Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/334f2a11-72e6-3e66-809b-d01eb71937d1.roa
File:                     334f2a11-72e6-3e66-809b-d01eb71937d1.roa (raw, json)
Hash identifier:          Z4zoj7Fsn+u54k6TojJdphuqeblujR4D+66P/8u128A=
Subject key identifier:   F5:C5:B7:CB:AC:41:B8:DA:AB:E1:E2:6D:80:51:6B:E2:72:5A:21:63
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDA1B1C08B4523E51B5D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/334f2a11-72e6-3e66-809b-d01eb71937d1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:a1:b1:c0:8b:45:23:e5:1b:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9f3170cd-6085-4cb3-b207-41d90993fdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:b3:f0:94:b3:82:33:93:a3:16:ac:5f:7a:
                    57:80:d1:a7:76:e4:a2:ee:b6:df:37:f0:e8:a5:cd:
                    e5:d9:99:36:81:62:b1:bd:ee:6c:ee:3a:0d:81:4c:
                    f2:91:4e:f9:db:70:fc:ea:36:cf:74:83:57:ab:e5:
                    f6:a3:b8:ae:30:8a:d1:bb:7c:b9:84:e4:30:d2:12:
                    a8:60:ba:58:f9:56:e1:4b:a3:71:19:87:5e:87:62:
                    b5:3c:7c:a0:ae:32:67:1c:d3:38:30:14:6c:9e:78:
                    da:be:9f:56:84:91:0d:20:58:73:29:70:59:72:44:
                    87:0b:45:21:23:29:3c:b9:14:6e:a0:42:0d:08:9c:
                    0e:1f:2f:a8:66:1d:de:e1:b9:08:96:b5:cc:f3:e2:
                    76:11:22:5a:10:a4:f1:ee:9e:8e:f7:f9:c1:84:dc:
                    6a:1c:00:90:0b:1a:f7:fa:19:65:f7:ab:e2:3a:4b:
                    80:69:60:9d:7d:0b:3e:cb:35:8d:9c:1c:d3:9b:1f:
                    5f:9a:21:04:b6:04:86:83:c2:fa:ad:b1:e6:f7:d0:
                    73:34:93:f1:28:5b:22:3e:f0:99:fe:1e:13:d8:86:
                    1d:a9:cc:6a:89:64:d3:44:01:a8:73:df:94:4d:63:
                    c2:94:45:7e:13:f9:d8:b2:fa:2f:7c:9d:db:36:f2:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:B7:CB:AC:41:B8:DA:AB:E1:E2:6D:80:51:6B:E2:72:5A:21:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/334f2a11-72e6-3e66-809b-d01eb71937d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:41:90:eb:ce:3e:b5:54:77:9f:48:63:e6:97:9b:c2:08:cb:
         f5:5a:36:e1:5a:f3:cc:ea:a2:79:22:e2:50:8c:74:7b:f5:e2:
         df:87:23:c3:eb:f4:49:ce:d2:27:1d:74:76:c8:36:4b:8b:e0:
         b3:4c:7e:82:83:d9:64:cc:62:af:2a:ec:97:2b:f6:47:90:d9:
         46:1c:03:1f:b0:d3:20:a1:12:51:47:80:66:85:cf:bf:3d:b1:
         59:00:ac:b4:3e:5b:42:00:ff:2a:db:3e:8b:53:28:05:b7:28:
         0a:93:64:a9:f6:14:62:ba:cd:07:d6:04:18:6e:27:c2:0c:f6:
         71:b8:f0:92:3c:b2:16:66:c3:97:60:61:a4:5d:f3:3a:7f:39:
         43:a2:ed:a5:c8:2d:03:34:bc:e8:1f:39:9b:52:a2:7e:82:c6:
         b5:d7:30:66:59:33:59:70:10:fb:3b:54:6e:4e:55:c4:23:05:
         6a:6e:20:9a:d6:72:45:92:73:ec:c7:3b:bc:02:26:50:89:81:
         04:d6:ea:b8:8d:ee:c9:db:9a:39:d8:6f:33:74:ce:39:30:ac:
         d5:36:ed:84:65:47:c6:f7:37:be:64:4f:48:f6:04:35:5f:0c:
         3f:70:4b:c9:c2:99:a9:72:e2:ab:b8:16:0c:2b:47:a2:ea:5e:
         b1:c3:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:53 2025 by rpki-client