Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f7298f75-70b9-3072-a34c-737224b12734.roa
File:                     f7298f75-70b9-3072-a34c-737224b12734.roa (raw, json)
Hash identifier:          OfoIRFPS1hpLJLDXrPZEpY1Ps5jtPaU07yRhN+dsgQc=
Subject key identifier:   C5:F7:9E:AA:B7:DF:69:C5:49:54:FC:AF:E0:0B:2F:47:01:7A:33:71
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD99DAE5492692D279E000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f7298f75-70b9-3072-a34c-737224b12734.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:99:da:e5:49:26:92:d2:79:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3075a2b2-80d0-4529-bddf-68a6fc62d79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:ef:14:9c:3d:51:d0:84:63:37:c3:b5:8f:
                    5b:c4:3c:0e:f8:ea:5a:77:ca:2b:83:30:45:cb:2b:
                    85:e5:05:eb:3c:82:ed:a0:31:ea:78:fa:ec:d2:82:
                    23:fb:67:0e:a2:97:50:b3:83:9e:1b:24:75:0f:96:
                    bf:20:47:f4:89:e8:0e:11:d3:8b:cf:ee:e7:2c:3f:
                    7e:fa:26:24:c4:42:f9:32:e6:a3:f7:cb:c4:28:00:
                    5e:c9:cb:bf:e7:c4:a5:1e:1c:bd:77:02:21:76:54:
                    07:63:61:55:9e:0b:a8:c9:6a:f5:3e:00:9a:b4:bf:
                    df:60:c0:f4:b4:03:f9:9d:92:1a:33:0d:30:e8:5c:
                    44:2f:9e:0f:91:a4:68:a1:8c:4b:df:62:88:fc:b5:
                    dc:d2:7b:f1:84:c0:34:2b:3e:dd:83:3f:92:29:24:
                    4e:33:48:b2:83:1a:c8:f4:d9:02:c1:c2:8d:f5:53:
                    ab:56:fb:c5:0a:d1:6d:6c:8b:02:c9:4b:d5:5c:fc:
                    6c:52:01:ec:0b:21:14:77:a7:63:08:e2:02:44:4d:
                    5b:2c:de:7d:4d:64:dc:be:dc:75:2d:ce:0a:61:29:
                    3a:81:1c:35:b8:63:b0:2a:9d:26:50:6a:45:c4:ab:
                    0d:a0:bb:87:7e:d5:ed:27:13:69:e0:24:47:a3:16:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F7:9E:AA:B7:DF:69:C5:49:54:FC:AF:E0:0B:2F:47:01:7A:33:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f7298f75-70b9-3072-a34c-737224b12734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:52:21:2f:48:68:5e:c3:97:1a:32:16:d5:57:0c:cd:43:4a:
         5d:66:96:08:4e:c0:52:9b:d2:28:a6:d2:1f:fc:dc:bc:c8:b7:
         68:0c:70:e8:f4:29:0a:a3:4c:8b:f9:bd:be:10:d7:05:39:cd:
         32:a8:70:f7:7e:76:83:61:42:fd:d0:23:34:53:24:9d:a4:73:
         09:1c:8d:3b:66:dd:a7:aa:1a:2f:f8:b3:91:85:76:c6:fc:b9:
         77:1f:8a:69:5c:12:f3:23:a1:f1:e9:c4:29:08:16:c0:75:eb:
         04:b9:da:a5:b5:d1:a5:23:53:5a:61:5c:0b:24:63:13:f5:6c:
         cb:46:4a:19:6e:36:f8:28:fc:96:63:ff:ac:23:24:f3:c0:62:
         5a:7d:c4:f9:3b:f2:5f:52:8c:a3:ca:f0:01:5d:3d:a9:88:56:
         91:2d:b2:67:9f:12:da:18:31:e8:55:55:d1:4a:0c:62:aa:33:
         c5:30:8a:9d:91:3c:55:1b:73:49:29:bb:1d:8f:32:43:3c:fe:
         1a:95:b2:bb:34:36:a9:19:6d:3c:3d:8c:c4:1c:27:43:34:d5:
         3d:48:e8:1f:b0:d8:4a:9f:c0:f2:02:0f:81:d0:57:1f:b4:b1:
         9a:e8:0c:87:9c:1c:b5:46:0c:ba:16:0a:02:f3:2d:c9:13:6d:
         ae:3f:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:57 2025 by rpki-client