Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cc3fab-c48f-3047-9438-23ac317376ba.roa
File:                     29cc3fab-c48f-3047-9438-23ac317376ba.roa (raw, json)
Hash identifier:          nodIoyWocayQ+BryoXA1otwLAWlgkl9+VZ+q2rD80SU=
Subject key identifier:   32:D2:63:BE:F9:29:CC:9F:EC:D8:0D:6D:6A:76:96:C7:D1:DE:F3:8A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCF938BF8B0B6DA3DF2E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cc3fab-c48f-3047-9438-23ac317376ba.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.107.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:f9:38:bf:8b:0b:6d:a3:df:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=832130a0-4ade-4d9b-9ec7-de6fbd253794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fb:0a:9e:7a:89:f1:78:b2:2b:7b:a5:bd:54:
                    e9:44:54:58:64:7b:05:03:76:38:28:12:ba:41:85:
                    65:08:8d:ef:4b:fc:28:c8:c5:e6:ac:b3:35:e5:56:
                    67:d9:ac:b6:fb:0e:e7:45:84:28:2a:48:7c:d5:20:
                    c1:d3:c3:34:6c:2c:f6:75:22:1e:59:ac:ac:5f:ef:
                    e2:10:d9:57:d8:52:e3:8f:3c:c5:31:9d:f5:ec:f5:
                    5f:5c:fe:47:41:c3:c6:d1:44:52:1c:e8:1a:ee:cf:
                    30:80:cb:ed:4d:f9:ee:8c:fe:95:93:c7:a3:3f:69:
                    f1:1e:c9:b9:9c:51:4e:e0:30:de:36:51:64:2a:73:
                    1c:a3:c7:14:ae:ce:3a:83:71:11:d7:14:9a:6c:5c:
                    e3:47:a9:1d:3e:99:4f:83:e0:02:4c:1a:8d:10:68:
                    56:8b:60:7d:6b:23:41:d5:d4:19:ca:e8:15:15:ed:
                    11:9c:6a:1d:a2:ab:2e:72:d3:38:14:06:d8:df:8c:
                    87:78:a4:37:c1:04:b0:dd:c4:96:ed:7b:d7:91:59:
                    1d:ba:6f:c0:02:02:7c:a3:72:16:de:96:15:2f:76:
                    ec:89:9d:a0:37:93:88:db:d9:47:36:08:8c:ef:99:
                    3c:37:9c:9f:b4:90:df:a9:fc:8a:44:1f:6e:32:bc:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D2:63:BE:F9:29:CC:9F:EC:D8:0D:6D:6A:76:96:C7:D1:DE:F3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cc3fab-c48f-3047-9438-23ac317376ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:49:cf:45:43:3d:a0:37:ab:f4:66:44:cf:48:6c:67:ca:18:
         a4:89:fe:38:c2:74:5d:c1:4b:f9:bb:da:f2:bc:bb:b2:bd:7a:
         99:53:01:a8:38:06:63:ca:0a:b3:f5:dd:63:67:66:75:54:b1:
         cc:5b:6c:86:fc:b2:a5:a8:a8:db:b0:ba:1e:5f:02:38:96:73:
         b1:ac:6a:c5:5e:00:69:dd:33:4e:47:0e:6b:a7:c8:58:6c:5c:
         99:87:b0:1f:bd:3a:a6:74:44:83:4f:ad:73:b6:e9:ea:f6:d8:
         5d:fc:e5:96:c9:ca:7f:fa:ce:79:ea:19:6f:69:27:ce:4e:66:
         9f:4f:40:a0:c2:7e:57:2d:c0:3f:b0:a1:63:8c:cb:ba:8a:58:
         05:45:db:bd:19:8d:b4:c5:ae:20:ff:c5:50:9f:37:3a:ac:45:
         fb:fe:f9:d6:59:dc:7d:b6:ff:88:ca:a3:ac:ae:ef:13:ca:75:
         7f:36:9e:2b:b0:82:52:32:29:91:3e:f7:bc:a0:25:3b:6b:78:
         33:95:41:1e:27:4a:04:30:8c:22:72:c9:a8:79:3b:ff:0c:e1:
         ea:28:ed:19:3a:89:a4:79:b2:b3:38:49:90:55:93:09:1a:49:
         7e:0f:fe:30:89:00:a2:c0:35:48:d9:61:74:bc:16:ad:9b:97:
         49:cf:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:15 2025 by rpki-client