Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b35953-63d9-3f1a-acb7-2beab45c05d9.roa
File:                     d8b35953-63d9-3f1a-acb7-2beab45c05d9.roa (raw, json)
Hash identifier:          xpNXFc9+4kNropJCv7eWW27hMY4sammrl819qZmvIKI=
Subject key identifier:   87:F4:27:30:BF:72:B3:29:B0:D7:29:14:06:89:15:3B:CB:7A:9F:EE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDA9D61E2F14D896C61CE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b35953-63d9-3f1a-acb7-2beab45c05d9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:a9:d6:1e:2f:14:d8:96:c6:1c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ae0e0103-6a95-4ebc-a34e-9f067d338e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:63:5a:90:24:c8:24:97:c1:59:0a:3b:97:56:
                    95:47:79:da:d8:f9:4c:c0:7e:1e:3c:48:a9:0e:7a:
                    f4:9c:01:f9:ce:a9:cf:e0:b7:71:f5:fc:a7:74:b2:
                    9f:25:bb:2e:16:1a:5e:69:d4:62:82:77:fa:85:a3:
                    58:1a:6c:2c:e4:69:50:ae:71:8a:2b:55:bb:46:6f:
                    12:62:6b:e7:e2:9b:b6:ef:07:ab:ad:06:1a:a1:9c:
                    e0:39:be:5b:ff:16:22:15:c4:f4:02:ca:b9:df:cc:
                    a7:f8:de:12:fc:fa:ea:ff:82:a9:e7:10:e4:77:a1:
                    af:1b:93:9a:7a:18:6e:51:7a:7a:63:de:42:ed:d1:
                    7d:12:4b:94:c4:cf:76:7b:9a:93:17:c1:ee:20:07:
                    00:2d:f2:58:92:12:f8:af:77:32:e0:f6:08:9e:51:
                    0e:b3:67:cd:7f:76:03:f8:8c:7f:ad:90:a0:f1:de:
                    06:b1:42:7f:e4:be:35:3e:6f:6a:9d:38:bf:88:e3:
                    19:66:e0:c8:55:43:52:a0:41:c7:05:0d:13:60:fe:
                    ea:12:9f:82:db:15:cf:0f:c6:4c:95:88:3c:66:00:
                    5f:60:d1:c6:0f:3b:02:85:21:78:56:d7:3d:cd:b0:
                    96:e0:a0:bc:5e:3e:5e:b3:87:61:b1:f2:8a:b3:e4:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:27:30:BF:72:B3:29:B0:D7:29:14:06:89:15:3B:CB:7A:9F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b35953-63d9-3f1a-acb7-2beab45c05d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:77:01:55:21:a1:c0:87:3d:d4:d1:d5:e4:48:20:1a:1c:
         5e:e3:27:6e:e4:c0:6c:7f:29:67:c9:e9:c2:be:43:8f:2b:07:
         b0:b8:66:56:e1:31:15:dd:36:8b:74:46:17:79:23:f9:1e:51:
         f4:45:3e:6b:34:46:da:67:92:f2:1d:ed:f6:1a:88:cb:dd:15:
         6e:45:c4:e7:cb:a3:37:e1:4d:0d:f1:1b:0f:bf:60:fb:94:61:
         0d:42:ad:17:dd:48:77:12:ed:59:ce:d4:06:f9:0b:25:3c:e6:
         be:65:c6:0d:d3:8c:4a:b6:a6:10:e5:3e:13:4c:df:fe:f1:b3:
         0c:61:d3:e2:1c:84:0c:98:dd:26:1c:8d:73:75:f5:d5:82:7a:
         2e:61:bf:70:71:5a:3b:18:cc:cd:46:d7:3a:22:ea:6d:12:21:
         52:35:9f:58:11:6c:15:2c:f9:6c:a6:37:ad:0f:56:96:22:de:
         98:a6:35:af:00:bc:07:b8:71:85:a1:47:a0:4c:36:a8:16:86:
         e3:e7:16:0a:4b:8e:9e:1f:b0:7c:71:f6:70:75:8d:06:ea:fa:
         c5:47:a7:d2:47:fb:64:3c:97:1a:f7:28:52:f9:72:cb:7d:d5:
         ea:d8:cc:f2:3b:11:c4:f9:9c:5b:fa:d6:37:3c:0a:9b:5c:8c:
         1d:d5:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:06:49 2025 by rpki-client