Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74bdc631-9ac1-3f38-ba09-ecf5fb5d245a.roa
File:                     74bdc631-9ac1-3f38-ba09-ecf5fb5d245a.roa (raw, json)
Hash identifier:          wbXN+H7XZ6gCgEGsFK4neFQ5TqNwGnDvBrOG324p1AQ=
Subject key identifier:   86:BC:CE:FB:C3:AB:45:DB:AD:72:BE:79:B2:C7:16:6A:14:1C:9B:42
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCF11572F037CB822A3200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74bdc631-9ac1-3f38-ba09-ecf5fb5d245a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:f1:15:72:f0:37:cb:82:2a:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e85d20ab-94b2-484e-adbd-ff0861820b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:f1:77:1c:c7:f1:9f:ac:37:03:a3:bc:73:
                    ff:fc:a6:6b:51:ab:20:db:d3:d4:1f:8d:f2:64:2b:
                    9f:f8:3f:b2:15:d7:c3:58:42:3d:7d:57:57:dd:7b:
                    dc:5a:d7:a9:23:5d:e2:49:54:2b:a5:5f:7c:b0:50:
                    91:a0:74:16:29:5f:36:7b:c5:fd:c7:98:da:7c:55:
                    50:44:7a:04:3e:2b:92:8f:4b:09:0d:b8:da:df:35:
                    d0:05:e1:b4:a7:a2:da:d1:69:63:39:04:b3:13:75:
                    b7:a1:f7:9f:65:bd:f7:90:db:18:51:03:fd:10:6e:
                    3b:65:24:bf:2d:36:74:71:a6:32:5b:82:4f:f3:16:
                    84:10:30:a9:6d:0c:c9:06:56:27:5b:e0:18:5d:a6:
                    9c:28:d0:05:f6:94:45:59:d5:9d:bc:13:93:45:e7:
                    2d:ee:71:46:ed:b8:f4:a8:4a:62:ab:88:85:36:9c:
                    90:17:92:70:2e:f1:40:31:f0:35:4d:7e:d1:11:df:
                    65:ab:de:07:01:41:07:96:de:2a:d6:17:43:40:d2:
                    cf:93:64:9a:da:5f:54:3f:fa:6d:b4:9a:76:ba:a7:
                    e1:28:b1:84:38:f9:a5:00:2f:39:63:9b:f2:41:70:
                    76:05:aa:c1:38:2b:e3:8a:58:12:e9:f8:c7:7b:f9:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BC:CE:FB:C3:AB:45:DB:AD:72:BE:79:B2:C7:16:6A:14:1C:9B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74bdc631-9ac1-3f38-ba09-ecf5fb5d245a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:60:37:02:0d:22:7b:d7:da:ae:09:93:12:43:36:a4:5d:64:
         2f:00:03:9f:a4:c1:37:0e:bf:33:4d:4d:ca:e8:da:5c:55:d9:
         2c:09:68:88:dd:4b:3c:3a:11:2f:f0:b3:78:a2:cc:d8:66:49:
         92:9a:1d:ce:85:04:8e:ce:60:59:5d:44:c0:28:81:90:aa:c3:
         1a:d6:0a:85:57:f8:bb:47:4c:85:d6:e3:d7:d4:ae:66:57:42:
         aa:c3:c6:de:cb:ef:18:26:b9:56:8b:c5:c0:ff:c0:79:10:98:
         ff:37:38:f9:08:b3:18:2d:02:05:c7:5c:3a:34:4f:e1:83:75:
         3c:3e:d3:eb:e0:d0:46:c5:08:c4:d7:a0:c6:b0:bb:bb:1f:79:
         88:31:3f:8b:fb:a8:57:d5:81:6a:99:16:05:48:f8:82:ae:03:
         76:2e:7e:84:4a:fa:2e:ca:91:13:bf:ed:7a:e4:36:ea:25:62:
         33:cf:73:29:8f:4d:8e:84:f9:9e:55:3e:38:45:ff:48:27:e5:
         36:a8:d4:a3:10:7f:a7:f3:fb:42:3e:c8:da:f9:36:37:1e:db:
         19:f4:f7:33:dc:b2:3d:34:28:61:3d:73:59:f3:e1:8f:e7:2e:
         04:0a:3c:51:4a:d8:f9:59:10:79:71:ad:7e:01:f8:5f:e9:aa:
         b9:de:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:28 2025 by rpki-client