Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f660f530-c204-3dfc-be83-55e386fc2976.roa
File:                     f660f530-c204-3dfc-be83-55e386fc2976.roa (raw, json)
Hash identifier:          pHLGMsqseb/7xXlEuZJzhbtRjgh6TSoV2w1/WqYspgs=
Subject key identifier:   8D:3C:89:95:B1:10:B0:81:D9:07:7B:D6:1E:61:AB:54:84:AC:11:B5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD99BB765F4170C5921480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f660f530-c204-3dfc-be83-55e386fc2976.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:99:bb:76:5f:41:70:c5:92:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=21b2477f-a1e0-4556-8626-606424c74055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:a2:66:5d:54:67:de:be:1d:3b:6f:ca:ad:
                    9f:0e:09:8c:42:88:1f:51:4f:99:0d:eb:97:0a:3f:
                    e6:cc:76:5d:1d:d3:08:99:ef:e6:1e:be:e6:58:de:
                    fe:0f:4d:e5:77:7d:56:c5:5a:7d:22:02:27:03:ce:
                    2a:da:3f:8c:0f:5a:b6:08:1d:0f:aa:e0:82:f1:68:
                    d3:0d:8e:41:1f:f6:f1:1e:b7:0e:fa:87:16:ed:e6:
                    6c:3c:8f:d0:ca:5d:53:d6:d4:2f:92:18:fb:77:db:
                    b7:89:c0:93:f9:5d:8e:90:03:c2:08:fe:fb:21:7f:
                    70:e4:d9:7e:2b:c6:b4:13:18:48:70:c7:97:d5:42:
                    f0:32:27:27:bf:6f:18:28:68:a3:e1:62:a5:d1:aa:
                    80:4e:b9:4c:59:88:18:27:c3:5e:6b:58:75:20:cf:
                    3f:4d:10:49:f0:19:b9:fc:c1:35:60:d8:43:10:8a:
                    34:8b:9b:e4:6a:86:f1:05:0f:5d:22:1a:83:e1:82:
                    42:dc:57:a0:e7:41:ff:80:57:74:6c:ba:2b:d9:7b:
                    dd:67:bd:97:dc:85:6c:a7:26:5a:19:7e:72:b4:62:
                    3b:78:8e:f4:d0:30:05:21:86:46:21:16:78:1b:dc:
                    c2:ba:31:6e:be:b2:dc:4a:5b:0a:2a:96:3a:1c:7f:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3C:89:95:B1:10:B0:81:D9:07:7B:D6:1E:61:AB:54:84:AC:11:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f660f530-c204-3dfc-be83-55e386fc2976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:5e:cf:25:c9:b8:74:f1:04:e0:7b:ad:56:fe:06:20:05:
         45:f0:20:d5:ef:a7:6c:92:f5:11:f6:4a:8b:ab:62:87:45:b5:
         d2:89:b0:59:ed:78:04:01:1c:30:63:73:57:f5:0d:9b:72:09:
         ce:1e:67:2c:24:e6:e5:e2:46:16:fd:ee:59:23:b6:29:55:2b:
         92:9a:bb:98:0e:a0:a3:85:b8:16:9f:e0:51:e5:e4:89:97:17:
         b1:d0:58:96:b0:71:a5:0f:2c:cf:89:33:ed:aa:fb:d1:22:b2:
         5c:9c:4e:66:3e:84:87:2e:17:d0:b1:17:7e:2b:a4:ad:56:76:
         61:5c:cd:dd:73:18:4b:0c:79:2a:34:ed:15:49:cd:f4:f1:b6:
         6f:38:61:00:85:d1:ac:59:5f:d1:b6:f1:58:e5:80:b9:4f:e9:
         32:3b:ff:4e:20:c1:fd:f3:e0:2f:ca:42:9d:49:ff:09:c2:9a:
         fe:d4:a7:69:b9:24:e1:46:1a:c8:59:bd:c7:64:61:e2:ef:15:
         66:e4:42:44:61:b6:a9:9b:a1:8f:f1:f6:90:ab:35:7d:15:b1:
         da:37:1a:5c:07:61:74:1f:be:45:63:dc:92:07:a7:9b:8c:7c:
         3a:f3:d9:6b:39:1d:fa:b1:b1:82:d6:36:d0:5e:02:44:d0:72:
         85:9f:34:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzZm7dl9BcMWSFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MjFiMjQ3N2YtYTFlMC00NTU2LTg2MjYtNjA2NDI0Yzc0MDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2SiZl1UZ96+HTtvyq2fDgmMQogfUU+ZDeuX
Cj/mzHZdHdMIme/mHr7mWN7+D03ld31WxVp9IgInA84q2j+MD1q2CB0PquCC8WjT
DY5BH/bxHrcO+ocW7eZsPI/Qyl1T1tQvkhj7d9u3icCT+V2OkAPCCP77IX9w5Nl+
K8a0ExhIcMeX1ULwMicnv28YKGij4WKl0aqATrlMWYgYJ8Nea1h1IM8/TRBJ8Bm5
/ME1YNhDEIo0i5vkaobxBQ9dIhqD4YJC3Feg50H/gFd0bLor2XvdZ72X3IVspyZa
GX5ytGI7eI700DAFIYZGIRZ4G9zCujFuvrLcSlsKKpY6HH+neQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI08iZWxELCB2Qd71h5hq1SErBG1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjY2MGY1MzAtYzIwNC0z
ZGZjLWJlODMtNTVlMzg2ZmMyOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEa0Xs8lybh08QTge61W/gYgBUXwINXvp2yS9RH2SourYodFtdKJsFnt
eAQBHDBjc1f1DZtyCc4eZywk5uXiRhb97lkjtilVK5Kau5gOoKOFuBaf4FHl5ImX
F7HQWJawcaUPLM+JM+2q+9EislycTmY+hIcuF9CxF34rpK1WdmFczd1zGEsMeSo0
7RVJzfTxtm84YQCF0axZX9G28VjlgLlP6TI7/04gwf3z4C/KQp1J/wnCmv7Up2m5
JOFGGshZvcdkYeLvFWbkQkRhtqmboY/x9pCrNX0Vsdo3GlwHYXQfvkVj3JIHp5uM
fDrz2Ws5HfqxsYLWNtBeAkTQcoWfNOE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:52 2025 by rpki-client