Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d645f8ff-16f3-3c1a-be00-38886f9090f5.roa
File:                     d645f8ff-16f3-3c1a-be00-38886f9090f5.roa (raw, json)
Hash identifier:          o3KhL7sYs15J/p+sv6fxQzlPfJ+n41eO8uqxeY09Y2Y=
Subject key identifier:   1A:1D:CC:C2:4B:9D:4B:A0:1B:BB:B2:84:12:0E:B6:B1:F1:AC:FD:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCDE6E9EFF08D44D6C1BC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d645f8ff-16f3-3c1a-be00-38886f9090f5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:de:6e:9e:ff:08:d4:4d:6c:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a4e37c5a-de7b-4442-936c-9be2cfc8944f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:25:44:d6:11:42:1e:f7:e4:2f:d1:8f:74:
                    aa:0f:3b:b0:5d:e0:b1:35:78:d4:ec:b7:ec:d8:69:
                    b7:3e:93:7d:f3:00:00:59:fb:82:04:a1:1a:19:ca:
                    e3:41:b0:1a:04:87:d7:1e:0e:29:2d:f5:4b:86:9d:
                    b1:d2:db:2a:c0:2d:f5:81:ca:bd:6d:a5:4f:85:60:
                    a5:1b:c4:4d:2a:7c:2f:fd:64:6a:d8:78:04:ee:ad:
                    0d:ad:ce:6c:75:5a:f2:25:f5:e8:35:1c:4e:f0:6d:
                    2b:1e:20:c5:76:2b:2a:7c:76:9b:0c:0b:82:30:9e:
                    d8:4e:f3:a4:9d:56:0a:55:d2:e4:4f:40:5c:b9:9d:
                    34:24:ec:7d:57:2b:c1:d7:f0:c3:d0:c3:e9:b9:f5:
                    f1:91:af:cb:ef:69:94:3f:0d:a8:6c:ba:65:5f:09:
                    ef:64:b8:b5:97:26:81:f9:53:46:dd:f7:e1:1d:a0:
                    1d:29:60:2a:5f:63:06:e6:77:e4:b5:de:bd:a7:13:
                    1f:5b:35:43:67:92:91:84:e8:6f:57:4e:c6:d1:4a:
                    eb:c7:52:ba:1c:91:b7:e4:54:3a:41:20:a5:f0:b3:
                    bc:09:5f:41:1f:20:b6:5e:a1:7f:4e:27:f9:3e:22:
                    e4:2f:a5:d5:60:e4:3b:de:03:d9:df:2e:dc:90:df:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1D:CC:C2:4B:9D:4B:A0:1B:BB:B2:84:12:0E:B6:B1:F1:AC:FD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d645f8ff-16f3-3c1a-be00-38886f9090f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:c4:a3:06:a1:6a:69:8c:4f:39:a1:0a:bf:e0:b9:fe:98:
         71:8f:9a:3f:0d:40:67:eb:fa:4d:95:98:b8:8c:d6:9c:fc:77:
         89:21:ec:2b:78:f5:34:2c:24:45:42:12:ff:f7:e2:72:73:25:
         f0:85:fb:7f:1a:14:e0:18:fb:ab:08:74:2f:d5:f7:af:0f:44:
         d6:e2:09:42:9e:21:16:31:b5:05:d5:7c:f9:81:c4:c9:9b:ae:
         e1:92:c5:36:30:a3:78:16:77:8e:d3:53:e9:97:aa:dc:1a:ad:
         a6:9b:d5:cb:19:a7:a5:a6:3b:23:f7:b8:da:fc:d5:1e:3c:4a:
         c5:7b:c4:fe:17:50:05:e5:39:fc:d2:55:79:60:ef:ac:b9:06:
         cd:01:81:0a:b7:62:9e:51:fe:53:60:35:50:4d:0c:f4:f8:ba:
         ff:a3:e1:d4:df:18:98:f0:97:71:85:67:2c:96:01:7f:11:13:
         ee:c4:cc:9b:82:20:2b:7e:f6:b8:47:2e:27:b6:3f:7c:99:4b:
         0c:9f:98:48:ff:64:df:70:20:9d:0b:5a:fd:cb:d2:c0:af:29:
         c3:57:cb:72:28:cf:56:42:06:2a:c6:37:8b:51:bd:76:4e:3b:
         6d:5a:92:e5:96:7d:46:a6:10:45:54:00:df:34:a3:4e:78:1a:
         d2:5b:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:30 2025 by rpki-client