Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4da38c3a-c88d-3076-bbef-ccf5edbc8fe2.roa
File:                     4da38c3a-c88d-3076-bbef-ccf5edbc8fe2.roa (raw, json)
Hash identifier:          ZY6yTyrwOmA/iFpTLP5+U1ykfGUCREe1+cNeqnlt4qs=
Subject key identifier:   D4:11:E4:DE:38:AD:85:C5:7B:65:FA:AC:17:DC:64:1E:D4:4F:A6:76
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB43445E67E8E72AC1480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4da38c3a-c88d-3076-bbef-ccf5edbc8fe2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.107.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b4:34:45:e6:7e:8e:72:ac:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9915012d-6eb4-4370-bf25-2ad6a5df6180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:19:d3:51:22:55:1d:e6:c4:e5:f6:98:9e:
                    dc:d6:e5:ab:f3:1e:6b:7f:88:ac:89:b0:74:5d:0f:
                    27:33:76:55:cd:0b:08:fd:37:0b:d2:64:44:3e:cb:
                    9e:21:46:9e:fe:8d:de:cf:6b:67:ea:fc:f6:7b:ca:
                    50:1b:cb:48:18:2e:2d:4b:98:59:70:a3:c7:37:21:
                    44:33:70:f1:26:b6:5d:f1:da:32:b2:84:6a:44:37:
                    54:56:a6:84:ce:ca:97:6d:3e:19:e7:7e:ba:ea:48:
                    08:d1:4b:32:94:51:2d:11:ff:fa:fb:34:c1:a6:cd:
                    00:c8:bc:96:37:7f:49:53:d9:8b:f2:bc:e5:23:06:
                    96:20:fa:66:96:49:1f:bb:33:5b:0b:23:03:fe:8f:
                    29:eb:f4:a7:e8:b7:90:00:61:9c:ae:7a:2d:b2:5f:
                    8a:b3:47:01:51:23:7d:25:c3:fd:3e:f0:8b:eb:cc:
                    ae:3f:9f:35:bc:1b:79:2f:2b:91:e8:71:38:55:37:
                    e8:e1:fa:f7:bd:b8:e8:bf:c7:63:86:38:b3:20:8c:
                    cf:fa:0d:d5:31:c8:f7:b2:61:b4:c5:12:19:91:64:
                    cd:87:5c:61:6f:62:e5:db:3a:f4:fc:e9:43:0a:ec:
                    ea:00:a6:93:ab:b3:8c:3e:7c:8f:8e:00:e0:93:79:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:11:E4:DE:38:AD:85:C5:7B:65:FA:AC:17:DC:64:1E:D4:4F:A6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4da38c3a-c88d-3076-bbef-ccf5edbc8fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:55:3d:2b:1e:65:0f:e7:05:fc:a5:53:b5:ff:b7:2e:a3:1b:
         aa:8c:8e:b2:a7:8f:fd:88:67:98:10:2f:15:0a:79:59:bf:96:
         79:9c:6e:5e:42:b4:90:21:7d:d4:d4:6e:46:cf:ed:e6:1d:d8:
         04:bc:6a:25:d4:05:42:50:7b:06:fb:10:85:54:71:e8:ec:5c:
         53:8a:06:95:3e:cb:f2:6e:41:a2:a5:44:a1:b5:a6:52:a2:9b:
         57:70:70:bd:bc:b1:d4:b7:a1:81:95:6e:7b:ac:44:a6:19:18:
         87:d4:5f:1f:b7:fd:5a:38:e4:a2:9c:e6:4f:a8:5e:2e:e1:9e:
         fb:63:1c:4e:76:b1:3d:68:e0:f7:f6:c9:7e:30:a2:65:1a:12:
         29:63:e5:77:5b:1d:fd:c1:15:75:29:cc:72:9e:a7:fa:81:10:
         15:99:fd:98:bf:88:d0:99:a1:a5:0d:4f:2e:08:44:86:af:b3:
         7d:dc:8d:86:37:14:e6:41:55:70:0c:87:4a:a4:25:7e:ea:61:
         9a:ae:a3:01:7d:51:7b:00:16:f9:2d:6a:69:66:f2:37:b1:29:
         d4:94:9c:2f:db:82:2e:67:45:c5:7d:95:3f:fd:ca:d4:2b:71:
         14:ac:83:09:6a:71:fd:c0:dc:da:57:88:fc:3d:4a:b2:e4:b0:
         c6:d7:65:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzbQ0ReZ+jnKsFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
OTkxNTAxMmQtNmViNC00MzcwLWJmMjUtMmFkNmE1ZGY2MTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKQZ01EiVR3mxOX2mJ7c1uWr8x5rf4isibB0
XQ8nM3ZVzQsI/TcL0mREPsueIUae/o3ez2tn6vz2e8pQG8tIGC4tS5hZcKPHNyFE
M3DxJrZd8doysoRqRDdUVqaEzsqXbT4Z53666kgI0UsylFEtEf/6+zTBps0AyLyW
N39JU9mL8rzlIwaWIPpmlkkfuzNbCyMD/o8p6/Sn6LeQAGGcrnotsl+Ks0cBUSN9
JcP9PvCL68yuP581vBt5LyuR6HE4VTfo4fr3vbjov8djhjizIIzP+g3VMcj3smG0
xRIZkWTNh1xhb2Ll2zr0/OlDCuzqAKaTq7OMPnyPjgDgk3mCCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQR5N44rYXFe2X6rBfcZB7UT6Z2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGRhMzhjM2EtYzg4ZC0z
MDc2LWJiZWYtY2NmNWVkYmM4ZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZVPSseZQ/nBfylU7X/ty6jG6qMjrKnj/2IZ5gQLxUKeVm/lnmcbl5C
tJAhfdTUbkbP7eYd2AS8aiXUBUJQewb7EIVUcejsXFOKBpU+y/JuQaKlRKG1plKi
m1dwcL28sdS3oYGVbnusRKYZGIfUXx+3/Vo45KKc5k+oXi7hnvtjHE52sT1o4Pf2
yX4womUaEilj5XdbHf3BFXUpzHKep/qBEBWZ/Zi/iNCZoaUNTy4IRIavs33cjYY3
FOZBVXAMh0qkJX7qYZquowF9UXsAFvktamlm8jexKdSUnC/bgi5nRcV9lT/9ytQr
cRSsgwlqcf3A3NpXiPw9SrLksMbXZW8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:26:56 2025 by rpki-client