Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d13bf0-4ec1-35b8-a335-2654d8a24bc8.roa
File:                     c5d13bf0-4ec1-35b8-a335-2654d8a24bc8.roa (raw, json)
Hash identifier:          4j14oQKj2LlstwR+xzLi/a6AFSsYklfivX9zeMqrOm8=
Subject key identifier:   C9:6D:C9:8E:76:9C:79:8B:2C:CF:70:DD:27:24:A1:DB:31:2B:61:E8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9AB4D7ADECB1B6F78280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d13bf0-4ec1-35b8-a335-2654d8a24bc8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:9a:b4:d7:ad:ec:b1:b6:f7:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=885ef466-8ffe-48bd-9621-458452aeef1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:c3:6a:10:53:2a:77:4d:dd:f8:c0:6c:92:
                    3d:b4:3e:89:84:09:15:28:c0:28:08:9b:29:17:85:
                    6a:4e:e9:cd:66:fb:dc:08:d8:55:5c:93:ad:bd:e0:
                    0a:75:b9:6c:4e:07:44:4d:bc:0d:8c:69:d5:7d:43:
                    9f:37:52:58:ce:45:0d:f0:bd:fa:46:87:d3:c8:b4:
                    e7:7b:5b:5a:f4:7d:af:d0:61:32:6d:f0:4d:ce:d6:
                    0c:6d:68:e4:b1:b3:56:55:e2:13:d5:fa:1d:d5:79:
                    b1:54:a3:b3:12:41:be:e2:75:87:12:91:e1:12:c7:
                    2a:90:39:f2:d3:41:53:c9:bb:1d:34:06:7b:d7:bd:
                    26:95:00:68:9b:aa:7a:ed:01:ca:85:ff:99:d4:bc:
                    c4:c8:85:8b:ea:03:15:74:9b:e3:0d:54:0c:6d:77:
                    1c:33:0b:da:77:97:6e:58:6a:76:b9:8f:3d:01:ec:
                    c9:9f:67:82:0e:66:9f:11:19:68:43:3b:0d:9e:e9:
                    33:c6:bf:50:80:82:6f:76:a7:f8:53:76:50:04:c4:
                    dc:63:84:b1:d3:f4:de:bb:79:f6:42:e6:3e:18:54:
                    f7:4a:37:c6:2a:6d:be:33:4e:1b:0d:da:55:99:c0:
                    49:2e:75:f9:45:eb:ec:be:08:45:73:b0:f4:ba:69:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6D:C9:8E:76:9C:79:8B:2C:CF:70:DD:27:24:A1:DB:31:2B:61:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5d13bf0-4ec1-35b8-a335-2654d8a24bc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:55:b5:8b:85:3b:57:19:ac:bf:dd:6d:c6:34:5e:f8:2c:1a:
         58:29:a9:1e:2c:d7:06:db:c5:a0:67:e8:84:df:f9:43:3e:27:
         fa:9e:33:c5:7c:bf:f5:58:85:cd:9d:1e:3b:73:dd:7c:23:8a:
         6d:61:7e:0d:fb:e6:5b:3e:e3:95:72:f7:45:5c:be:04:2a:9e:
         a3:9a:ab:35:67:da:be:31:11:4f:ca:72:11:df:e2:d6:66:56:
         bf:6b:54:63:d0:d8:48:b9:e5:e3:f7:90:68:b5:59:ab:43:fb:
         29:d0:7a:a9:4d:d7:02:f2:39:d8:f5:ef:b2:23:3e:08:90:52:
         29:7f:1a:2a:86:b0:e2:01:2d:25:27:71:8f:b7:92:22:18:37:
         89:27:0f:66:c9:36:62:61:7a:0e:c0:3c:6e:f8:d5:7c:58:44:
         2f:10:5f:52:04:98:91:f8:8a:64:0c:59:55:c5:f2:7a:4e:e1:
         0f:b9:a1:c8:7d:fb:32:c6:1d:62:2b:40:c3:3c:fa:45:b0:fa:
         b5:6b:5b:a6:a4:99:b9:31:ad:b6:85:1e:01:8c:8a:90:54:93:
         34:d7:5e:cf:97:44:dc:ec:15:9e:6e:4e:74:4f:88:f2:d1:8c:
         98:26:b1:54:5c:56:08:d4:0b:54:8e:b8:20:f5:7d:67:d6:81:
         4f:84:3b:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzZq0163ssbb3goAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ODg1ZWY0NjYtOGZmZS00OGJkLTk2MjEtNDU4NDUyYWVlZjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uXDahBTKndN3fjAbJI9tD6JhAkVKMAoCJsp
F4VqTunNZvvcCNhVXJOtveAKdblsTgdETbwNjGnVfUOfN1JYzkUN8L36RofTyLTn
e1ta9H2v0GEybfBNztYMbWjksbNWVeIT1fod1XmxVKOzEkG+4nWHEpHhEscqkDny
00FTybsdNAZ7170mlQBom6p67QHKhf+Z1LzEyIWL6gMVdJvjDVQMbXccMwvad5du
WGp2uY89AezJn2eCDmafERloQzsNnukzxr9QgIJvdqf4U3ZQBMTcY4Sx0/Teu3n2
QuY+GFT3SjfGKm2+M04bDdpVmcBJLnX5RevsvghFc7D0ummbAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMltyY52nHmLLM9w3SckodsxK2HoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzVkMTNiZjAtNGVjMS0z
NWI4LWEzMzUtMjY1NGQ4YTI0YmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2jCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVVtYuFO1cZrL/dbcY0XvgsGlgpqR4s1wbbxaBn6ITf+UM+J/qeM8V8
v/VYhc2dHjtz3Xwjim1hfg375ls+45Vy90VcvgQqnqOaqzVn2r4xEU/KchHf4tZm
Vr9rVGPQ2Ei55eP3kGi1WatD+ynQeqlN1wLyOdj177IjPgiQUil/GiqGsOIBLSUn
cY+3kiIYN4knD2bJNmJheg7APG741XxYRC8QX1IEmJH4imQMWVXF8npO4Q+5och9
+zLGHWIrQMM8+kWw+rVrW6akmbkxrbaFHgGMipBUkzTXXs+XRNzsFZ5uTnRPiPLR
jJgmsVRcVgjUC1SOuCD1fWfWgU+EO88=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:39 2025 by rpki-client