Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a208115-21b3-3d5b-92f8-8888b70185b4.roa
File:                     5a208115-21b3-3d5b-92f8-8888b70185b4.roa (raw, json)
Hash identifier:          dVBuvuQLUwRzUdnj+xChtlHh6utDnb7tdd9Lw0KOPOM=
Subject key identifier:   C9:52:BF:35:49:AB:D7:20:90:E7:54:06:BB:5C:09:E6:15:AC:6B:20
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDA90C7A5AB1C816451340
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a208115-21b3-3d5b-92f8-8888b70185b4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:a9:0c:7a:5a:b1:c8:16:45:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7b5207ae-374d-42d7-875a-29282200d32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:f9:4f:4b:f4:43:ed:b1:f2:4f:57:42:74:
                    2d:1b:70:31:58:72:95:ed:3d:09:dc:e5:66:a0:9c:
                    e2:21:db:0a:99:10:4a:3c:bd:65:94:bf:91:fc:fe:
                    57:fe:25:49:6c:6f:15:ac:52:dc:f9:77:e1:88:25:
                    df:b1:43:a4:44:e0:52:85:93:4f:ae:fa:95:c4:5f:
                    cd:e9:85:4b:36:ef:d3:a1:9b:bb:9d:c1:b4:a4:22:
                    2a:4f:c4:90:fb:66:ee:77:3a:43:fc:fa:12:1d:f9:
                    78:cc:2b:6d:69:57:b2:a7:b5:b7:80:4a:be:46:6e:
                    66:80:d3:d2:65:ce:a5:ed:41:01:4e:c1:40:72:88:
                    ff:a8:85:b8:3a:35:18:f0:aa:d0:96:24:a5:02:cf:
                    c0:be:e1:ae:11:b3:46:12:66:d5:9a:66:a0:88:28:
                    30:c6:a3:a0:7e:d0:f7:24:ce:de:ac:06:1d:0b:bb:
                    c5:93:c3:62:8f:f2:ec:32:3c:b8:01:f1:47:84:ef:
                    bd:3f:3e:62:7d:20:92:f3:5c:b5:f9:78:a1:6a:e9:
                    f9:5b:6f:ba:dd:d6:90:96:59:94:81:35:02:1e:59:
                    21:29:28:4e:f7:ce:18:1e:8f:23:b8:b7:2d:fb:9c:
                    d1:ec:2c:ad:a3:97:17:ad:06:69:23:a0:d8:6c:a9:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:52:BF:35:49:AB:D7:20:90:E7:54:06:BB:5C:09:E6:15:AC:6B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a208115-21b3-3d5b-92f8-8888b70185b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:c9:9a:df:e7:89:c6:a8:69:1f:75:d7:27:90:e2:dd:87:1d:
         18:1e:77:9c:7c:de:2f:1b:98:3b:90:0b:5e:19:22:ea:72:bf:
         b4:a9:64:fb:7c:f7:eb:84:bb:ef:e6:e4:1e:99:96:d1:f8:67:
         61:7c:c8:47:af:48:0b:02:e4:37:74:bd:e3:e5:8a:4f:58:d0:
         ae:da:06:84:2c:c1:2f:2f:5b:aa:11:0d:8c:1d:25:1e:51:78:
         65:38:a3:16:91:cc:c6:c6:f0:18:34:69:5d:2d:41:c3:e4:45:
         c4:c0:1f:53:49:62:72:8d:bc:44:14:57:c2:8a:a6:31:2e:1e:
         76:23:3c:77:ad:1c:02:77:a4:a6:7a:bc:0f:b8:0d:24:e9:fb:
         d9:c2:8f:0e:ab:9d:16:e0:44:fe:ca:3c:c5:d3:de:ef:ea:1c:
         9a:2f:ed:de:07:1f:03:2b:23:d7:cb:b8:24:39:dc:88:20:18:
         b8:c3:73:bc:7f:54:44:0b:38:bd:cc:94:93:fa:c0:5a:2b:90:
         8c:17:88:2b:ac:8b:7a:c4:6e:c2:a7:c9:e0:41:18:cc:84:f3:
         ac:c5:8b:08:ef:1c:9f:8d:11:12:c9:ed:3e:28:ec:7e:c8:ae:
         cc:c9:56:4c:40:b9:45:dc:c7:7a:67:02:47:fb:08:d6:1b:9b:
         0f:c2:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:53 2025 by rpki-client