Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa
File:                     b21bfef4-3d47-3e84-b423-ba543632cf2f.roa (raw, json)
Hash identifier:          aUL0kdir122ysHJomzFeAH+fzJQ6KDK66Iqy/rtPEoQ=
Subject key identifier:   7B:93:65:CB:3A:59:80:85:B9:58:9E:65:BC:6E:12:F3:0D:C1:2D:92
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCE7C889A6F400054AD480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.105.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:e7:c8:89:a6:f4:00:05:4a:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c76cbc0a-9da7-4cf0-9fc6-1726a3390465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:28:be:a9:3d:76:a9:ed:bd:3b:08:26:66:e8:
                    ae:5f:2f:14:6a:d3:c0:23:2b:59:92:c5:ab:64:d5:
                    d7:23:3f:26:e2:d1:60:5e:a2:52:bd:77:4b:81:25:
                    5d:12:bd:42:33:37:10:62:df:8f:ca:18:80:5d:64:
                    76:77:76:a9:0f:d3:23:e7:fa:ae:dd:99:2b:a4:a6:
                    95:11:4a:e1:fc:4f:f0:02:e1:aa:54:d9:78:36:3d:
                    66:e0:95:17:a4:a1:c9:5f:85:12:31:4b:47:70:5b:
                    91:fa:5e:df:ec:55:bb:54:79:6e:10:95:f2:f1:ca:
                    a9:91:6f:71:04:09:39:93:33:0d:3b:7c:d5:0c:0d:
                    ba:3a:51:2d:71:5b:a2:3c:b8:db:c4:10:b1:03:94:
                    a9:c8:f8:4a:61:d2:44:8f:4e:b4:37:56:89:00:9e:
                    25:4a:12:11:bb:bc:3f:3e:e0:d8:97:a5:db:67:fd:
                    dd:61:5c:9c:65:6f:a1:0e:ad:48:c9:0e:95:2f:e4:
                    53:66:e7:97:65:05:8a:f6:4c:4f:fd:bd:b9:b8:a0:
                    64:94:d1:f3:9d:b5:56:69:b1:40:ae:6a:08:86:16:
                    62:bb:32:74:14:24:06:6f:d9:81:64:14:c8:69:c9:
                    7f:4e:9e:62:14:4d:54:1a:3d:ff:6a:1c:d7:d9:b3:
                    c3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:93:65:CB:3A:59:80:85:B9:58:9E:65:BC:6E:12:F3:0D:C1:2D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:29:51:31:b5:68:9d:22:b0:d3:e7:ac:89:b8:4a:43:59:
         90:29:35:7e:c4:91:5a:ba:03:79:0f:f2:30:7e:bf:2b:ef:e1:
         4b:ca:f0:e0:e8:67:c0:18:f0:6d:a2:64:1a:98:ef:5e:2d:b2:
         41:af:19:b3:f2:92:72:c0:2c:14:86:69:21:54:44:02:18:3a:
         7c:82:6b:50:62:79:ef:4d:07:00:0a:44:57:f2:84:fc:d7:f2:
         30:40:0e:25:41:db:39:65:0a:b3:1c:52:2e:52:fe:45:f0:2b:
         01:78:03:99:39:89:0b:bd:66:5b:72:b1:a1:d3:e8:6a:49:20:
         a7:11:ea:39:89:41:a8:8f:6e:43:d1:0b:fc:a3:22:b4:55:1d:
         33:b8:3d:67:ad:23:2c:64:ce:12:9e:94:ac:6c:6a:5c:ee:0d:
         7a:f1:60:70:92:e1:2b:03:b3:e0:3f:06:3a:e2:08:b9:58:b0:
         4d:b2:45:2c:d1:35:5e:20:8f:49:7d:c9:20:14:90:fe:d6:d2:
         c2:58:5a:c0:83:fa:81:7f:d6:98:fa:ed:7c:9b:b1:81:7b:57:
         d0:55:9b:31:38:30:2d:05:60:5a:78:d8:e5:c2:04:b5:7a:19:
         20:13:b1:22:a7:84:ca:26:e8:11:9d:b2:02:f3:ad:4f:e8:f9:
         25:e2:05:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzOfIiab0AAVK1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
Yzc2Y2JjMGEtOWRhNy00Y2YwLTlmYzYtMTcyNmEzMzkwNDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ii+qT12qe29OwgmZuiuXy8UatPAIytZksWr
ZNXXIz8m4tFgXqJSvXdLgSVdEr1CMzcQYt+PyhiAXWR2d3apD9Mj5/qu3ZkrpKaV
EUrh/E/wAuGqVNl4Nj1m4JUXpKHJX4USMUtHcFuR+l7f7FW7VHluEJXy8cqpkW9x
BAk5kzMNO3zVDA26OlEtcVuiPLjbxBCxA5SpyPhKYdJEj060N1aJAJ4lShIRu7w/
PuDYl6XbZ/3dYVycZW+hDq1IyQ6VL+RTZueXZQWK9kxP/b25uKBklNHznbVWabFA
rmoIhhZiuzJ0FCQGb9mBZBTIacl/Tp5iFE1UGj3/ahzX2bPDgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuTZcs6WYCFuVieZbxuEvMNwS2SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjIxYmZlZjQtM2Q0Ny0z
ZTg0LWI0MjMtYmE1NDM2MzJjZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2mVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtcKVExtWidIrDT56yJuEpDWZApNX7EkVq6A3kP8jB+vyvv4UvK8ODo
Z8AY8G2iZBqY714tskGvGbPyknLALBSGaSFURAIYOnyCa1Biee9NBwAKRFfyhPzX
8jBADiVB2zllCrMcUi5S/kXwKwF4A5k5iQu9ZltysaHT6GpJIKcR6jmJQaiPbkPR
C/yjIrRVHTO4PWetIyxkzhKelKxsalzuDXrxYHCS4SsDs+A/BjriCLlYsE2yRSzR
NV4gj0l9ySAUkP7W0sJYWsCD+oF/1pj67XybsYF7V9BVmzE4MC0FYFp42OXCBLV6
GSATsSKnhMom6BGdsgLzrU/o+SXiBVw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:35 2025 by rpki-client