Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82b2409b-1188-3abb-bcd3-535e8b5db072.roa
File:                     82b2409b-1188-3abb-bcd3-535e8b5db072.roa (raw, json)
Hash identifier:          NNtjaTSmsWCsvDiUU/+ufwdv3WMjMquBCTCLvqJM73I=
Subject key identifier:   2C:1A:23:55:6A:D1:4B:D4:10:95:71:43:A8:2C:40:B4:1C:48:B2:5A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9CF3F8E25163A97D7768
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82b2409b-1188-3abb-bcd3-535e8b5db072.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:9c:f3:f8:e2:51:63:a9:7d:77:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=8678209b-67eb-4ca5-aa4b-b1cc6a45a920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:d3:e5:99:3b:7f:ac:fc:a1:3d:ce:bc:ed:
                    94:6c:11:45:29:7e:d7:13:3c:ae:92:10:c3:3a:a6:
                    0f:55:4f:66:0c:f9:d1:c1:6f:23:d2:dc:49:2d:52:
                    0c:1e:55:2d:e6:bc:a7:c2:6d:9c:fd:eb:8b:f1:49:
                    13:90:53:df:27:ad:93:89:77:be:71:fa:72:ac:64:
                    3b:c5:9b:70:3e:44:be:bb:09:ed:43:11:8c:3d:8b:
                    d9:8a:f4:11:72:9a:4c:3c:93:cc:ee:25:2d:6d:d4:
                    a0:4d:ed:00:5d:15:3a:40:55:4b:dd:e9:bf:d4:a5:
                    75:a5:80:57:21:0b:b2:ca:9b:82:6f:33:df:81:5c:
                    d2:aa:ab:6f:f1:90:44:a7:42:99:20:fc:cc:81:7e:
                    82:a0:95:33:6e:dc:6d:25:31:3b:4a:b7:66:4d:23:
                    0e:fc:25:79:f8:59:73:78:d0:50:a9:88:6a:a2:54:
                    2f:1e:38:dd:00:e8:86:dc:be:ac:eb:71:43:73:73:
                    82:31:e1:3d:8e:55:39:3d:25:66:66:46:54:dd:b3:
                    2b:22:84:37:2d:47:66:5a:a4:ce:b1:62:2d:8e:5e:
                    44:c3:9f:bf:86:df:7b:09:77:92:e8:96:0e:f4:6b:
                    fd:52:5b:99:e0:32:24:df:04:72:1e:ab:06:b5:e8:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1A:23:55:6A:D1:4B:D4:10:95:71:43:A8:2C:40:B4:1C:48:B2:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82b2409b-1188-3abb-bcd3-535e8b5db072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:ff:96:57:52:ed:30:ab:8f:0f:2a:40:2f:d9:d7:b4:e7:
         db:96:bf:01:7c:80:1e:84:0c:6a:e0:d2:31:1c:18:c9:be:3e:
         6c:96:58:d7:fa:0d:67:de:0e:3d:91:90:d7:21:c9:9c:5c:48:
         65:0a:d0:4c:c4:75:c1:2d:3d:d3:4a:f5:b9:16:07:d2:28:7f:
         40:65:ec:4d:34:88:4a:ea:9d:c6:cc:14:29:ec:cd:89:67:bb:
         3f:4b:bb:29:76:a7:c1:89:e8:7e:a3:14:a6:0f:0e:af:6f:4f:
         66:28:af:f5:22:33:ba:ba:a1:8d:e8:01:2e:de:d0:8a:4f:9d:
         6d:4f:d0:a8:81:55:5e:89:97:b0:41:39:76:bd:81:04:36:a1:
         05:8f:02:1e:11:8f:38:e3:91:fa:29:cb:e3:7b:50:e8:92:cb:
         5c:fd:e6:67:ab:0e:33:2e:b8:22:ce:43:f2:14:b4:38:d8:3a:
         c8:3c:44:8e:c4:9c:03:a4:90:a7:d3:3a:0b:02:81:db:12:d0:
         a8:56:8d:91:f8:b1:97:5b:e7:fa:41:d4:b9:70:b2:8d:f1:fc:
         15:78:e7:d3:88:c5:bd:a7:17:9b:dc:72:0d:1b:15:d8:99:f8:
         c3:86:7d:e4:d7:3d:dc:7c:d8:84:4d:92:fa:10:79:ab:dd:2a:
         43:3d:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:26 2025 by rpki-client