Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a09a5a8b-77ea-3eb1-a082-25cd43a905fb.roa
File:                     a09a5a8b-77ea-3eb1-a082-25cd43a905fb.roa (raw, json)
Hash identifier:          S9Mt5WnWjXFBO79r5I39EFTyIRTm8ZYpJ4lscAc7kHw=
Subject key identifier:   1A:99:D8:2E:C8:F6:CC:2A:8D:DC:50:C8:04:25:23:46:F9:0B:B8:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCF21E84559E94D4021A40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a09a5a8b-77ea-3eb1-a082-25cd43a905fb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:f2:1e:84:55:9e:94:d4:02:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=bca35faa-8e74-4808-aef9-dac846943455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:0c:0c:ad:0f:23:b9:72:05:0f:0c:20:58:
                    83:a4:77:47:b3:d4:f5:22:84:6c:13:e9:31:07:f2:
                    c6:87:b8:2a:ed:bd:fe:dc:4f:90:15:1a:d0:81:ad:
                    24:3a:4a:37:b0:1c:5c:b4:22:de:93:4e:39:7a:1c:
                    bb:5f:3c:17:bd:62:1c:ae:1a:74:ee:ad:8c:39:c3:
                    a6:b4:7c:bf:be:ed:77:cc:9c:63:60:26:27:79:cf:
                    0e:91:60:27:e5:27:97:29:c9:59:22:63:c0:ee:3c:
                    72:51:f7:52:6c:6d:88:a4:fa:97:fe:6f:15:82:89:
                    a4:f8:c8:a6:e1:cc:00:e5:18:0b:84:88:96:5c:de:
                    fc:00:b9:73:0a:90:c8:50:42:7d:25:05:18:c4:d3:
                    6a:ce:a0:ec:d3:65:97:49:e2:1c:39:7e:2c:b4:17:
                    4c:84:47:b1:7c:98:eb:7b:0d:eb:d2:77:f5:26:a0:
                    95:ba:3b:56:0e:6e:32:06:db:fc:c6:29:60:80:98:
                    6e:d5:25:6a:48:77:56:73:26:58:40:62:58:ac:62:
                    ec:9a:b7:07:17:6d:db:d0:c0:34:7e:f6:a7:e2:6b:
                    fb:5f:7f:83:36:8a:79:17:6d:d7:4b:a6:f4:ad:fa:
                    af:87:a4:fd:f6:ce:ef:2c:2f:e2:7b:93:25:89:1e:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:99:D8:2E:C8:F6:CC:2A:8D:DC:50:C8:04:25:23:46:F9:0B:B8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a09a5a8b-77ea-3eb1-a082-25cd43a905fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e7:c8:de:92:37:c6:7a:4b:c0:7a:15:c8:17:f9:17:be:40:
         84:61:f5:4c:0e:31:63:4e:af:28:ec:6b:98:57:51:fd:fb:92:
         03:bc:0f:ed:4f:b2:c6:bd:c2:ee:ca:3e:44:5a:a4:65:b9:9e:
         c8:f9:bd:f0:f5:a0:74:a7:0f:5e:63:d8:36:5a:48:46:c3:27:
         95:22:73:94:a2:e1:1b:59:e5:84:8e:ed:a5:f6:b9:c2:39:9c:
         02:30:b4:35:4d:98:c4:72:47:5a:37:04:e3:a6:56:14:68:4c:
         8e:bf:2b:b0:3a:e3:48:11:ee:42:5f:e4:fc:8c:35:e8:70:e6:
         ad:62:4a:81:88:59:c9:23:dc:c6:d5:f4:0b:6b:36:ca:d4:48:
         af:71:91:29:29:fa:e6:59:5e:83:e7:8e:0d:2c:c9:1f:72:d2:
         e2:9f:33:2d:68:19:f1:72:f2:6e:41:6a:88:7c:63:61:66:27:
         5b:f0:e5:17:a3:31:31:42:7c:05:fd:96:66:9f:6b:a7:e5:d0:
         71:c6:29:25:42:e3:e9:0e:1c:a1:73:68:e6:b0:91:3b:d3:59:
         56:50:b8:34:a7:84:42:4d:a8:b7:0b:ff:f2:51:5f:7c:44:67:
         dd:03:40:41:de:5f:25:2b:1d:e5:79:70:8b:a7:c9:c6:32:3d:
         e4:e1:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:19 2025 by rpki-client