Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98a26629-f3e8-3905-a64e-67b37e76a1c4.roa
File:                     98a26629-f3e8-3905-a64e-67b37e76a1c4.roa (raw, json)
Hash identifier:          hFCr8dZRvFLcbo6pObVrvK7vKmpv1szZiXok8lQoiHI=
Subject key identifier:   62:CF:43:E8:7C:70:93:31:5A:A6:D1:F7:ED:10:DF:5B:8A:95:99:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCF00DF955B08E0E6648E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98a26629-f3e8-3905-a64e-67b37e76a1c4.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:f0:0d:f9:55:b0:8e:0e:66:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f3a0decb-f227-4f96-a200-d44ed6755cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d4:63:d2:88:5f:62:99:0d:4a:02:d1:fd:9f:
                    4a:c1:e8:12:97:11:0d:8c:82:43:aa:33:62:49:b2:
                    4e:8a:eb:a0:b1:a3:52:16:b7:b4:f2:3c:51:b6:a2:
                    bc:67:10:2b:ad:93:48:f2:13:b3:c7:73:cc:2a:35:
                    07:33:85:3a:e7:3d:ee:58:44:96:e2:fe:af:3e:ae:
                    9b:b4:61:e0:4f:eb:a8:4f:e7:f3:1a:89:45:b1:89:
                    e8:f0:3e:48:ef:b4:ab:54:cb:2f:da:2b:d7:c2:2e:
                    0a:3f:06:09:fe:e3:e3:4d:38:be:df:b0:79:5b:88:
                    4a:3f:10:2e:82:e9:f5:dc:55:14:75:bb:20:2c:ca:
                    d8:7b:c9:2c:02:ca:49:53:ea:a7:50:28:c2:3a:cc:
                    52:3a:28:7a:d6:12:89:f5:1d:dd:ef:87:fa:11:9e:
                    f0:03:72:1a:52:8f:fd:88:bb:50:83:a4:20:b6:57:
                    3a:33:fe:b3:66:fe:1c:f7:eb:ad:53:63:f7:e5:8e:
                    a7:f0:35:5c:70:0f:47:75:a6:b9:4f:e3:5c:f4:0f:
                    c6:3d:5a:81:01:ed:d3:42:a4:d3:f4:b4:6b:11:c3:
                    36:ea:c3:9a:8f:b5:db:32:36:30:d3:de:5a:bb:3c:
                    7d:21:2f:be:e4:63:f4:2a:aa:6a:dc:4a:ad:24:3d:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CF:43:E8:7C:70:93:31:5A:A6:D1:F7:ED:10:DF:5B:8A:95:99:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98a26629-f3e8-3905-a64e-67b37e76a1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:53:4c:80:51:c1:ef:79:69:da:76:9f:ef:82:4b:6f:91:
         b8:3b:ba:fa:59:60:0c:7d:f2:85:7e:9b:17:cc:6e:d8:d7:a6:
         0d:39:38:9b:8f:b4:5f:d7:fa:90:1f:8e:72:4d:04:51:78:d8:
         87:c2:ef:43:05:3b:59:6f:72:d8:07:e1:2f:09:ae:7d:7c:5b:
         66:a0:7d:73:b2:45:b8:84:72:c5:2a:08:b0:af:55:f4:5d:4b:
         ed:a3:d8:1b:63:9a:7d:4c:c6:e2:46:bd:d5:12:8e:88:5c:02:
         b2:f3:c2:90:d9:a7:8c:e7:47:85:5a:01:40:5e:7e:44:bf:d8:
         49:0b:89:d6:d9:7d:65:5b:c2:1f:61:43:d0:7f:da:71:f1:2f:
         0f:88:52:dc:80:dd:c5:25:3f:3d:23:a8:d6:f8:6b:56:bb:49:
         59:ca:a5:78:9a:d1:d6:43:0e:0e:3c:57:21:c4:71:ac:c9:88:
         58:40:ff:80:ed:51:d0:35:94:84:92:97:f5:05:e7:57:2c:42:
         8c:a1:1b:44:6c:46:12:88:c8:19:c5:e6:86:8e:3e:d3:09:19:
         82:3b:2e:4d:9a:e6:39:3a:69:57:ec:6b:25:7e:3b:41:fe:9e:
         5e:86:d0:89:24:24:9f:2f:2c:80:a7:45:d9:36:89:70:46:ed:
         ad:b0:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:20 2025 by rpki-client