Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74585316-e1f0-3bdb-b799-f903d43bdce5.roa
File:                     74585316-e1f0-3bdb-b799-f903d43bdce5.roa (raw, json)
Hash identifier:          CymC1LxzPVhnVI8/RP8Jav4J0RHM3cXzfyW0Yn2G5F4=
Subject key identifier:   6D:8D:D7:E3:18:57:A2:7C:73:79:C8:FB:D1:8E:B9:22:D3:C5:46:FA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCE5F5CC9F65585CAB9E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74585316-e1f0-3bdb-b799-f903d43bdce5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:e5:f5:cc:9f:65:58:5c:ab:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=43d23145-aba2-4d1b-8c80-03e4d212d74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:93:7e:9b:30:7d:b5:9d:92:2b:b5:1a:3a:
                    9c:c7:5d:68:ce:13:0b:72:a4:6e:8f:aa:53:62:a0:
                    0c:00:e2:cb:c0:ca:7e:ef:47:ce:8b:82:78:aa:94:
                    c4:31:a1:3d:f8:e9:8a:81:1c:7c:90:61:9f:25:cd:
                    1a:a7:69:19:3f:1e:72:d8:a2:e5:69:7b:af:e5:71:
                    2c:68:b5:02:de:ab:8a:e4:6d:ec:c0:80:87:38:cd:
                    1b:9c:59:13:fd:2c:94:02:52:54:d2:cd:ad:a5:13:
                    05:b6:37:a4:03:ec:f9:d1:0a:87:74:37:a4:34:6d:
                    c8:e1:4b:44:c7:a8:66:8e:d5:0e:91:aa:41:5e:44:
                    10:4b:40:ea:90:2f:29:9d:86:d2:3c:d2:20:ed:4e:
                    56:a8:a5:65:5f:3a:28:6e:68:3c:84:f2:8a:5e:36:
                    41:2d:70:18:a5:d9:84:9d:2f:d0:6f:cf:de:bc:5a:
                    70:17:25:59:14:ec:05:bc:db:cf:13:6b:68:ea:c8:
                    11:09:fd:93:f1:8a:b8:f9:a1:45:52:ea:14:30:e7:
                    d6:fb:17:83:82:22:ad:c3:ed:4c:5c:7e:49:92:bb:
                    00:4d:74:38:1a:c8:0b:df:43:39:68:a0:18:35:16:
                    26:c1:42:56:aa:f0:84:f7:44:c8:a7:0a:45:a6:89:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8D:D7:E3:18:57:A2:7C:73:79:C8:FB:D1:8E:B9:22:D3:C5:46:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74585316-e1f0-3bdb-b799-f903d43bdce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:88:f9:31:8f:66:61:ab:26:70:7b:4c:f2:24:c4:92:5a:3e:
         b3:21:13:d0:79:ee:f9:02:57:dc:27:5e:41:37:be:7a:ff:6a:
         69:71:52:bf:40:de:44:3f:93:d9:fc:c5:37:9a:d8:db:57:94:
         be:0f:a2:7a:e6:3f:49:91:36:5b:8b:5f:be:82:71:6a:76:86:
         eb:19:9e:38:3a:13:97:a7:6b:18:44:0a:32:56:e7:fc:19:8a:
         11:f7:bb:9b:9e:4c:59:3d:b4:7b:68:61:ca:50:4f:bb:62:cc:
         a9:cb:d5:f3:72:ce:3a:13:bf:2d:86:8f:be:06:47:ac:3d:ef:
         13:2d:41:6c:36:68:f5:f9:69:86:38:3d:cc:06:10:33:a5:3a:
         59:57:f8:99:6a:f6:be:4d:05:9e:7d:b3:b9:52:5d:2d:89:fe:
         50:fe:b5:45:4e:62:39:89:af:67:66:f2:70:8c:4f:79:eb:17:
         7f:8c:6e:7a:77:4a:bf:23:1b:30:67:44:8a:89:fe:87:04:81:
         44:0e:88:84:4e:4a:14:12:df:da:6e:c0:7a:f3:d1:0a:0b:7e:
         6c:03:0c:57:06:6f:b7:49:43:4e:21:74:71:e5:95:59:f4:c9:
         58:db:22:9c:c9:af:f5:7c:61:a2:0a:69:85:b7:f2:88:ae:6f:
         b3:fe:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:33 2025 by rpki-client