Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95683629-66cb-3d0d-bf26-fc1e1d42cb1f.roa
File:                     95683629-66cb-3d0d-bf26-fc1e1d42cb1f.roa (raw, json)
Hash identifier:          mDkzw4QgR+LxIZuW15S7CMy+Jy61Vm56YeEdDJ2lvBY=
Subject key identifier:   A2:BA:E1:79:80:A2:2A:93:33:65:CA:40:D9:C8:B0:FD:AF:65:32:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCE1D173311D3AFFABBC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95683629-66cb-3d0d-bf26-fc1e1d42cb1f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:e1:d1:73:31:1d:3a:ff:ab:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6d46190e-b2fd-4eb7-b5b9-e10499e871ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:9c:4b:6c:ae:81:9c:10:e5:41:c5:a9:86:
                    62:53:48:21:ab:4a:c6:59:92:c6:ba:60:51:c4:ff:
                    16:27:74:ad:0b:39:be:53:ac:a2:86:2f:c8:c7:be:
                    14:14:04:6b:22:f0:48:1a:d0:3d:26:c4:cd:f4:51:
                    36:98:cc:51:94:8c:ce:94:59:f7:c0:79:58:ea:2a:
                    70:b4:c5:02:5e:d6:29:28:6e:63:9d:59:f9:d5:ed:
                    67:db:06:42:8c:a9:29:8f:a7:70:0f:fc:14:dd:78:
                    07:37:7c:e7:40:7b:6d:7d:37:8b:66:fb:e7:0c:44:
                    c1:ce:84:89:b1:02:cf:e8:45:b0:68:11:07:9f:6f:
                    61:32:75:8d:74:32:47:61:e0:01:b1:eb:84:26:f4:
                    f1:cb:1d:0e:55:b3:73:22:28:3c:9c:0c:6f:a4:c1:
                    50:5e:f6:40:e3:9d:9c:e3:87:a8:fd:d8:d4:39:c6:
                    d4:16:b7:3e:28:88:c8:7d:6f:28:31:25:e9:92:e2:
                    8e:8f:35:1c:d8:c6:52:57:4a:32:94:20:d4:d6:82:
                    73:ae:1b:8f:c6:ce:62:1b:64:a1:ea:27:f3:e6:87:
                    03:86:78:a6:22:23:5e:4e:23:d5:33:92:22:8a:df:
                    86:57:75:f2:1c:50:65:38:58:f5:7e:7e:93:37:73:
                    3f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BA:E1:79:80:A2:2A:93:33:65:CA:40:D9:C8:B0:FD:AF:65:32:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95683629-66cb-3d0d-bf26-fc1e1d42cb1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:27:56:05:2a:7e:73:f2:85:d9:61:60:c1:9c:a0:b1:db:
         41:85:c6:23:30:93:3f:40:26:fb:3b:17:20:00:3d:30:d9:c8:
         7d:85:22:30:33:33:ec:de:de:62:09:26:f2:1f:ba:19:cf:b7:
         2e:05:bf:2d:7e:a7:1e:67:8d:fd:18:30:c8:6b:d0:a0:b6:95:
         66:de:18:ed:cf:2c:a7:38:7c:44:18:23:33:41:22:16:4c:74:
         aa:62:3d:d7:37:14:80:10:9c:ac:23:c2:89:ff:5e:58:c0:e6:
         3d:a3:f0:b6:2d:1f:ed:b2:eb:17:3f:f0:9a:db:ef:a2:01:f6:
         d1:fc:f1:ce:1c:92:ee:af:66:8d:64:08:fc:aa:9c:2d:2b:d0:
         c7:73:fd:93:93:ef:7b:a2:81:ac:dc:cb:dd:50:63:6c:3d:c6:
         40:d2:8f:be:f2:c8:df:f6:21:d7:6f:8c:88:59:5b:a3:4a:76:
         e6:7a:26:70:7e:2c:ca:10:09:d8:fc:2a:4c:b8:13:1c:6b:ce:
         cd:73:40:57:74:ff:b1:ca:40:d9:3e:bb:ee:e2:6c:a2:69:f0:
         5d:e1:07:9b:d0:aa:0e:62:dc:a6:8d:e2:02:76:96:cc:fd:1e:
         f7:32:9d:ea:2c:61:5c:3d:5d:ab:75:c4:22:78:99:a1:02:af:
         0a:cf:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:48 2025 by rpki-client