Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91c74b4a-b238-3f29-8dfe-d0e3d2260c1f.roa
File:                     91c74b4a-b238-3f29-8dfe-d0e3d2260c1f.roa (raw, json)
Hash identifier:          jKnhbffroLNcgv/dKqz6AAPfYUpvffaIb/8+djwYW5I=
Subject key identifier:   52:88:A0:16:F2:D1:97:E9:AC:7B:4D:6D:B9:F6:3E:7E:A9:44:B6:F7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCF7EA49C617B5155CE280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91c74b4a-b238-3f29-8dfe-d0e3d2260c1f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.107.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:f7:ea:49:c6:17:b5:15:5c:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0fcadea6-8b6f-44bf-b609-38f493b37b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bf:cc:0e:b0:a9:92:6d:14:1a:4e:7d:99:e6:
                    20:2b:b7:fa:8c:47:3d:4a:93:20:47:b6:42:5e:21:
                    41:3b:32:35:d0:c8:e2:1b:bc:b9:cf:67:c3:e0:d8:
                    86:b2:40:98:58:4e:54:a4:6e:2e:bb:a8:5c:8b:4f:
                    b5:c1:fb:f4:69:99:0f:c5:46:e7:e0:fe:87:71:a3:
                    67:ac:86:ab:9b:f2:98:94:03:5f:fa:d5:6a:8e:51:
                    77:98:be:3d:d3:b1:b5:88:08:4a:84:51:d2:dd:58:
                    3c:6a:d3:d0:ba:3f:82:2b:73:cd:e3:bc:16:dd:42:
                    66:73:a6:e9:1b:2e:e8:51:bc:31:67:ab:69:b1:28:
                    b3:87:7d:f3:dd:07:ba:9f:fc:1d:3d:7d:85:f3:4e:
                    c8:74:f3:8f:c0:eb:7b:25:21:57:19:5d:c6:9a:de:
                    05:0c:21:d1:3c:d2:65:9b:cd:d1:e2:00:2f:cf:b9:
                    02:5a:49:fb:56:12:df:7f:56:37:ee:97:fc:1c:c9:
                    48:f8:11:91:3a:67:8e:91:12:4b:77:55:38:11:1c:
                    c7:16:c4:dc:1c:91:a9:2e:7e:9c:eb:38:3d:9a:9c:
                    dc:62:58:b2:ba:11:90:82:1d:99:a4:a1:0b:cd:78:
                    c9:98:da:f2:eb:8c:28:d0:b9:ae:a3:0f:4e:27:d4:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:88:A0:16:F2:D1:97:E9:AC:7B:4D:6D:B9:F6:3E:7E:A9:44:B6:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91c74b4a-b238-3f29-8dfe-d0e3d2260c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:04:2d:2e:32:67:8f:70:da:65:18:d9:08:17:e4:62:8a:
         c0:18:16:16:b2:a1:08:a4:e6:ff:61:57:30:2b:57:7f:ba:d7:
         a2:da:1b:de:1d:ab:e4:7d:bc:b1:b1:b4:b3:49:0d:52:d4:84:
         35:28:f9:03:1f:e9:08:f6:c9:67:2b:cb:a0:f9:4c:55:c4:5b:
         2e:4e:bc:2b:c3:f2:9b:36:bb:bb:a6:28:20:6a:3b:a0:8a:ce:
         01:d1:1e:3b:69:a9:a7:68:39:e1:e7:80:14:58:2c:e8:4a:f0:
         fa:b9:cf:1d:9e:e6:f6:cb:c8:10:77:b8:11:c0:7e:06:14:be:
         85:96:b2:4a:aa:4f:c5:cc:1d:c8:14:02:ca:ab:77:33:65:a3:
         67:d3:53:0d:e4:e2:8f:03:f8:6f:9d:6f:65:9d:c1:ca:e7:55:
         b6:a6:5d:75:5c:e6:64:df:cf:93:96:ee:f6:8f:16:33:03:b6:
         e2:ae:a0:47:f6:5d:84:11:ec:a2:0f:6d:01:34:e3:2f:f1:73:
         a6:5c:36:70:ee:4a:b1:00:98:17:bd:46:e8:3d:cb:4c:e1:e1:
         4f:e8:92:00:03:35:ef:29:44:ae:a6:b4:9d:ee:06:0a:20:bd:
         53:4e:59:23:0c:d3:a0:1a:ff:0b:fc:9a:ed:15:9a:4c:6a:bb:
         ef:b5:65:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzPfqScYXtRVc4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MGZjYWRlYTYtOGI2Zi00NGJmLWI2MDktMzhmNDkzYjM3YjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb/MDrCpkm0UGk59meYgK7f6jEc9SpMgR7ZC
XiFBOzI10MjiG7y5z2fD4NiGskCYWE5UpG4uu6hci0+1wfv0aZkPxUbn4P6HcaNn
rIarm/KYlANf+tVqjlF3mL4907G1iAhKhFHS3Vg8atPQuj+CK3PN47wW3UJmc6bp
Gy7oUbwxZ6tpsSizh33z3Qe6n/wdPX2F807IdPOPwOt7JSFXGV3Gmt4FDCHRPNJl
m83R4gAvz7kCWkn7VhLff1Y37pf8HMlI+BGROmeOkRJLd1U4ERzHFsTcHJGpLn6c
6zg9mpzcYliyuhGQgh2ZpKELzXjJmNry64wo0Lmuow9OJ9TUjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKIoBby0ZfprHtNbbn2Pn6pRLb3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTFjNzRiNGEtYjIzOC0z
ZjI5LThkZmUtZDBlM2QyMjYwYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2spMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADy9BC0uMmePcNplGNkIF+RiisAYFhayoQik5v9hVzArV3+616LaG94d
q+R9vLGxtLNJDVLUhDUo+QMf6Qj2yWcry6D5TFXEWy5OvCvD8ps2u7umKCBqO6CK
zgHRHjtpqadoOeHngBRYLOhK8Pq5zx2e5vbLyBB3uBHAfgYUvoWWskqqT8XMHcgU
AsqrdzNlo2fTUw3k4o8D+G+db2WdwcrnVbamXXVc5mTfz5OW7vaPFjMDtuKuoEf2
XYQR7KIPbQE04y/xc6ZcNnDuSrEAmBe9Rug9y0zh4U/okgADNe8pRK6mtJ3uBgog
vVNOWSMM06Aa/wv8mu0Vmkxqu++1Zcc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:00:02 2025 by rpki-client