Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dabd2aa-bdc4-32c2-a42b-f96694809e4f.roa
File:                     7dabd2aa-bdc4-32c2-a42b-f96694809e4f.roa (raw, json)
Hash identifier:          36VpmLmcskwhbKPr27q6aSBTkzB1yN/3Ufes/9q09qI=
Subject key identifier:   B8:0C:9D:0D:1F:A2:5E:9B:24:27:F8:17:A8:47:70:07:25:83:A6:A0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9FD65342963BC76EB420
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dabd2aa-bdc4-32c2-a42b-f96694809e4f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:9f:d6:53:42:96:3b:c7:6e:b4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4765e8f7-e031-432b-8c74-08142bfe3738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:8a:44:30:cb:bc:39:27:52:94:ba:0f:fb:
                    18:c3:c5:6b:f9:9c:ce:27:58:76:81:b0:6c:fe:8e:
                    87:1a:09:05:6d:50:a2:d9:bc:b0:28:ff:65:30:0f:
                    26:ee:34:9f:95:fd:ef:bd:26:e6:5e:9c:72:33:ca:
                    88:86:d2:58:cf:d6:7a:44:99:0b:f0:b1:74:ad:7c:
                    25:ae:0e:3f:0a:7d:f9:9b:d9:66:9b:ec:73:bd:ef:
                    c9:36:14:6c:68:28:27:b0:17:04:c1:05:76:b8:ca:
                    6a:d3:fe:53:84:e6:47:fa:e0:92:fc:18:40:ae:ee:
                    b7:e2:d1:cf:5f:00:1a:7f:61:99:e2:ba:a7:f6:7f:
                    07:76:5b:04:6d:df:f6:fe:88:50:b3:9b:19:32:99:
                    89:c3:de:6e:28:11:8c:a5:85:b4:5f:b0:c8:e4:68:
                    1c:cc:16:12:c4:80:d2:c5:f6:27:13:f2:75:1f:04:
                    d5:68:e7:36:73:99:ba:12:bd:35:3f:c9:0a:b5:91:
                    58:52:6c:70:8b:bb:26:dd:03:bc:d4:1d:e7:40:02:
                    de:e6:3c:19:79:65:b7:91:75:3c:7b:9d:a5:99:69:
                    ec:71:ae:78:58:8e:82:81:97:26:97:34:ff:6f:35:
                    03:46:f8:df:7d:01:e7:6b:18:00:b0:62:85:33:11:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0C:9D:0D:1F:A2:5E:9B:24:27:F8:17:A8:47:70:07:25:83:A6:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dabd2aa-bdc4-32c2-a42b-f96694809e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7c:ed:2f:99:13:97:da:13:11:73:d4:7e:1b:e3:27:8f:5e:
         c4:18:3f:99:c1:c3:0a:a8:b9:36:84:0b:26:39:5d:3b:6d:d0:
         74:85:50:b2:f5:33:2a:c1:5a:ad:a7:a5:21:9b:bd:92:7b:d5:
         b3:c0:b0:d1:d0:c4:3a:cb:a5:1f:7e:ef:cc:14:ac:4d:d0:d4:
         6a:ab:8f:46:c6:f7:0c:0a:d0:c8:f8:33:6c:ce:a1:08:8d:4b:
         03:57:89:56:18:2b:d3:55:6b:b3:5a:f8:e2:da:a6:e8:49:a2:
         86:44:a4:08:6b:79:9f:d7:f5:4a:dd:32:5a:06:a1:d3:d3:37:
         5f:88:16:39:75:70:8e:d8:e8:1a:19:d3:95:c7:8a:03:33:76:
         ae:70:a1:7f:de:7d:f0:a5:7f:3d:14:eb:54:ab:20:35:97:a2:
         2f:e6:18:9a:90:de:76:a3:9d:48:97:c9:1f:8b:4d:74:ea:e2:
         d1:d4:cc:b0:af:5d:84:1f:d1:66:c4:57:df:29:10:f0:ba:96:
         0a:32:0b:f8:d1:d6:14:5a:e4:7f:20:e0:e8:87:c6:47:bc:54:
         8a:0e:9d:22:0f:8a:19:f0:76:e1:46:0e:c1:6a:1e:9e:e2:d8:
         b7:88:43:3d:2f:0d:12:6c:ee:f8:a1:ea:67:3d:5b:bc:ba:22:
         24:6f:75:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzZ/WU0KWO8dutCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NDc2NWU4ZjctZTAzMS00MzJiLThjNzQtMDgxNDJiZmUzNzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJuKRDDLvDknUpS6D/sYw8Vr+ZzOJ1h2gbBs
/o6HGgkFbVCi2bywKP9lMA8m7jSflf3vvSbmXpxyM8qIhtJYz9Z6RJkL8LF0rXwl
rg4/Cn35m9lmm+xzve/JNhRsaCgnsBcEwQV2uMpq0/5ThOZH+uCS/BhAru634tHP
XwAaf2GZ4rqn9n8HdlsEbd/2/ohQs5sZMpmJw95uKBGMpYW0X7DI5GgczBYSxIDS
xfYnE/J1HwTVaOc2c5m6Er01P8kKtZFYUmxwi7sm3QO81B3nQALe5jwZeWW3kXU8
e52lmWnsca54WI6CgZcmlzT/bzUDRvjffQHnaxgAsGKFMxE+XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgMnQ0fol6bJCf4F6hHcAclg6agMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2RhYmQyYWEtYmRjNC0z
MmMyLWE0MmItZjk2Njk0ODA5ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2lUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJh87S+ZE5faExFz1H4b4yePXsQYP5nBwwqouTaECyY5XTtt0HSFULL1
MyrBWq2npSGbvZJ71bPAsNHQxDrLpR9+78wUrE3Q1Gqrj0bG9wwK0Mj4M2zOoQiN
SwNXiVYYK9NVa7Na+OLapuhJooZEpAhreZ/X9UrdMloGodPTN1+IFjl1cI7Y6BoZ
05XHigMzdq5woX/effClfz0U61SrIDWXoi/mGJqQ3najnUiXyR+LTXTq4tHUzLCv
XYQf0WbEV98pEPC6lgoyC/jR1hRa5H8g4OiHxke8VIoOnSIPihnwduFGDsFqHp7i
2LeIQz0vDRJs7vih6mc9W7y6IiRvdUY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:19:35 2025 by rpki-client