Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b41fa86e-ef94-36a2-8c97-4023568033a7.roa
File:                     b41fa86e-ef94-36a2-8c97-4023568033a7.roa (raw, json)
Hash identifier:          d77yf2frs4C7jEu1i3bqCA9L6pvvpC+kH3r6Pt2AyHk=
Subject key identifier:   1E:12:DB:E3:E5:B7:88:78:F3:15:C2:9D:A5:A6:58:85:3A:2B:6C:84
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDA7E255CA72680DB42380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b41fa86e-ef94-36a2-8c97-4023568033a7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:a7:e2:55:ca:72:68:0d:b4:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d79b005a-92f2-4be1-8a44-b12091f2ae0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:7b:00:0f:6a:b4:3d:b7:74:c9:be:65:32:
                    88:38:f4:3b:88:49:de:21:84:e6:97:2c:e6:a5:97:
                    ff:62:d8:46:47:bd:30:95:ed:88:a4:9c:8a:61:cd:
                    25:f8:ad:69:20:5e:47:90:c3:b4:0f:3c:2d:58:db:
                    f5:e8:4e:cd:2f:ff:5e:3f:66:37:a9:29:28:80:c5:
                    e9:5d:7f:41:3f:11:29:42:56:27:b9:89:3b:0d:8b:
                    24:5b:1b:28:ce:f2:c5:82:f6:2d:bc:c2:f4:5f:f5:
                    0e:18:3d:59:b5:35:3b:7a:51:89:d3:83:d6:12:fb:
                    2e:a8:c1:aa:83:a3:41:2b:9c:fd:d6:77:32:ae:71:
                    9a:f1:0f:09:d3:6f:6a:72:74:98:31:5e:f6:e4:fb:
                    62:c1:74:1a:e5:dc:6c:ac:f8:3a:fa:f4:29:24:3f:
                    45:dd:e0:42:79:0a:7e:9b:c2:54:94:4f:b5:26:5b:
                    4d:cb:12:12:a7:a1:24:fc:70:e7:e9:60:26:18:35:
                    8d:b7:fe:8d:45:c2:4f:76:86:06:93:b6:25:3b:4e:
                    7f:ef:3b:fa:47:22:76:7c:1a:76:ab:2a:03:f3:57:
                    16:4d:82:51:8d:b4:f6:2a:2e:bc:17:aa:3e:7c:b5:
                    b5:15:51:bc:9b:53:e6:7a:98:78:5a:6f:ae:03:4f:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:12:DB:E3:E5:B7:88:78:F3:15:C2:9D:A5:A6:58:85:3A:2B:6C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b41fa86e-ef94-36a2-8c97-4023568033a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0d:6b:1c:61:83:85:78:84:2f:eb:e5:9f:ab:88:f0:c2:0a:
         dd:e8:30:3e:66:80:3b:44:8b:d9:85:bb:8d:64:aa:3f:db:9a:
         de:60:6f:25:ef:16:69:18:58:81:92:f3:07:7e:77:34:86:fc:
         db:57:5a:24:16:06:e5:c4:17:8b:40:df:d0:bb:1d:a8:ff:0a:
         46:3a:c7:42:3c:a6:71:74:5f:5d:0a:48:a1:b5:e3:b3:63:1b:
         d7:89:ac:62:ca:bc:8a:39:24:4e:e1:36:3a:d8:f1:44:89:57:
         6b:9b:49:42:b2:e7:fe:ac:64:18:0d:57:83:af:ef:07:01:77:
         95:d8:f9:76:3a:46:47:fd:e8:95:d4:c3:8d:e7:bb:59:5e:4c:
         b5:e0:a4:c7:b2:3a:81:45:69:77:07:ea:f5:e1:7c:74:65:f0:
         15:0c:4e:c9:e4:27:a1:ee:cd:76:ed:2b:c2:23:71:a0:6d:2d:
         9f:a2:b0:a1:e0:32:59:8e:69:ef:96:9e:e4:0d:90:b2:65:b1:
         5c:aa:a0:e4:bd:d7:a8:f8:cf:37:b6:36:62:c6:c1:67:36:56:
         7c:4c:6c:72:cb:5c:81:b2:da:da:6d:42:9b:15:19:48:bd:02:
         6b:17:df:41:ae:b8:b3:25:ca:74:b2:74:3e:fa:bf:be:5d:26:
         e1:ac:a4:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzafiVcpyaA20I4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZDc5YjAwNWEtOTJmMi00YmUxLThhNDQtYjEyMDkxZjJhZTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogl7AA9qtD23dMm+ZTKIOPQ7iEneIYTmlyzm
pZf/YthGR70wle2IpJyKYc0l+K1pIF5HkMO0DzwtWNv16E7NL/9eP2Y3qSkogMXp
XX9BPxEpQlYnuYk7DYskWxsozvLFgvYtvML0X/UOGD1ZtTU7elGJ04PWEvsuqMGq
g6NBK5z91ncyrnGa8Q8J029qcnSYMV725PtiwXQa5dxsrPg6+vQpJD9F3eBCeQp+
m8JUlE+1JltNyxISp6Ek/HDn6WAmGDWNt/6NRcJPdoYGk7YlO05/7zv6RyJ2fBp2
qyoD81cWTYJRjbT2Ki68F6o+fLW1FVG8m1Pmeph4Wm+uA0/YlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB4S2+Plt4h48xXCnaWmWIU6K2yEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjQxZmE4NmUtZWY5NC0z
NmEyLThjOTctNDAyMzU2ODAzM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2pyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGINaxxhg4V4hC/r5Z+riPDCCt3oMD5mgDtEi9mFu41kqj/bmt5gbyXv
FmkYWIGS8wd+dzSG/NtXWiQWBuXEF4tA39C7Haj/CkY6x0I8pnF0X10KSKG147Nj
G9eJrGLKvIo5JE7hNjrY8USJV2ubSUKy5/6sZBgNV4Ov7wcBd5XY+XY6Rkf96JXU
w43nu1leTLXgpMeyOoFFaXcH6vXhfHRl8BUMTsnkJ6HuzXbtK8IjcaBtLZ+isKHg
MlmOae+WnuQNkLJlsVyqoOS916j4zze2NmLGwWc2VnxMbHLLXIGy2tptQpsVGUi9
AmsX30GuuLMlynSydD76v75dJuGspJg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:45 2025 by rpki-client