Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cbdb11-d76a-3d5a-8135-1fdb2bc57d52.roa
File:                     29cbdb11-d76a-3d5a-8135-1fdb2bc57d52.roa (raw, json)
Hash identifier:          LB3hVmYyE9zCMlexZ+FeOqQzV56wjMMafQWp0VqXbdE=
Subject key identifier:   1D:14:3B:0A:37:81:D6:92:7C:24:47:97:BD:C7:CD:44:58:1D:13:8B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9FE725A7F90074300600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cbdb11-d76a-3d5a-8135-1fdb2bc57d52.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:9f:e7:25:a7:f9:00:74:30:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=036796ba-d5fd-40e9-8fab-6430c5098f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:01:70:a7:2a:68:9c:0d:14:57:cc:79:bf:
                    7e:66:c3:43:93:cb:2f:bf:09:95:fe:22:30:87:4a:
                    93:a8:30:82:b6:48:34:73:7f:ca:e1:a8:e5:d3:52:
                    d4:91:00:1d:0c:60:18:b6:5e:20:af:13:8f:70:bb:
                    44:57:48:37:69:b3:68:81:8b:e9:a7:8d:a3:e9:ae:
                    0b:67:ee:83:20:16:39:ce:37:05:0c:4e:f7:ef:39:
                    39:04:a1:4d:66:29:5b:cd:8a:6d:c0:11:6c:81:ce:
                    de:b0:ab:80:bb:01:ad:3e:30:81:54:00:f1:e5:7f:
                    82:a0:0c:68:56:94:0a:81:c6:d9:52:69:ff:7a:72:
                    34:ea:6f:b6:6e:5d:95:82:3c:e7:15:09:b1:be:d3:
                    81:1b:e2:e9:19:bc:77:e9:c6:5e:13:db:fb:ab:80:
                    27:4f:05:59:fd:97:6c:8f:1d:12:27:64:a7:ae:e4:
                    57:22:b9:34:51:67:7b:b5:ac:39:c7:b3:74:8d:00:
                    3a:35:49:7b:18:cf:2e:0b:99:af:bb:c5:14:5c:b1:
                    c2:3c:de:1b:1f:2d:c6:07:fb:98:c3:d5:9f:ff:f2:
                    af:b3:16:d9:c0:d6:e4:b2:79:07:4a:00:73:96:9e:
                    32:b4:ea:2b:7a:b2:5b:c9:2d:73:3a:6b:51:70:a8:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:14:3B:0A:37:81:D6:92:7C:24:47:97:BD:C7:CD:44:58:1D:13:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cbdb11-d76a-3d5a-8135-1fdb2bc57d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cb:a3:12:4d:77:f1:d3:a7:6c:e9:7b:68:8f:29:f6:f4:07:
         58:70:e9:bf:15:f2:f4:db:70:a0:8e:96:c2:13:c0:01:b0:5c:
         48:c4:e9:8f:34:a1:f3:c0:f9:25:f5:1b:a5:b8:f7:7e:97:1e:
         aa:70:83:80:64:82:30:89:4f:9e:11:55:3c:c9:ca:7b:1f:06:
         8b:9b:15:9f:5e:f2:2f:25:f1:84:19:ca:19:4e:9d:8d:17:d2:
         6c:47:57:dc:ee:5d:85:45:28:c0:66:79:0e:74:3c:67:8e:00:
         95:50:83:d1:d6:0c:76:db:92:e5:97:38:c3:77:21:5b:1c:f5:
         b7:78:79:34:db:ac:38:b6:fd:df:d7:68:d4:35:d4:38:07:07:
         fe:2f:b7:be:20:58:7a:34:d0:54:80:38:74:56:15:4b:fe:39:
         d0:c3:c8:32:00:63:55:5e:9d:e6:92:dc:71:9d:a9:b1:a3:9b:
         36:ab:2c:34:bc:94:a6:8a:6b:a7:db:6d:2a:39:31:bb:b9:cb:
         0a:47:dd:0c:e7:58:a4:77:62:ba:43:4b:90:08:0d:eb:9c:39:
         52:2f:44:5c:af:9b:4a:f3:c8:22:7e:2b:b1:6a:1b:70:59:19:
         fa:9e:2a:50:d5:e3:7e:f3:1e:64:43:f9:39:e8:ff:67:a6:5d:
         11:ef:d2:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzZ/nJaf5AHQwBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MDM2Nzk2YmEtZDVmZC00MGU5LThmYWItNjQzMGM1MDk4ZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDUBcKcqaJwNFFfMeb9+ZsNDk8svvwmV/iIw
h0qTqDCCtkg0c3/K4ajl01LUkQAdDGAYtl4grxOPcLtEV0g3abNogYvpp42j6a4L
Z+6DIBY5zjcFDE737zk5BKFNZilbzYptwBFsgc7esKuAuwGtPjCBVADx5X+CoAxo
VpQKgcbZUmn/enI06m+2bl2VgjznFQmxvtOBG+LpGbx36cZeE9v7q4AnTwVZ/Zds
jx0SJ2SnruRXIrk0UWd7taw5x7N0jQA6NUl7GM8uC5mvu8UUXLHCPN4bHy3GB/uY
w9Wf//KvsxbZwNbksnkHSgBzlp4ytOorerJbyS1zOmtRcKgWzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0UOwo3gdaSfCRHl73HzURYHROLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjljYmRiMTEtZDc2YS0z
ZDVhLTgxMzUtMWZkYjJiYzU3ZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2lVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjLoxJNd/HTp2zpe2iPKfb0B1hw6b8V8vTbcKCOlsITwAGwXEjE6Y80
ofPA+SX1G6W4936XHqpwg4BkgjCJT54RVTzJynsfBoubFZ9e8i8l8YQZyhlOnY0X
0mxHV9zuXYVFKMBmeQ50PGeOAJVQg9HWDHbbkuWXOMN3IVsc9bd4eTTbrDi2/d/X
aNQ11DgHB/4vt74gWHo00FSAOHRWFUv+OdDDyDIAY1VeneaS3HGdqbGjmzarLDS8
lKaKa6fbbSo5Mbu5ywpH3QznWKR3YrpDS5AIDeucOVIvRFyvm0rzyCJ+K7FqG3BZ
GfqeKlDV437zHmRD+Tno/2emXRHv0gY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:22 2025 by rpki-client