Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901fb6dc-c9df-30c7-a101-1170ed4ca168.roa
File:                     901fb6dc-c9df-30c7-a101-1170ed4ca168.roa (raw, json)
Hash identifier:          rjzEgbVqp/Hme4L5yX2lWhBTCtb0LOWTddYN9IJlYUc=
Subject key identifier:   F8:7F:23:3A:3E:48:C1:AA:49:7A:98:D4:A5:49:6E:A2:3A:96:EC:E5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCEB38E6344B9C8F1D7780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901fb6dc-c9df-30c7-a101-1170ed4ca168.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:eb:38:e6:34:4b:9c:8f:1d:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6dd08a6e-3485-4f3c-8e37-42e7158c5857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:0a:5a:d6:4c:f6:c7:e4:e5:dd:3b:5a:a3:
                    d0:89:09:16:10:ea:43:cf:90:19:e8:d7:2b:fd:53:
                    84:12:27:d2:97:7a:a1:c8:0c:b1:c8:e1:d8:d7:3a:
                    40:47:20:06:1a:2a:ad:30:f0:d1:35:91:d4:ce:57:
                    56:9f:dc:93:fe:42:8e:c3:a9:00:22:7a:3b:5a:49:
                    b2:55:cb:84:a0:52:c5:3c:30:4e:60:8e:a7:68:96:
                    fb:29:ed:a1:5d:58:29:ac:cf:d3:29:0d:4b:df:d6:
                    c4:6a:ff:a0:5e:0c:2a:ec:30:ef:6c:66:f8:f5:30:
                    47:78:05:7c:df:7d:fb:ab:1a:7d:fe:f0:4a:0c:3a:
                    df:62:4d:44:8c:61:07:42:e6:0a:b2:b0:59:2c:f4:
                    c6:4c:69:0a:f3:22:72:c2:34:65:e7:94:53:e9:1f:
                    aa:0d:23:07:62:f5:56:9a:59:78:6c:2a:12:30:3a:
                    2a:82:f7:84:0b:f8:f7:1a:17:ed:b1:53:d2:5b:54:
                    22:19:f0:82:b7:64:b2:5a:b5:d7:3b:c6:dc:28:e0:
                    68:9d:06:6c:70:07:84:b2:12:cb:9e:89:47:f0:ae:
                    dc:33:0d:da:93:88:29:e3:df:7a:54:42:a2:66:45:
                    3a:ab:68:5d:9d:6c:68:44:ae:b7:66:8c:5e:0b:53:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7F:23:3A:3E:48:C1:AA:49:7A:98:D4:A5:49:6E:A2:3A:96:EC:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901fb6dc-c9df-30c7-a101-1170ed4ca168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e6:df:12:fd:ca:ff:4c:f4:44:b2:cc:7c:18:b0:13:ea:db:
         ef:d6:8c:88:fc:9f:54:08:d5:f8:f2:a9:81:dc:21:4c:11:6d:
         01:1e:b6:bf:62:38:37:08:f2:80:75:61:0d:7f:94:82:a6:82:
         ba:a7:cb:e8:12:fb:80:0d:24:50:36:f1:bb:de:a3:bf:2e:46:
         2d:7e:b1:ee:b8:28:0d:d5:f1:d6:96:11:64:4a:46:46:cd:bc:
         e2:a0:47:17:3a:de:3a:c3:87:14:c6:6e:6a:15:92:bc:d2:21:
         30:e0:53:88:02:a3:3f:21:94:6f:a2:e4:4d:69:2e:ab:b5:ef:
         59:07:cf:eb:85:a2:af:01:bf:d8:0f:21:9f:48:7c:1a:45:b5:
         6f:98:dc:58:a4:91:92:9b:b9:fe:c3:be:ae:c8:bd:37:d0:2f:
         52:19:79:a9:00:da:c1:ab:ba:c4:51:3d:3e:f2:44:1c:62:54:
         26:76:f1:f1:9d:eb:91:a6:c1:f3:d1:1a:4f:e0:df:90:06:8a:
         58:c7:2e:c8:f2:db:6e:64:c4:a6:07:f7:f2:ba:5d:fe:b8:e5:
         02:61:77:ae:0e:4c:0e:f1:34:8e:53:84:4f:c2:ac:4e:97:81:
         90:64:a4:33:1f:1e:91:8d:49:1e:de:c6:77:00:82:22:d8:2b:
         06:4f:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:29 2025 by rpki-client