Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17d9d2aa-cd63-33bc-8f2e-0ccfe3d3d9aa.roa
File:                     17d9d2aa-cd63-33bc-8f2e-0ccfe3d3d9aa.roa (raw, json)
Hash identifier:          Ovqsr55p1LKaWs+gXKsIv0QfqYe6pr7hYsNgilsCJGs=
Subject key identifier:   A5:EB:04:43:65:AC:B8:A2:98:CE:DF:18:19:D3:30:58:EB:8B:A3:49
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCE160AC094819C29D8A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17d9d2aa-cd63-33bc-8f2e-0ccfe3d3d9aa.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:e1:60:ac:09:48:19:c2:9d:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3c5af14c-dc2e-4065-8c7e-0cc480264a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:8e:6d:6e:cf:b6:fb:a1:f4:c4:ea:a3:75:
                    53:0c:73:05:a9:05:42:ac:85:f8:2a:0f:c0:77:bd:
                    5a:41:8f:db:82:fc:51:9e:88:e9:1a:ef:63:8c:e2:
                    04:73:e0:31:70:75:cd:f8:e1:e6:0c:a4:1b:5f:45:
                    72:2c:6d:50:c1:38:d5:fa:0c:e6:57:05:46:78:84:
                    2a:03:d4:a5:33:7a:de:fe:05:22:a9:cb:a2:fe:1f:
                    85:2c:1e:90:9d:b4:83:ff:85:a6:62:c8:86:d0:be:
                    1d:46:79:db:40:49:9f:05:cc:b6:78:e4:c8:a6:f7:
                    a4:50:8b:b7:88:93:52:03:b8:ae:2f:6b:24:82:59:
                    33:41:8e:81:d4:29:62:b8:4b:7e:d9:73:65:89:54:
                    4e:8f:ac:fb:3e:fc:9b:e4:64:10:bf:d0:f9:03:27:
                    3f:a9:fd:ae:77:4a:0e:f3:f7:2b:bb:d7:26:d8:b6:
                    d9:c9:a6:1a:a0:f4:c7:95:96:77:06:65:6d:2a:7f:
                    fd:39:45:a7:9e:de:c3:bb:d8:8b:19:7a:9c:e0:f3:
                    e8:9f:92:2f:7c:3c:7f:df:d6:7a:5c:6e:c1:e4:d3:
                    92:ed:c5:5d:9a:01:fc:6d:73:ed:db:d8:91:8c:c3:
                    80:47:68:94:93:25:09:6d:3f:b3:10:92:25:8a:76:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EB:04:43:65:AC:B8:A2:98:CE:DF:18:19:D3:30:58:EB:8B:A3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17d9d2aa-cd63-33bc-8f2e-0ccfe3d3d9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:6a:73:57:ec:dc:dc:47:f6:35:47:5a:03:1f:6e:f3:0a:
         6d:2b:07:22:c0:a2:b4:dd:fe:83:65:ad:50:7c:38:f9:8e:28:
         21:2d:55:91:93:48:6c:d8:b4:fa:ff:42:05:5a:d4:dc:6e:6c:
         01:64:2e:89:b1:cc:0d:65:89:ae:5c:d9:d0:07:f9:89:18:b9:
         a6:58:53:c8:64:8e:59:47:8b:b5:6b:79:f4:4a:af:3a:21:4d:
         d4:d1:05:b8:14:11:42:64:23:67:7e:c4:83:5b:da:f7:ae:a2:
         9a:a1:e5:18:58:55:a7:ba:99:7b:44:b6:6d:48:bb:bb:b3:72:
         f7:bb:63:b6:76:69:49:65:28:87:7c:05:27:7a:88:b8:96:c4:
         7f:c8:bb:dd:ef:7c:35:13:8f:7a:3a:02:a0:99:76:4a:fe:95:
         59:b9:da:3a:95:a1:c7:20:b1:65:d4:f2:6c:7e:59:00:36:84:
         3c:e3:aa:9a:2b:5d:ad:83:f1:04:bb:b8:ad:8f:3f:af:96:08:
         7a:15:56:90:69:8f:67:61:32:a5:eb:09:80:9b:3b:3c:0a:79:
         6d:ed:5c:c0:39:02:0e:2b:00:02:8e:0f:2a:58:04:70:0e:60:
         10:2e:01:99:db:b4:f9:40:96:af:b5:dd:25:ba:66:8e:cd:e1:
         78:88:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:47 2025 by rpki-client