Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa
File:                     aaf1c878-0f5a-35f3-834c-70d654786038.roa (raw, json)
Hash identifier:          kHluBYd533vLT/dat9j5RuQi1RV7WQSQM6BW0BBs/yQ=
Subject key identifier:   17:85:5E:C8:CD:C2:E5:DB:D2:A8:CE:69:91:E4:ED:AD:7D:47:AC:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB412A1C82D25CBBD5D88
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.107.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b4:12:a1:c8:2d:25:cb:bd:5d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c35f2221-ccc4-4015-be47-632c1d85a5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:73:20:31:54:56:2d:25:2d:b7:a9:53:a7:
                    e5:36:2b:ae:19:2a:ce:84:a7:fc:15:6f:d9:b7:98:
                    16:c2:92:80:89:b9:2b:73:8a:91:51:26:c8:da:d1:
                    c1:dc:5f:06:75:eb:32:49:8e:d1:ac:e5:5c:25:8c:
                    33:63:7f:ec:60:94:a3:d4:c1:f2:fa:11:75:ac:36:
                    4d:c3:ef:69:8c:99:8d:a8:72:77:d0:ad:2c:a5:c9:
                    8e:78:e5:74:2c:b8:03:1c:39:51:a0:e6:1a:94:4f:
                    c9:ee:e5:82:97:64:db:39:39:00:64:f7:c3:ee:88:
                    ed:9c:45:e3:1a:81:b3:35:ed:2f:67:4f:ab:75:ad:
                    83:ca:11:72:25:86:1f:e7:02:bb:32:8d:23:cc:45:
                    cc:82:0e:c5:b4:b6:e3:bc:5d:08:15:e4:c0:38:02:
                    f2:2b:5c:a5:73:4e:1f:b9:de:9b:44:66:31:75:da:
                    f5:7f:12:37:7a:c4:c3:3f:85:c9:79:9e:b2:a5:f3:
                    a1:15:4d:dd:98:7f:a2:ce:98:ba:97:8e:be:9b:c6:
                    43:ea:ed:47:0e:af:cf:85:ce:7b:5c:98:0d:77:59:
                    b2:97:0a:29:9b:d3:00:7c:a0:71:56:78:55:93:3a:
                    a8:36:e7:5c:81:0c:74:82:f8:c1:e4:65:50:70:54:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:85:5E:C8:CD:C2:E5:DB:D2:A8:CE:69:91:E4:ED:AD:7D:47:AC:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf1c878-0f5a-35f3-834c-70d654786038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:aa:f1:79:6f:50:a6:ee:82:2b:d8:8e:d5:9b:dd:1e:06:9b:
         1a:cd:8e:98:5a:5a:e6:07:39:7d:ee:da:4f:24:27:ae:0c:a2:
         79:78:6c:f2:3b:35:56:3a:30:3e:b0:25:c4:f5:30:68:d1:7e:
         0e:e0:b7:22:4c:af:e5:e8:fc:9f:0f:a0:5a:3d:77:17:9e:0f:
         17:62:d1:17:7c:73:84:ce:85:2e:41:d9:bd:41:2c:3f:14:53:
         09:20:a6:97:bb:10:62:7c:df:12:b2:4e:8a:50:f7:18:05:9f:
         7d:7c:06:85:5e:6a:43:3b:71:a7:da:7f:74:94:a2:3e:73:17:
         ec:e9:e2:2d:18:b5:fc:39:78:b1:b7:0e:68:80:f5:5a:93:38:
         4c:22:8f:41:b3:ff:bd:b4:cc:06:f7:a1:a1:d0:23:cd:39:79:
         94:a7:33:ce:1c:9e:e5:05:8f:8d:18:01:f9:89:da:0c:43:fe:
         0c:d6:e1:f1:e0:f2:38:9f:49:2c:49:f1:39:bf:f3:10:d5:ef:
         ff:46:7d:38:af:81:4c:84:5a:72:08:9e:3c:da:03:1d:2e:26:
         c2:30:f2:76:10:28:69:e9:11:97:cf:b5:69:9d:1b:68:94:5b:
         69:bd:dd:0d:d3:6e:fd:c9:dd:0f:f0:bd:bc:66:29:91:11:c6:
         23:49:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:55 2025 by rpki-client