Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3896329-2d02-3b4c-9402-b4c42c98565e.roa
File:                     c3896329-2d02-3b4c-9402-b4c42c98565e.roa (raw, json)
Hash identifier:          dRg+So4qHJEKA96fyxDumQhRSo50wyHFVzeTusBLgOk=
Subject key identifier:   65:F5:9F:B5:05:32:A5:06:04:57:CD:51:86:42:0B:1E:5F:CB:61:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCE051A828CB0EAB083180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3896329-2d02-3b4c-9402-b4c42c98565e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:e0:51:a8:28:cb:0e:ab:08:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=fa75381b-53ce-4a07-a23d-3444c796bf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:70:37:8d:cc:f9:fe:c6:ec:39:fc:e3:65:
                    08:d5:53:53:26:62:7a:b9:5f:8f:2f:15:7b:a8:97:
                    e3:85:27:8e:8d:89:eb:69:da:cb:26:7d:7e:3f:7f:
                    0a:04:d4:95:0e:0c:19:aa:9c:3f:b1:0a:a3:80:4f:
                    7d:4a:0e:06:2e:4c:bc:65:c6:a3:89:6e:6d:54:fd:
                    cd:89:6e:43:57:2c:96:e4:95:fa:fa:16:2b:33:e1:
                    90:a4:15:62:d4:cf:ff:33:f0:f4:ba:bc:c7:17:aa:
                    18:9a:2a:da:f1:26:06:8c:25:c8:8a:d8:95:3c:77:
                    34:98:f9:82:71:46:57:49:f0:04:6c:51:6e:c9:f4:
                    aa:fe:c2:e8:bd:19:34:56:81:81:b4:a8:3c:16:d0:
                    ff:3b:80:a8:9f:9e:a2:4f:65:11:13:2b:29:77:5b:
                    ae:09:a5:ce:46:ee:f5:c7:01:5e:04:0a:78:e6:50:
                    7f:44:0d:4a:b4:eb:09:d6:b7:d1:21:5d:94:08:cf:
                    ca:d8:95:3d:af:3d:21:8b:21:12:8e:83:17:c9:71:
                    00:b6:ce:ac:7a:e4:f2:36:7f:9e:02:53:db:58:2d:
                    e6:65:f7:10:af:6a:e8:d8:6b:c4:44:97:36:68:9f:
                    de:19:3b:2c:e5:52:e6:c4:9c:88:15:20:49:20:17:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F5:9F:B5:05:32:A5:06:04:57:CD:51:86:42:0B:1E:5F:CB:61:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3896329-2d02-3b4c-9402-b4c42c98565e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:98:6d:c3:0e:da:a9:e9:6f:b1:1f:73:04:97:38:b5:e2:
         eb:30:a2:c0:d2:1d:40:f5:af:22:9d:0c:6e:15:f1:ab:99:a0:
         70:45:37:ba:4b:d7:1e:cc:9a:2b:3f:ff:93:66:29:60:58:56:
         69:e1:ef:fa:48:83:da:00:57:ab:8a:aa:a3:1b:14:8a:a0:cc:
         67:d0:7c:e0:ec:c6:bc:6b:b2:dc:91:87:e6:29:94:c6:f7:21:
         02:a0:73:c7:33:eb:dd:d9:91:c1:3d:62:08:26:ea:e0:24:28:
         d9:82:eb:be:40:0a:b0:61:1f:6e:bc:82:c8:b4:49:6f:d0:80:
         89:c6:12:23:50:f1:35:64:f3:41:77:0b:a0:39:0a:25:8a:12:
         70:7b:7c:97:ef:2a:19:31:68:49:7b:9f:e1:5a:db:91:48:41:
         0c:73:0c:85:30:ce:98:e3:0b:37:ad:03:df:c6:a5:a9:36:45:
         e5:36:28:e2:0e:36:e9:ed:91:3c:52:0c:88:52:4c:b5:60:2f:
         98:fc:ac:b0:da:9e:53:3a:ec:eb:42:b4:77:32:4b:f2:5c:30:
         a6:8c:f3:3c:21:01:5b:6e:b5:fc:4e:4a:e8:8a:a4:2e:a8:30:
         8b:15:a7:8b:92:32:94:b3:b1:a7:b6:ec:80:c1:af:08:74:79:
         d5:85:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:28:34 2025 by rpki-client