Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e0e5034-9ff1-33f4-a7f0-126e7acea5a7.roa
File:                     7e0e5034-9ff1-33f4-a7f0-126e7acea5a7.roa (raw, json)
Hash identifier:          3AxMLh/tkRlQ7XvRTkpGSewpxVV5gefNcah80CZ/93s=
Subject key identifier:   CD:6F:E0:FC:DE:17:7A:13:A1:47:DE:66:EB:3A:F4:AA:A9:BE:DA:B3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9A92A875EA18864E5A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e0e5034-9ff1-33f4-a7f0-126e7acea5a7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:9a:92:a8:75:ea:18:86:4e:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a0a8cde6-9dd9-40d6-889b-8151c1217e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:29:4e:5c:71:12:78:4f:ac:c6:b8:d1:af:df:
                    30:dc:58:05:1f:b7:51:5c:6c:d7:25:1a:d6:73:cc:
                    e8:5b:9d:f2:0f:a7:26:3a:3b:4e:ed:d0:f3:7f:0a:
                    c5:39:63:a0:2e:63:1d:22:33:be:95:2c:1a:25:2b:
                    65:22:88:71:45:6b:04:28:97:1b:ae:09:ae:73:98:
                    24:2e:ee:34:55:ba:1a:3e:57:dc:6a:55:d4:9f:9a:
                    01:9f:01:e1:67:32:a7:49:d9:b0:8a:90:43:b7:26:
                    ee:90:2b:e2:eb:9c:95:0f:76:3f:f7:29:a8:82:61:
                    4e:19:0a:f5:20:3d:9c:dd:44:66:2c:16:69:36:41:
                    bb:2d:59:b3:94:d3:f0:4f:d3:08:82:e4:49:f7:02:
                    50:24:55:21:ea:68:24:1b:cb:5f:e1:cd:d9:f6:31:
                    13:d2:bb:1f:02:23:0a:1b:d1:23:24:10:85:38:1a:
                    f1:a6:ca:0f:e6:bb:70:f3:93:91:ab:03:fa:5d:78:
                    02:51:6c:e0:5e:6f:ac:9c:49:9b:48:5d:4b:6a:4a:
                    bb:5d:d4:96:9e:10:6a:89:51:23:ce:77:ac:88:4c:
                    a2:f8:c2:1a:d0:ad:7d:92:55:b8:b2:6a:4f:ac:18:
                    fe:81:e7:ac:b9:92:86:37:a5:52:7e:65:0e:b5:65:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6F:E0:FC:DE:17:7A:13:A1:47:DE:66:EB:3A:F4:AA:A9:BE:DA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e0e5034-9ff1-33f4-a7f0-126e7acea5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:19:76:1c:f2:4c:5a:16:1c:c4:23:a8:d6:0f:35:87:79:
         84:d1:29:91:01:7c:9e:f3:42:70:2e:0f:4c:a5:99:d2:7b:5a:
         d4:6c:ad:8f:40:29:0f:ce:03:96:e6:2a:c0:52:36:b5:7c:09:
         68:38:f7:4a:3f:70:b9:d1:bc:01:ef:84:c2:cf:3a:f3:ba:69:
         bf:7a:fc:4f:84:b3:b3:dc:c1:cf:db:fa:97:cf:0c:64:fb:c4:
         22:c9:2c:ca:84:3d:04:30:98:09:cb:7a:a0:88:e4:30:26:78:
         1b:71:dd:cd:eb:63:b2:3f:fa:ce:60:5a:a4:72:2d:22:dd:4a:
         45:f2:b0:86:a6:86:26:da:3e:15:14:66:e7:17:85:a0:56:c3:
         e0:13:3d:ad:ba:b7:4a:90:bf:08:51:8d:e2:ed:97:6f:dc:49:
         2f:51:44:62:23:4b:7c:f1:1b:b7:21:79:0d:86:8c:25:a9:0d:
         f0:41:ec:7e:24:66:12:a5:52:af:37:6d:9a:dd:0a:fd:f1:13:
         f8:32:6e:6f:93:9e:09:4e:e1:58:80:97:2b:81:12:bb:b0:27:
         cd:03:ca:b7:ba:84:d6:5f:57:ad:68:b8:74:dc:1e:65:5c:63:
         23:fb:c7:03:d5:68:66:74:7f:07:6c:ed:2f:c4:a4:b1:78:b8:
         05:5a:d2:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzZqSqHXqGIZOWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YTBhOGNkZTYtOWRkOS00MGQ2LTg4OWItODE1MWMxMjE3ZTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ilOXHESeE+sxrjRr98w3FgFH7dRXGzXJRrW
c8zoW53yD6cmOjtO7dDzfwrFOWOgLmMdIjO+lSwaJStlIohxRWsEKJcbrgmuc5gk
Lu40VboaPlfcalXUn5oBnwHhZzKnSdmwipBDtybukCvi65yVD3Y/9ymogmFOGQr1
ID2c3URmLBZpNkG7LVmzlNPwT9MIguRJ9wJQJFUh6mgkG8tf4c3Z9jET0rsfAiMK
G9EjJBCFOBrxpsoP5rtw85ORqwP6XXgCUWzgXm+snEmbSF1Lakq7XdSWnhBqiVEj
znesiEyi+MIa0K19klW4smpPrBj+geesuZKGN6VSfmUOtWV13QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1v4PzeF3oToUfeZus69KqpvtqzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2UwZTUwMzQtOWZmMS0z
M2Y0LWE3ZjAtMTI2ZTdhY2VhNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2jAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHQGXYc8kxaFhzEI6jWDzWHeYTRKZEBfJ7zQnAuD0ylmdJ7WtRsrY9A
KQ/OA5bmKsBSNrV8CWg490o/cLnRvAHvhMLPOvO6ab96/E+Es7Pcwc/b+pfPDGT7
xCLJLMqEPQQwmAnLeqCI5DAmeBtx3c3rY7I/+s5gWqRyLSLdSkXysIamhibaPhUU
ZucXhaBWw+ATPa26t0qQvwhRjeLtl2/cSS9RRGIjS3zxG7cheQ2GjCWpDfBB7H4k
ZhKlUq83bZrdCv3xE/gybm+TnglO4ViAlyuBEruwJ80Dyre6hNZfV61ouHTcHmVc
YyP7xwPVaGZ0fwds7S/EpLF4uAVa0qM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:11 2025 by rpki-client