Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37195c93-1f59-37dd-8520-664106f05dc3.roa
File:                     37195c93-1f59-37dd-8520-664106f05dc3.roa (raw, json)
Hash identifier:          Ii2ze+NIaJHSqp2SE4SPYXrrG7gTn6MuPR3mW/TDbog=
Subject key identifier:   47:51:ED:7F:5F:E4:67:1B:17:CD:1D:77:90:2E:B4:FC:E5:03:06:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCE4F3BB752AA09B50A800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37195c93-1f59-37dd-8520-664106f05dc3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:e4:f3:bb:75:2a:a0:9b:50:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=21107688-3891-492c-94fc-81646ee49a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:73:b4:21:e9:a5:fc:ce:e3:d9:53:73:0e:
                    5f:ec:a6:e0:5f:4a:a7:c0:0a:76:a7:52:4a:1b:d2:
                    19:01:e0:a6:6e:f3:fe:40:ab:e8:28:e9:a8:5f:67:
                    bf:60:38:51:de:65:7c:5c:45:81:df:c8:7d:ef:12:
                    1f:08:4a:8a:b5:27:0f:07:73:78:37:9e:e0:a7:2a:
                    9c:b9:83:56:a7:92:28:dc:41:39:d6:4d:1e:dc:fe:
                    07:fa:3e:99:7f:de:95:b0:d7:ef:09:9d:96:4a:e9:
                    83:a8:c8:1a:d6:c8:20:f8:1d:96:de:4a:fa:7c:f4:
                    80:3c:21:59:e3:bb:ce:4d:4b:f3:a2:4e:3e:62:66:
                    7b:70:c9:fa:df:7d:92:34:37:eb:68:2e:09:39:65:
                    9e:b0:61:42:10:86:1d:84:2d:18:c0:60:70:23:00:
                    0f:5c:a7:f6:e0:46:a9:88:21:e9:33:2f:48:8a:02:
                    aa:46:cc:35:5f:19:aa:6e:8d:c7:07:60:d2:30:23:
                    e8:c8:fb:a8:8e:b2:a0:c5:d3:98:14:17:72:11:85:
                    d6:a5:55:bd:1d:7f:c6:fb:b4:b7:eb:2c:d9:ab:88:
                    aa:b7:90:5d:f3:07:98:df:7c:a2:70:e5:4b:fe:31:
                    36:10:ed:b3:c4:ce:b8:df:8e:33:43:db:2d:dd:66:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:51:ED:7F:5F:E4:67:1B:17:CD:1D:77:90:2E:B4:FC:E5:03:06:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37195c93-1f59-37dd-8520-664106f05dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:65:36:ef:7e:d6:a2:92:2c:06:73:f4:16:25:6a:d4:b2:6e:
         ad:cc:26:f3:fc:56:9a:8d:83:ac:e1:9f:c1:94:1c:1a:3a:f7:
         07:5f:73:af:66:81:12:7a:89:65:d1:c8:5a:82:d0:40:98:41:
         32:28:98:83:24:49:0e:fb:95:04:7c:dc:b7:d7:78:29:ee:11:
         09:b2:6f:f3:b2:b2:48:be:f9:2c:27:37:92:95:65:a5:8d:93:
         5f:bc:fa:b1:49:2b:41:bc:8e:5b:8c:b3:33:f1:bc:f0:8a:2d:
         65:29:69:14:00:6e:93:73:d9:16:7d:29:38:02:22:3e:c7:2c:
         67:8a:aa:48:59:53:20:77:0c:fd:d7:34:49:d5:d0:59:88:a0:
         2b:ca:ac:33:9f:2c:04:19:b1:9d:84:84:5a:75:c8:90:b3:8d:
         00:4a:67:ff:f5:bb:53:a0:4e:2b:2c:ee:dc:58:ca:23:11:29:
         db:fe:c3:71:64:41:34:bf:9d:15:f9:07:eb:5d:23:02:89:c8:
         85:32:05:68:b4:c9:cb:b0:cc:9a:30:63:3e:34:7e:ee:f2:38:
         f5:79:b6:08:f5:7c:18:e1:26:28:60:3c:3e:27:46:99:c9:6c:
         aa:14:1f:6d:3d:f3:2d:e4:bb:32:c2:93:12:be:2d:ed:27:3f:
         a5:fa:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:28 2025 by rpki-client