Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3761a8f1-f081-3dab-afef-9160266cd0db.roa
File:                     3761a8f1-f081-3dab-afef-9160266cd0db.roa (raw, json)
Hash identifier:          hCyNaTx9055lEui4oae/FLobqnsC5lbUU5I+dkP9gYQ=
Subject key identifier:   CE:68:3C:E5:20:66:98:0D:F8:25:CA:43:61:FD:34:CF:C7:47:F9:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCE3A99AE0F1BB9DEBD240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3761a8f1-f081-3dab-afef-9160266cd0db.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:e3:a9:9a:e0:f1:bb:9d:eb:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0fc04019-9f80-4073-9740-45625b9a8493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:07:a0:47:48:ca:9a:04:ae:29:c5:08:2b:
                    e6:da:98:5f:a0:cf:64:3b:d8:ee:81:fb:ef:65:df:
                    40:8b:42:23:8f:bf:81:be:38:9d:83:a5:7e:46:69:
                    8b:3d:c1:a0:73:00:de:38:c8:73:27:9c:7e:16:17:
                    96:0a:bc:08:bb:de:8d:b5:d5:ca:3b:71:59:ed:15:
                    7a:17:d0:e7:cc:e3:ff:f1:d0:70:57:44:cc:78:13:
                    71:e8:47:51:35:f9:ec:6f:f0:ee:3b:32:0d:17:56:
                    f2:69:69:44:97:03:2c:51:1b:2d:65:d7:fe:41:51:
                    53:62:70:13:16:82:00:66:66:e8:c5:fd:ef:a1:c0:
                    2a:fb:e2:0a:de:be:3f:e6:dc:ae:96:7b:01:ab:3d:
                    f8:a6:cc:a3:56:dc:dd:27:71:a1:61:10:bd:06:7b:
                    8d:80:82:90:4a:7f:ec:fd:2f:1d:01:42:4a:e0:a3:
                    9b:12:b6:24:f1:ff:c4:17:5d:50:e3:b0:ff:5c:3a:
                    4e:3d:a8:68:d5:12:aa:06:68:0d:b0:27:94:a3:fe:
                    00:74:57:ea:fe:f9:28:90:86:be:a7:77:80:28:e6:
                    c9:2d:63:93:51:6d:87:c2:2f:7a:be:87:38:af:61:
                    5a:7d:59:f8:d0:81:d8:8e:c8:0b:99:5a:92:38:c4:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:68:3C:E5:20:66:98:0D:F8:25:CA:43:61:FD:34:CF:C7:47:F9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3761a8f1-f081-3dab-afef-9160266cd0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:8c:d9:67:f7:ac:00:7d:b5:f0:c5:cf:d4:bf:81:d1:ac:14:
         b3:71:c6:ea:c8:d4:aa:0c:d2:20:72:41:9b:5f:fa:4c:f8:9c:
         23:7f:39:ae:67:66:3b:dd:db:7b:ee:1f:0a:05:44:98:2c:43:
         b0:18:7d:19:9a:30:ea:42:ae:de:a0:0d:ec:85:99:8e:60:2d:
         b7:5f:21:92:a1:fc:72:99:ba:d5:af:83:a6:3c:11:b2:67:d6:
         fc:dc:0f:85:de:e7:b1:65:e4:21:16:92:fe:b4:55:3d:21:f3:
         3e:4f:6c:81:24:3d:61:7d:e9:d7:d4:e8:a0:73:76:03:06:0e:
         e4:b7:da:64:25:af:48:54:25:2b:15:6d:eb:9b:6a:8a:77:9d:
         42:5c:ab:ad:97:a7:6c:27:ec:35:b4:17:3e:65:cf:f2:f5:6d:
         2a:43:2a:30:c5:c4:79:63:95:15:6b:f1:05:4d:43:62:fe:2a:
         11:b3:e9:ed:d1:20:cb:b7:31:75:43:31:6e:df:65:0a:70:bd:
         58:1e:26:b3:d4:3d:64:be:c4:ad:05:ef:b0:81:3b:f3:ca:51:
         ee:b3:c5:5b:54:0d:f3:fe:1b:41:ad:9d:99:05:33:e2:16:65:
         fc:f5:58:fa:70:d3:f0:a4:8c:3c:45:f3:5e:dc:15:af:a2:f6:
         81:37:bb:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzOOpmuDxu53r0kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MGZjMDQwMTktOWY4MC00MDczLTk3NDAtNDU2MjViOWE4NDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO8HoEdIypoErinFCCvm2phfoM9kO9jugfvv
Zd9Ai0Ijj7+Bvjidg6V+RmmLPcGgcwDeOMhzJ5x+FheWCrwIu96NtdXKO3FZ7RV6
F9DnzOP/8dBwV0TMeBNx6EdRNfnsb/DuOzINF1byaWlElwMsURstZdf+QVFTYnAT
FoIAZmboxf3vocAq++IK3r4/5tyulnsBqz34psyjVtzdJ3GhYRC9BnuNgIKQSn/s
/S8dAUJK4KObErYk8f/EF11Q47D/XDpOPaho1RKqBmgNsCeUo/4AdFfq/vkokIa+
p3eAKObJLWOTUW2Hwi96voc4r2FafVn40IHYjsgLmVqSOMRbdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5oPOUgZpgN+CXKQ2H9NM/HR/nXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzc2MWE4ZjEtZjA4MS0z
ZGFiLWFmZWYtOTE2MDI2NmNkMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2kSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALiM2Wf3rAB9tfDFz9S/gdGsFLNxxurI1KoM0iByQZtf+kz4nCN/Oa5n
Zjvd23vuHwoFRJgsQ7AYfRmaMOpCrt6gDeyFmY5gLbdfIZKh/HKZutWvg6Y8EbJn
1vzcD4Xe57Fl5CEWkv60VT0h8z5PbIEkPWF96dfU6KBzdgMGDuS32mQlr0hUJSsV
beubaop3nUJcq62Xp2wn7DW0Fz5lz/L1bSpDKjDFxHljlRVr8QVNQ2L+KhGz6e3R
IMu3MXVDMW7fZQpwvVgeJrPUPWS+xK0F77CBO/PKUe6zxVtUDfP+G0GtnZkFM+IW
Zfz1WPpw0/CkjDxF817cFa+i9oE3u9o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:20 2025 by rpki-client