Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d91dbf4-2b38-3151-b81b-0da204a9664f.roa
File:                     4d91dbf4-2b38-3151-b81b-0da204a9664f.roa (raw, json)
Hash identifier:          thVuIMiFBx7m6QNnvmmrT2tXwmDc2mnQ2kkPhiG+iRc=
Subject key identifier:   28:E1:98:B5:FF:64:C4:69:30:F1:D4:B4:02:51:16:E2:C6:0F:A9:66
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD95C75D9F17C18A4AE100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d91dbf4-2b38-3151-b81b-0da204a9664f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:95:c7:5d:9f:17:c1:8a:4a:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=913acc8a-8c28-4961-9ad8-8c240ce2df35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:6c:d4:af:7a:01:10:5d:61:56:27:91:b8:
                    65:33:02:d4:d1:ba:80:49:05:fc:4d:6b:75:0c:85:
                    0c:47:08:dc:d9:6d:34:86:4a:82:22:f9:ad:89:97:
                    6e:f6:75:41:ae:b3:83:28:bb:ab:3d:30:f7:68:d4:
                    40:40:0d:37:1a:6e:54:73:44:4f:db:f8:5f:a9:41:
                    ee:ec:4e:1c:31:0b:2a:1d:16:a3:13:2b:2b:0f:60:
                    c5:90:4f:3e:1e:6e:d4:d8:1e:1c:df:76:2c:c8:f6:
                    35:bc:b4:59:ce:27:1e:62:e9:cb:60:7f:fb:81:01:
                    d1:22:58:bf:fb:b7:16:5d:07:f9:f6:2b:48:92:ca:
                    0a:f2:61:13:dc:27:4d:74:83:8f:49:4a:70:87:80:
                    c0:c5:52:cd:7d:01:84:18:6d:ae:00:62:71:9d:b3:
                    80:35:76:d8:3d:f5:43:fa:f5:2d:5c:19:14:9d:89:
                    d2:8b:2a:b7:6f:ba:d3:37:2a:f8:c6:8c:47:a1:43:
                    08:13:d4:08:10:ee:73:aa:45:5e:4e:d7:2e:1b:ba:
                    3d:ca:7b:b6:00:f1:b0:0d:8f:12:16:2c:00:55:18:
                    19:c5:fb:b8:9a:99:93:a4:47:89:c1:dc:86:53:2f:
                    7e:4f:59:63:9f:77:e4:75:7a:34:39:86:bd:67:2f:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E1:98:B5:FF:64:C4:69:30:F1:D4:B4:02:51:16:E2:C6:0F:A9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d91dbf4-2b38-3151-b81b-0da204a9664f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:5d:1f:bb:bc:59:fa:17:06:c8:4d:da:a4:4c:8a:95:cb:
         dd:5d:cb:54:31:0a:df:8f:6e:21:ef:52:9f:9d:bd:85:56:b1:
         2d:3f:a4:1e:2c:9a:6d:ec:0c:57:b2:85:a8:07:19:23:b5:23:
         8a:ad:e4:59:a6:4c:68:5c:a0:ea:d9:43:da:f3:be:86:b6:e8:
         10:a4:46:b8:df:91:9a:84:39:89:0e:36:33:43:e2:16:d5:4d:
         73:1b:6d:ce:01:3f:74:10:e0:e0:0f:85:b7:20:c9:95:51:8e:
         ac:a4:3b:90:8e:26:26:94:ce:f7:ed:3e:30:c6:72:38:6d:2c:
         56:28:ba:c0:d5:f7:98:94:9f:6f:4c:cd:fa:ae:6e:aa:f5:9c:
         34:3a:95:4e:42:90:a9:ea:19:c8:1b:a6:e7:2c:1f:e9:26:0a:
         3f:b2:49:4b:f9:5f:b5:f6:97:26:7d:5d:b3:b6:74:42:72:5f:
         8a:32:d9:8e:49:e7:6b:c5:b5:6d:ce:d1:ec:2e:26:51:2e:e6:
         30:de:d5:27:45:c7:58:53:ca:cd:35:a2:a4:9e:63:62:73:38:
         31:f8:9f:25:3d:c5:4a:a4:fb:be:f4:98:53:db:fe:a8:9b:cd:
         2d:f7:ec:9c:7a:d2:40:c6:18:88:c4:70:b6:a1:3a:2e:4c:8c:
         cf:b2:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:00:03 2025 by rpki-client