Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1200a48-cfbf-39b0-b158-c387ffcc576e.roa
File:                     d1200a48-cfbf-39b0-b158-c387ffcc576e.roa (raw, json)
Hash identifier:          jn7xFOVeTRvYzAPo/K3nToXf3N2L8Is101tgh0rFTyo=
Subject key identifier:   E9:46:D5:C7:53:A9:74:70:C1:CF:ED:56:75:BE:99:4F:0A:6C:0E:EE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9500F977A30EACF25B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1200a48-cfbf-39b0-b158-c387ffcc576e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:95:00:f9:77:a3:0e:ac:f2:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d3896e05-1b94-4645-85e2-3c76a286b46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:32:fe:c8:75:aa:d7:76:2b:22:71:a6:9a:
                    ea:08:04:6e:50:6a:8d:60:db:42:02:d3:6a:b8:d3:
                    b8:21:cc:33:05:0f:6b:9f:15:86:ad:e5:09:bd:63:
                    2d:22:77:bb:f0:c3:d8:f8:29:8a:13:43:d8:a6:a2:
                    ee:a4:57:9c:ab:19:ea:75:10:e0:5e:be:7c:1f:60:
                    ef:9d:ad:b1:cd:74:2e:58:88:85:ef:81:51:7f:3e:
                    96:a6:0e:27:9a:a7:5e:ee:85:33:3c:67:39:cb:92:
                    3a:7e:6f:11:bc:9b:e8:24:c9:94:a3:69:22:08:af:
                    e5:6e:5e:12:62:2d:93:c8:1d:ec:2b:86:ce:7f:85:
                    89:aa:9c:ff:b0:eb:32:dc:5c:76:11:15:15:5f:7e:
                    6a:cd:71:ae:ae:29:d2:ee:91:8f:a2:18:d2:08:ff:
                    22:3b:2d:eb:21:1b:cf:b6:c2:e6:c0:a3:7a:54:4d:
                    13:b3:f3:1d:ba:92:d5:7f:54:df:36:12:80:04:aa:
                    a2:9d:42:9f:45:23:68:1b:91:31:eb:68:c1:c6:75:
                    7b:5e:17:9f:22:4a:93:31:d8:21:7b:8b:42:d1:51:
                    a0:eb:80:2d:83:32:8f:de:2f:7a:64:6f:f7:9b:46:
                    ea:63:c5:ef:3f:88:8e:1e:73:4a:77:33:cc:03:8e:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:46:D5:C7:53:A9:74:70:C1:CF:ED:56:75:BE:99:4F:0A:6C:0E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1200a48-cfbf-39b0-b158-c387ffcc576e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f4:47:fa:95:4e:f3:90:95:93:09:16:0c:36:48:28:4d:e9:
         9c:da:4f:31:84:9b:fd:6a:8c:36:5e:eb:9b:5f:3c:b8:70:95:
         9a:26:2c:6a:0c:ed:3a:f0:f1:48:44:04:29:21:ad:82:fe:29:
         33:f7:c6:57:9a:4e:bd:59:38:5c:d4:8e:ac:8d:88:92:28:80:
         3e:fa:87:30:2e:ab:f3:02:d1:7d:96:ba:0a:e1:be:ba:7f:c1:
         1c:71:63:14:f4:32:3a:dc:6b:0a:cd:bc:ef:e6:7f:43:d2:55:
         c3:07:0a:eb:fe:80:88:14:a5:b7:0e:72:3e:49:f8:6f:78:8d:
         4d:4e:7c:28:46:17:38:ef:96:ac:1e:dd:f8:a7:70:ec:70:2a:
         b2:b4:13:07:61:3b:25:95:23:2b:bd:a8:c0:e6:1b:67:47:ab:
         2e:1e:7b:78:d2:29:9d:d2:36:14:7c:89:7b:0b:eb:c2:c9:7f:
         d0:ba:d9:24:1a:a6:0b:93:28:7d:56:36:3d:9d:02:58:07:d4:
         8b:84:bd:1c:2e:e4:26:35:41:2d:43:f3:ee:99:1a:1c:78:36:
         4e:60:f8:1e:c4:f4:58:a5:4f:1f:8a:fc:65:b4:79:33:10:4e:
         1a:db:25:ef:05:3d:d6:ec:2f:13:81:87:fc:d4:43:59:1c:79:
         01:4a:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:28 2025 by rpki-client