Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbf154e6-1bf8-3e47-8f12-a4b7d06145cc.roa
File:                     bbf154e6-1bf8-3e47-8f12-a4b7d06145cc.roa (raw, json)
Hash identifier:          xyLbL+fD4QGYtUXMKYZKp8aX09hu3Xs+nTpKjHJLemw=
Subject key identifier:   CC:B3:35:52:92:3B:00:C0:57:EF:37:E9:6C:38:06:66:8A:8B:6F:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDA8B98E1DFAB417659200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbf154e6-1bf8-3e47-8f12-a4b7d06145cc.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:a8:b9:8e:1d:fa:b4:17:65:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=af188fc8-8aba-4a53-b269-0740584c3fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:cc:b9:f8:73:25:39:4c:0f:73:a1:fe:8c:
                    e7:aa:da:7d:e9:60:43:e3:6a:57:db:99:7c:7f:e5:
                    47:9e:51:d1:4c:91:a2:f1:8d:5b:02:57:99:ab:72:
                    1f:58:5c:f3:86:18:20:11:e4:d5:a3:81:59:42:2c:
                    02:4b:81:a5:73:77:e1:11:6d:ac:ad:86:2c:b8:a5:
                    e2:2d:3f:50:51:b1:46:e9:e1:7a:b7:a9:b3:6d:62:
                    6a:d3:84:fc:52:db:78:cc:2d:5c:f3:82:b4:df:f2:
                    49:8a:c3:83:9a:bd:30:3a:ac:cb:e8:6d:d8:12:81:
                    5d:86:8e:17:07:65:a6:69:04:56:20:30:79:f6:8c:
                    1c:37:92:f6:87:a7:21:20:73:29:f0:72:f7:42:f6:
                    bc:ad:ea:10:29:3d:67:0c:71:ca:48:8a:bf:a8:78:
                    e8:cd:f7:3b:f6:d2:96:46:7a:a0:47:2f:c1:d6:90:
                    df:96:15:2d:7a:52:6e:9c:8d:33:bd:44:c1:e3:da:
                    32:86:57:a0:96:08:92:da:dc:3f:b1:70:c8:35:3f:
                    fa:e9:5d:6d:4b:cf:b6:f6:ab:e3:4b:aa:0c:62:63:
                    e5:56:3d:08:91:e5:0e:37:14:d3:5c:f9:68:33:5f:
                    47:03:42:10:71:7b:d3:4f:a8:b5:3d:c9:3f:fb:f2:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B3:35:52:92:3B:00:C0:57:EF:37:E9:6C:38:06:66:8A:8B:6F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbf154e6-1bf8-3e47-8f12-a4b7d06145cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:33:a1:6d:2b:19:63:cd:09:6d:8b:4f:35:c4:a1:74:4b:3f:
         22:43:87:2c:cc:0b:f5:15:41:17:15:6b:41:63:31:5a:87:47:
         95:3e:51:b3:95:2e:2b:65:47:61:54:47:0e:d8:5f:f4:93:17:
         a5:54:c1:8a:34:e4:fe:f7:b4:a3:53:11:ac:f4:6f:4e:87:2e:
         aa:69:57:1f:42:84:dc:af:1f:0b:9f:15:fb:ad:46:ff:2e:61:
         6e:aa:e1:f4:cd:35:36:e7:3e:d9:83:d0:af:85:e2:15:9d:45:
         b2:b3:43:4f:27:7f:7e:09:5f:94:3d:6f:05:b6:ec:05:e3:7c:
         21:82:40:b8:89:68:9b:e3:de:e2:d0:f3:02:98:fa:f0:c5:13:
         75:0c:8b:52:ef:c3:95:be:5b:e4:88:9c:72:06:5d:cb:1e:63:
         dd:a5:13:54:b4:51:5d:98:ff:15:9f:11:14:68:23:63:e7:c1:
         8b:e2:ec:d9:a0:72:cf:c7:3e:bc:f9:e9:39:48:16:49:b0:d8:
         2c:11:0b:be:c6:3c:df:9a:7c:2d:98:9b:aa:69:52:b7:4a:b7:
         a3:82:b0:b5:e5:25:96:ec:4a:10:47:6c:af:4f:f5:53:a8:b5:
         72:21:a8:37:cc:f5:f9:d2:b9:27:86:6b:2e:c3:12:0d:02:ef:
         c2:35:f4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:26:55 2025 by rpki-client