Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c77e39d-4a34-361f-a2bb-e10d0de79f8d.roa
File:                     3c77e39d-4a34-361f-a2bb-e10d0de79f8d.roa (raw, json)
Hash identifier:          gMNv3mdyRQ3C8CcZ4z9/y7HNkQ1zpSd3ZWASKlQswi4=
Subject key identifier:   48:3B:C1:FB:3D:06:E9:E0:98:96:7E:F1:69:71:1F:03:6D:8F:C3:3E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDA9E77C62E98AFB65A800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c77e39d-4a34-361f-a2bb-e10d0de79f8d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:a9:e7:7c:62:e9:8a:fb:65:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0548179a-a9ba-46ca-a0cf-0a43be70a2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7e:cf:9f:06:7f:ef:ab:07:5b:78:9b:66:53:
                    23:b3:66:b8:6e:43:af:e5:c0:34:fa:7e:e6:c5:18:
                    77:b7:c7:66:e5:2e:05:de:62:73:89:2e:7c:da:3f:
                    6d:4c:04:1d:a4:a2:db:f6:18:b0:62:53:da:68:ff:
                    87:6c:97:98:8d:4b:55:f2:b6:df:23:47:ac:13:e1:
                    23:77:c3:b1:98:50:9f:48:79:ed:52:71:17:d0:ed:
                    6c:23:9b:83:2c:61:09:d8:df:a0:c9:0b:98:6a:e0:
                    e0:a7:cd:bc:0c:9a:b1:d9:52:42:08:b6:9b:dd:22:
                    38:8f:c1:94:49:87:e7:af:9d:4a:c5:05:24:f8:78:
                    78:16:e7:a5:d6:32:24:51:54:2d:14:88:7a:c0:3a:
                    7d:89:ad:6e:3c:7a:37:d8:1a:7e:e1:52:e9:5a:b0:
                    cc:f2:2c:be:bb:bf:db:22:74:3c:0e:a1:28:cc:d3:
                    5d:59:23:71:f0:31:24:68:9e:b9:3b:62:e9:df:fe:
                    8b:e0:77:53:56:ae:82:1a:4a:16:10:3f:73:27:bc:
                    01:0b:9b:86:3a:4c:7c:52:72:00:29:f8:a5:18:88:
                    1e:9d:eb:d8:cd:55:87:0b:c6:fe:d7:a5:5f:68:6a:
                    63:11:f8:a6:f5:b3:e2:3b:08:35:b2:ee:c4:c9:62:
                    70:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3B:C1:FB:3D:06:E9:E0:98:96:7E:F1:69:71:1F:03:6D:8F:C3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c77e39d-4a34-361f-a2bb-e10d0de79f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:f5:70:a2:ed:8a:77:e3:30:4a:4d:96:36:09:04:24:88:
         3c:b9:a9:4e:47:75:41:17:05:34:0c:18:2f:75:a0:50:14:12:
         ed:63:e9:93:a5:d6:27:b6:e8:87:f3:3b:e5:15:f6:ce:ec:e1:
         8d:8c:40:67:b3:e6:88:fc:d2:dd:fe:85:d4:7e:3b:7e:49:7c:
         00:33:e2:2e:9b:8b:12:78:69:27:b2:33:35:73:6f:ca:59:b4:
         e9:e9:69:c1:2b:6a:ee:ec:69:96:b2:17:1d:50:69:ba:72:cf:
         9e:2e:60:f1:4d:a1:fd:78:b7:8e:8c:2f:7b:f4:43:35:db:e7:
         c2:d6:c7:3d:bd:9a:da:24:6d:e3:24:00:88:54:32:9f:5e:ca:
         cb:78:cc:16:3d:c6:fd:91:46:e6:f6:b3:34:7f:a2:d2:a7:7c:
         d6:74:0b:1e:89:f0:d6:d4:8c:65:e9:f6:e2:a9:af:f4:0c:93:
         0e:bb:91:aa:47:4e:88:7d:63:4a:c7:6e:f0:06:fc:b3:80:97:
         5c:31:d7:a0:ff:df:2b:22:43:e6:f4:30:fe:62:96:7a:41:76:
         93:2c:1b:0f:79:b6:cd:bd:ad:0b:e9:30:05:f5:a2:88:06:ca:
         f0:08:3b:b3:9b:3a:e2:6f:e5:26:95:74:f6:52:58:5f:6b:5b:
         2e:60:d5:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzannfGLpivtlqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MDU0ODE3OWEtYTliYS00NmNhLWEwY2YtMGE0M2JlNzBhMmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg37PnwZ/76sHW3ibZlMjs2a4bkOv5cA0+n7m
xRh3t8dm5S4F3mJziS582j9tTAQdpKLb9hiwYlPaaP+HbJeYjUtV8rbfI0esE+Ej
d8OxmFCfSHntUnEX0O1sI5uDLGEJ2N+gyQuYauDgp828DJqx2VJCCLab3SI4j8GU
SYfnr51KxQUk+Hh4Fuel1jIkUVQtFIh6wDp9ia1uPHo32Bp+4VLpWrDM8iy+u7/b
InQ8DqEozNNdWSNx8DEkaJ65O2Lp3/6L4HdTVq6CGkoWED9zJ7wBC5uGOkx8UnIA
KfilGIgenevYzVWHC8b+16VfaGpjEfim9bPiOwg1su7EyWJw5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEg7wfs9BungmJZ+8WlxHwNtj8M+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M3N2UzOWQtNGEzNC0z
NjFmLWEyYmItZTEwZDBkZTc5ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2q2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYL9XCi7Yp34zBKTZY2CQQkiDy5qU5HdUEXBTQMGC91oFAUEu1j6ZOl
1ie26IfzO+UV9s7s4Y2MQGez5oj80t3+hdR+O35JfAAz4i6bixJ4aSeyMzVzb8pZ
tOnpacErau7saZayFx1Qabpyz54uYPFNof14t46ML3v0QzXb58LWxz29mtokbeMk
AIhUMp9eyst4zBY9xv2RRub2szR/otKnfNZ0Cx6J8NbUjGXp9uKpr/QMkw67kapH
Toh9Y0rHbvAG/LOAl1wx16D/3ysiQ+b0MP5ilnpBdpMsGw95ts29rQvpMAX1oogG
yvAIO7ObOuJv5SaVdPZSWF9rWy5g1Z4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:03 2025 by rpki-client