b3:32:13:a4:cd:c7:fd:3d:d0:91:7c:a5:16:9b:
                    5b:fb:3b:39:74:26:75:32:b8:68:1b:2e:b2:04:8a:
                    93:3c:79:00:29:82:6a:6f:54:88:2e:5f:66:46:3e:
                    98:ce:51:cc:2e:f5:4d:a7:eb:f8:ce:c6:34:99:82:
                    e1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:30:D0:F6:28:18:9F:10:52:FC:72:CC:9D:90:37:46:57:EF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138cc82b-b543-3da6-9928-38e24d9ffdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:35:a9:40:25:74:79:cc:df:19:33:53:a6:9e:98:3d:e6:13:
         f9:de:a1:4b:af:f8:47:15:34:88:ac:ab:10:75:18:31:88:ac:
         b7:ac:aa:2d:1c:29:5e:83:12:71:12:f6:95:3a:05:e9:ba:8e:
         ae:c1:26:59:45:6c:06:44:63:60:81:3a:c9:dc:0c:fb:fe:eb:
         61:f9:8a:b0:eb:77:d3:1a:bf:57:43:1c:f4:2e:0e:ba:fb:b6:
         df:68:2e:ac:35:b4:95:6b:65:ef:76:97:84:76:f6:9e:2e:36:
         0d:81:de:59:f7:b9:a7:b4:13:3e:94:fc:9a:ee:75:01:f3:46:
         54:b7:70:a7:ce:57:be:0f:c4:fb:ec:77:a5:d9:f8:43:c8:e4:
         09:f2:31:a7:6f:25:1d:6b:dd:a8:27:de:b8:62:8a:87:38:d7:
         b2:d4:c9:1f:47:cd:da:d8:0e:ed:68:a9:85:27:b6:f8:56:7b:
         47:ab:20:1a:8a:21:d2:9c:a6:ad:a4:53:7e:6d:cf:a8:85:3c:
         0e:5c:61:6b:7c:4f:e3:9f:27:e0:af:c1:a3:ae:95:c1:9b:5a:
         b9:18:a4:ed:e5:fc:d7:e3:ee:e3:7d:5d:16:9d:c9:db:06:cb:
         c8:1e:2f:2e:f0:19:5f:35:d8:94:80:2d:21:29:76:4c:a8:fe:
         ab:de:3e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:35 2025 by rpki-client