Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9c750fe-6235-339c-bfdf-685728885303.roa
File:                     d9c750fe-6235-339c-bfdf-685728885303.roa (raw, json)
Hash identifier:          QiAqQnswP7Hnp9LXIESnvYY2FNJAw3Kk06Rf6T4crh4=
Subject key identifier:   52:EF:7F:95:0E:F3:5B:08:F0:8A:8D:8F:DF:9F:E0:D1:77:E6:47:1B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD93BF77305921DB3E03C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9c750fe-6235-339c-bfdf-685728885303.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:93:bf:77:30:59:21:db:3e:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e0fbbb1a-a9a2-4da2-9da8-b62a58157155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:9c:78:59:bf:f4:90:df:d1:4f:fe:8f:17:
                    8a:6a:b6:71:ac:c2:9b:68:ad:c9:49:86:72:e5:69:
                    e2:c8:e4:f4:9b:12:c3:2a:ad:32:44:c7:c1:30:b3:
                    50:3f:df:3a:66:5b:af:ca:30:b0:56:a0:0f:58:ea:
                    61:b6:e6:18:e9:6e:01:da:2b:ee:fd:aa:06:f8:73:
                    48:1c:ef:7b:60:cd:78:bb:c7:4e:75:4d:e1:c3:7c:
                    bc:86:a1:0c:14:04:7e:c8:d3:23:0e:23:bf:9d:d1:
                    2c:6d:8b:e9:cf:b4:3c:97:40:39:53:ff:80:63:b3:
                    1e:b2:42:eb:b5:78:4d:6f:0e:87:5e:d5:dd:d6:ea:
                    81:40:57:91:ad:03:bd:d5:73:a2:10:ce:7c:82:b0:
                    85:f8:88:79:fa:ef:9b:cc:8a:70:7b:ae:21:33:62:
                    58:d1:d4:e8:50:be:13:a6:c6:da:8c:72:5e:d6:aa:
                    7d:84:ed:3d:1d:6d:a9:b1:e9:3f:fa:2b:e9:b1:98:
                    77:0a:95:3f:86:33:a8:bf:cf:48:51:c9:f1:37:f0:
                    80:fa:ba:bb:43:b8:0e:0a:35:b5:0a:6c:3a:31:10:
                    f9:80:cc:5c:bc:b2:4c:0c:72:8e:98:46:50:e9:ce:
                    3b:9f:99:18:7d:0b:22:9e:e3:ff:5b:b1:60:82:e8:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EF:7F:95:0E:F3:5B:08:F0:8A:8D:8F:DF:9F:E0:D1:77:E6:47:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9c750fe-6235-339c-bfdf-685728885303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:28:70:49:9c:3c:50:7a:6a:45:e9:b9:4e:be:7f:f3:4e:ce:
         4e:a2:26:cc:dd:c2:71:11:2d:09:0c:91:b6:1e:2e:bc:e6:9e:
         a8:6f:81:d0:3d:8c:42:8e:a6:01:e6:1b:5e:d0:bc:30:e1:ca:
         2f:61:33:3f:36:5d:e6:c4:2b:a0:73:db:4b:62:06:01:f6:af:
         ef:1f:a0:7d:b7:17:da:08:80:8a:dd:af:b8:c7:db:42:93:dc:
         e7:3b:d0:37:5b:72:74:e7:d5:9d:0c:fc:cb:cb:2d:1d:1b:6e:
         44:54:90:d1:5d:f7:a1:bf:93:26:d2:d8:bd:27:e9:eb:05:8b:
         8e:ac:6d:2c:33:c9:cc:1a:79:46:2a:37:23:c3:4f:f8:9d:31:
         32:00:87:6d:57:29:cb:9f:06:70:d0:e9:1b:46:b2:a9:aa:64:
         f9:65:3d:a7:87:3f:1b:8a:d2:17:1b:f8:2b:26:e3:95:36:c3:
         67:9b:89:2d:af:cd:96:b6:2a:67:d9:70:bc:26:46:03:ee:72:
         d9:d0:3f:75:cc:ba:1e:91:7c:5f:46:e5:ff:b8:69:2f:5c:7c:
         83:d1:10:a0:72:29:70:b0:21:ca:d9:dc:8e:ac:bb:71:16:6d:
         99:39:85:4a:2c:cc:32:28:12:68:64:f7:b8:a9:e0:29:fd:f9:
         8c:89:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:49 2025 by rpki-client