Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa
File:                     29b59850-75d0-35cc-8677-b593f8d2b02b.roa (raw, json)
Hash identifier:          4bP9qqsN0KeyoJM0IiaqCV8VPjuSPjZZ+mFQ54ZlQks=
Subject key identifier:   01:CC:67:FF:97:15:3A:B7:EB:56:22:2B:A1:24:8C:11:66:59:4A:58
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD98B9727F52690C0CDB00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:98:b9:72:7f:52:69:0c:0c:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6d6ccf11-56b7-4dbc-a3e5-ffbd89a847e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:33:f3:44:45:87:7c:64:1c:5c:1b:8c:05:
                    56:2e:57:7f:f0:5a:0f:d3:41:d9:fe:2c:10:ac:bb:
                    d0:71:79:7c:29:f4:62:c8:d7:12:29:cc:66:29:06:
                    9b:dc:fd:68:3f:3b:b6:6d:b1:8b:4b:bd:a8:c1:0e:
                    20:7c:c6:f4:3d:c3:03:3e:41:30:09:49:6d:b0:3b:
                    fc:35:d9:0a:e4:06:09:07:5d:d0:99:33:71:6c:13:
                    89:69:76:9e:be:c4:fb:b6:e1:8c:33:07:d2:bb:50:
                    76:f8:b7:32:4a:83:e1:de:bb:b8:ad:af:d2:61:10:
                    49:f1:7e:8b:ca:02:79:3b:d9:9f:18:d8:29:e5:cd:
                    db:79:b2:8c:43:a4:a0:b2:54:e8:e9:eb:2c:31:bf:
                    78:0a:99:20:ab:f9:8c:18:aa:ae:e0:07:56:88:b1:
                    84:9b:99:08:0e:fc:79:93:fc:bc:54:b8:2a:43:e0:
                    08:93:0e:7a:a7:c6:01:c0:70:71:65:24:0c:ef:d1:
                    1a:2f:eb:ec:5c:a5:56:9b:3f:9d:27:92:30:43:65:
                    e6:81:aa:9c:3c:ef:1c:d3:e3:c9:0e:55:d1:9b:39:
                    36:e4:a5:f3:c0:6a:2c:6a:a5:b7:55:a6:b5:d3:8d:
                    40:9b:78:60:ff:81:99:d7:e6:89:60:95:41:14:d3:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CC:67:FF:97:15:3A:B7:EB:56:22:2B:A1:24:8C:11:66:59:4A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:0d:1d:52:4d:1b:11:11:3c:5f:33:c6:71:6c:90:da:e7:
         29:97:29:11:75:44:1a:25:9b:24:3b:6f:7b:f0:3d:c1:00:da:
         be:50:a8:1f:75:2b:53:2e:5c:4a:fb:4f:6d:19:ce:e0:72:57:
         24:34:1d:69:b5:d1:dc:41:f3:6c:04:04:1d:58:e2:e4:8c:44:
         36:4f:d0:87:d9:60:ee:fa:4c:1d:52:e0:14:27:cc:3c:ef:94:
         8c:62:7c:5a:44:56:a6:2a:a5:34:cb:bb:98:9a:ee:fb:ad:19:
         d2:4a:bc:4c:83:37:4b:d7:4e:75:01:68:24:49:c9:18:69:f6:
         b6:62:7d:fc:37:a4:98:65:bd:df:1b:09:c4:1e:cb:75:a6:cd:
         8c:c9:bc:91:17:43:b6:86:5d:b1:7f:19:2e:f8:ac:48:70:d8:
         f3:79:9a:de:8c:bb:89:6a:06:5e:55:ad:1a:70:2c:71:80:b3:
         59:74:65:72:c8:00:28:0b:2e:02:4b:96:ef:07:a6:61:1b:95:
         7b:84:33:9a:7d:67:79:88:9e:bf:2f:a3:e7:3f:d7:66:50:d7:
         13:ff:65:a8:0b:eb:8a:86:70:d9:07:23:03:1e:0f:63:9c:24:
         3a:40:6a:ba:6c:de:37:18:7d:00:ce:f3:17:06:17:84:3c:f7:
         a3:e0:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:44 2025 by rpki-client