Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e996b1-d96f-3cbe-8060-604a85dd57de.roa
File:                     98e996b1-d96f-3cbe-8060-604a85dd57de.roa (raw, json)
Hash identifier:          fLH5HTlb48PUJlCUOj96tfYB+WUFVzDFkv3DB0+smKk=
Subject key identifier:   B7:78:F1:4B:E0:D6:8F:BC:74:4A:A5:2A:EC:F3:2F:F6:F9:9D:96:90
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCF9E1E5912F5466497600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e996b1-d96f-3cbe-8060-604a85dd57de.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.107.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:f9:e1:e5:91:2f:54:66:49:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=7174066c-7f3c-4359-a180-1774c03e913d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:bf:b7:b0:43:88:ff:99:d3:a1:1f:fd:31:
                    7d:19:38:af:32:e8:9e:60:f1:7d:91:6e:15:64:ea:
                    69:82:b7:b5:64:e2:65:76:bf:64:3a:a5:b0:45:45:
                    01:e6:64:39:bb:ab:ad:2e:f1:6c:a9:53:ce:6c:bd:
                    59:c4:06:08:65:c8:74:be:78:b3:b9:b8:83:a7:21:
                    3e:78:24:59:49:d3:20:2d:3c:78:66:10:e1:f7:a4:
                    a6:fd:2c:3c:c1:d5:a6:7e:83:83:cb:ed:5a:8a:60:
                    e1:40:2b:67:9f:73:12:dd:2b:4d:13:5f:1c:1f:cd:
                    dd:80:db:f7:21:5f:8c:04:f1:0e:f5:63:0d:b2:92:
                    c5:7c:1d:0a:9f:8d:16:23:53:26:ee:1e:f9:df:09:
                    e5:3a:e3:2a:85:71:13:97:8f:83:e1:62:fe:7c:3d:
                    f5:9a:9e:ba:c0:f2:c8:fe:dd:c5:27:85:ef:c3:c2:
                    d7:8c:db:b7:a0:1a:b2:c6:22:7c:4e:45:23:26:9c:
                    5e:9f:d8:58:10:28:ae:b5:9d:c2:86:d3:58:35:66:
                    00:49:e8:7b:4e:6e:7a:27:73:20:59:7c:eb:f0:22:
                    a4:f8:af:68:a7:e9:be:c0:23:aa:01:f6:9c:a3:18:
                    bf:f0:fd:16:63:37:63:8f:0d:cd:a5:bd:61:38:45:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:78:F1:4B:E0:D6:8F:BC:74:4A:A5:2A:EC:F3:2F:F6:F9:9D:96:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e996b1-d96f-3cbe-8060-604a85dd57de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:a0:9b:87:e4:21:4b:f5:e2:11:f8:5b:89:36:10:d5:61:
         3d:b6:34:14:63:81:91:f4:b9:bd:e5:ee:53:72:39:d9:6a:27:
         f6:56:1f:f9:22:2c:82:f5:3c:6b:11:7f:60:97:18:dd:ea:81:
         bf:41:4e:19:85:2a:07:c1:16:88:10:2b:cd:9b:1c:08:96:2e:
         e2:47:03:f6:94:70:aa:72:95:0d:7e:83:e7:f5:2f:4f:75:b5:
         67:06:39:42:27:73:b7:b5:a1:5a:e9:07:01:41:eb:ca:9e:42:
         ac:26:b4:9d:01:08:8a:28:c3:72:11:80:5b:b1:98:44:c9:3f:
         df:b4:18:47:43:e1:f3:fc:c9:bf:fd:9b:96:08:92:d4:db:50:
         c3:04:74:35:80:34:10:61:ad:ef:2a:03:61:dc:2b:20:95:fd:
         78:ee:07:91:fa:23:92:d3:fa:a0:e4:64:a8:ef:b3:c9:0b:64:
         22:22:ca:65:86:d7:a2:eb:14:1d:76:5a:85:a8:0e:18:f8:ee:
         e5:cc:21:75:96:06:6b:2a:b2:80:56:58:10:00:9d:98:22:8d:
         a2:80:77:63:b9:41:46:c4:12:63:90:c4:e7:f0:34:e8:2f:8c:
         af:61:45:52:18:e4:c7:f4:fc:4d:86:3f:46:d7:2a:21:84:e2:
         8c:c4:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:22 2025 by rpki-client