Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d60208b5-3aad-30c1-a0e9-24dcb19eb32a.roa
File:                     d60208b5-3aad-30c1-a0e9-24dcb19eb32a.roa (raw, json)
Hash identifier:          aJAJ498NIfn1iURASbxkt6YBhhhHpqKvvSYxFLHKT18=
Subject key identifier:   68:D3:19:C3:41:B2:3E:2F:29:22:09:DE:BC:F5:91:7A:F0:EA:64:B8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD9B780005C0F6B89C2680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d60208b5-3aad-30c1-a0e9-24dcb19eb32a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:9b:78:00:05:c0:f6:b8:9c:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ed34bfe3-54b7-4aa7-9440-8cbeb4468ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:87:ca:78:23:d3:a2:e5:9f:f7:3c:4c:2b:
                    a7:17:ab:14:6b:b3:98:91:0b:70:2b:85:42:0f:5d:
                    3d:5c:9f:09:fe:a6:46:9c:0f:02:c1:bd:75:3b:1a:
                    e8:58:d6:59:fd:d8:0b:87:c6:2c:03:fe:d0:6d:01:
                    05:e1:3e:a9:4f:e3:93:05:e7:21:bf:9e:14:2c:80:
                    72:ae:8b:d8:e5:1a:d8:b3:2f:92:80:9f:c0:6d:c9:
                    65:ce:c8:ae:d1:ad:7e:36:ff:ea:d2:39:09:6c:05:
                    f8:83:dc:4a:65:d4:19:5a:b9:8a:d7:6e:f3:36:00:
                    49:d4:27:14:2d:00:fe:c5:e5:5f:f6:5a:97:1c:b2:
                    31:21:f9:7e:ac:6b:90:8c:a8:bf:98:59:d3:a2:ef:
                    aa:e1:df:6f:a0:5f:e8:6f:97:a2:df:eb:d9:2a:cd:
                    ee:7b:6b:16:2f:4d:bf:e0:a2:5e:68:a9:c1:cb:8b:
                    fc:5d:a7:a9:b2:11:d6:53:ec:6e:8f:36:49:a5:d0:
                    63:06:2a:d7:29:02:65:75:ca:c7:f2:c9:30:7e:1e:
                    30:a6:b9:50:96:24:73:be:d3:be:28:ea:4d:2c:d6:
                    34:d3:cf:f2:14:db:6c:57:7b:52:89:99:47:0a:26:
                    51:dc:6e:4e:c3:20:33:9f:14:48:5a:a4:da:8a:dc:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D3:19:C3:41:B2:3E:2F:29:22:09:DE:BC:F5:91:7A:F0:EA:64:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d60208b5-3aad-30c1-a0e9-24dcb19eb32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:c6:6b:6c:c9:af:b3:87:7c:74:69:73:10:34:93:45:03:cf:
         cd:98:f4:ce:51:2e:76:a4:b6:18:d5:68:59:cf:d7:3a:e6:f1:
         c8:df:45:0e:4c:16:43:02:a3:53:72:3d:d3:8a:ad:61:96:07:
         b8:1c:94:4c:ee:9d:58:b1:59:77:15:57:2b:ba:54:5d:bb:21:
         46:61:82:4d:38:6d:19:c7:1a:50:ac:f3:de:f0:7f:07:c9:e4:
         4d:51:79:f6:28:1b:df:cc:06:00:c6:e4:08:54:86:60:17:a5:
         ca:1b:69:1e:30:fa:4c:3e:0b:0e:f0:7c:cb:6d:1f:31:23:22:
         85:a8:70:fc:aa:57:09:b2:86:bc:79:bf:9f:e8:1a:26:40:a5:
         02:2a:c1:2c:d3:6e:f9:de:52:f4:4a:ff:36:bb:42:20:e2:46:
         34:8f:e0:0d:51:8b:f9:30:eb:76:47:c8:0d:aa:33:01:80:f9:
         d0:38:47:da:e7:8c:26:fa:38:ae:83:d2:77:d7:85:71:ac:f0:
         14:35:30:a1:e5:2e:75:0e:a8:5c:bb:24:9c:98:04:d5:3e:f1:
         50:fd:a5:d7:e4:bc:0e:44:cf:33:3a:6e:3b:c5:53:f4:fd:81:
         6a:d3:ab:d8:2a:9c:87:b4:a8:c4:39:8e:ea:3f:d5:8a:06:d3:
         d9:9f:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:07 2025 by rpki-client