Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43218a39-f729-325f-b521-bdd2f5c7b055.roa
File:                     43218a39-f729-325f-b521-bdd2f5c7b055.roa (raw, json)
Hash identifier:          /mk2hXXh48r4epKVwArmbW4xQc7yBIHx0OagdfSz/uQ=
Subject key identifier:   0E:19:12:4F:41:9C:C8:B2:73:AE:D1:82:F0:AA:95:34:87:C8:B8:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCED4979D7259653D9E300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43218a39-f729-325f-b521-bdd2f5c7b055.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:ed:49:79:d7:25:96:53:d9:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=88247bf9-ea6e-43eb-b3c8-8f70a886d02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:3c:e3:a6:99:e2:ae:b6:91:ad:1a:e6:d5:
                    a9:6c:c4:38:6b:aa:bb:6d:3e:04:83:84:58:93:2a:
                    12:3f:e1:e3:d8:7b:57:8e:c8:34:f1:3d:69:3d:db:
                    11:5c:6e:18:bb:64:15:4b:89:fb:54:62:20:76:f3:
                    db:4b:a8:0d:fa:89:41:54:e9:8a:d6:c3:80:07:f6:
                    4e:24:ee:60:a8:84:78:8b:a1:57:86:34:29:9b:03:
                    64:bd:08:60:61:f3:49:23:b5:59:df:c5:0b:a3:b4:
                    2a:0b:df:c3:26:3e:78:86:d9:f8:5c:95:10:6b:06:
                    1a:e1:17:4a:9a:a9:84:79:bd:93:71:d0:47:f3:8c:
                    03:4b:9a:29:b6:bc:ae:1a:13:56:23:d1:0e:82:14:
                    6f:af:90:03:f5:43:ae:44:ef:58:4e:b5:af:94:b0:
                    79:29:33:0d:84:6e:29:ef:85:e3:96:cc:da:01:61:
                    12:0f:a8:41:a8:20:a2:55:a8:dc:3d:95:0a:fb:ed:
                    f9:0a:97:4c:97:67:c4:53:ab:29:80:92:e1:7e:56:
                    d8:c6:ba:09:a3:70:25:46:2b:f6:f8:0f:c8:5c:b6:
                    ec:e9:66:56:4a:3a:fe:a5:a3:52:18:35:43:1d:50:
                    e2:06:dc:80:09:f6:77:3a:d8:b2:7c:62:6a:08:cd:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:19:12:4F:41:9C:C8:B2:73:AE:D1:82:F0:AA:95:34:87:C8:B8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/43218a39-f729-325f-b521-bdd2f5c7b055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:f1:02:25:cb:7b:1c:37:ff:3b:68:99:7e:48:d4:76:6b:96:
         3e:f4:41:cf:80:36:21:24:27:30:88:1b:c9:50:fe:3d:eb:b1:
         8d:26:b9:42:fa:76:a5:75:98:d9:fd:0f:fd:c8:be:bb:b7:c9:
         e3:c6:5b:65:60:7a:e6:0e:4b:d3:08:bf:9e:cc:b8:ee:51:7c:
         eb:0d:da:6a:f0:cf:b4:9b:08:e0:71:58:b6:4d:14:41:6d:42:
         65:ed:58:1c:df:03:a7:cb:3b:b9:6b:53:dd:c8:25:64:f3:f3:
         2f:51:11:f9:70:54:fe:38:e0:ec:63:e5:39:3d:3f:8a:39:59:
         e9:f6:57:f0:d9:40:35:cc:a7:5c:7e:6d:79:8c:79:f3:15:c7:
         be:e3:ed:a7:cf:83:76:ad:3c:49:d4:cf:90:75:61:e4:ab:81:
         a6:37:c7:db:7d:d1:fa:65:5d:0f:a8:a5:58:ed:a7:74:7d:17:
         34:c9:08:ba:03:f2:b1:0e:b0:83:9b:21:9b:11:d0:d1:6b:b5:
         f0:cf:85:42:82:48:94:25:9e:78:72:c3:2a:1e:f5:2c:d5:2e:
         64:f5:62:f9:8a:de:16:eb:3b:7d:7f:97:0d:42:59:4c:45:0d:
         6d:b7:f6:6e:d5:ea:5a:da:8b:5f:75:92:88:74:66:ac:50:85:
         a5:23:ce:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:54 2025 by rpki-client