Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/033189e7-3b15-3bf6-84ab-2e9184e3c26c.roa
File:                     033189e7-3b15-3bf6-84ab-2e9184e3c26c.roa (raw, json)
Hash identifier:          Il3xGPOvUEW//pFgLDUlApxVdBozUf2Twv1kEb0NE/Y=
Subject key identifier:   05:44:52:49:EF:2D:1D:BE:DE:DB:09:77:B8:6E:76:3D:DE:E9:17:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411145C8AF6E44A8447B880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/033189e7-3b15-3bf6-84ab-2e9184e3c26c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:14:5c:8a:f6:e4:4a:84:47:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4aaa9156-4c2d-4d64-bbb4-b91e19722b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:70:0b:b4:67:b0:f0:47:e4:d6:68:75:5e:
                    87:b2:8f:d1:a8:65:b0:45:72:e4:62:fa:27:0e:4e:
                    48:69:6f:a4:9e:b7:11:80:22:44:d2:83:26:23:7f:
                    31:0a:86:27:60:97:b1:f2:c9:f5:88:d4:18:bc:4a:
                    d2:b8:88:4c:88:bb:4f:08:29:9d:71:8d:78:14:ec:
                    71:2f:76:bc:c4:99:aa:cb:83:90:2a:80:d6:db:aa:
                    ec:84:8e:47:05:e1:4f:f3:b7:f3:c3:d4:3a:2c:5f:
                    13:f7:97:2e:96:d9:cd:7f:44:96:78:79:25:a6:fa:
                    05:c9:3e:d9:10:05:e1:cf:39:48:a3:f7:61:03:de:
                    70:37:5f:05:49:23:3c:69:5c:44:60:9b:c8:72:32:
                    fe:5c:28:07:5b:b9:51:29:62:ea:61:57:af:60:18:
                    20:e7:61:7e:8f:7d:ba:fc:6a:cc:22:b8:29:06:97:
                    5a:8f:35:7e:f5:4d:d7:1d:50:d0:80:95:96:05:19:
                    ca:47:39:13:e9:3f:b6:a9:e5:be:d5:4f:20:7c:3f:
                    49:5a:7e:1c:01:39:07:8f:9b:8d:56:bc:77:5c:75:
                    08:9a:90:90:d8:62:d3:59:3e:94:2c:4a:39:27:a1:
                    31:4a:18:b4:df:20:f6:4f:bc:7e:2e:87:16:b2:c2:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:52:49:EF:2D:1D:BE:DE:DB:09:77:B8:6E:76:3D:DE:E9:17:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/033189e7-3b15-3bf6-84ab-2e9184e3c26c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fd:eb:92:47:06:7d:98:75:c7:89:eb:68:2e:5f:ea:ef:0f:
         fe:c7:0e:8a:6c:01:af:bc:c4:dd:2f:aa:c7:9e:ba:a1:13:54:
         83:fc:a5:4f:28:68:59:f3:2e:61:33:ee:92:41:83:35:0d:e8:
         6d:eb:70:67:4c:f3:47:1e:1b:db:4c:d0:5d:95:c0:b5:73:a2:
         fc:10:07:b3:6f:10:fc:8a:1a:8f:a0:e1:2c:85:14:70:bf:25:
         66:24:1f:8e:24:8e:9b:b8:d5:d1:0c:98:c5:c7:f5:c9:2c:cd:
         df:c1:4c:c4:6a:6a:ac:6f:27:2f:9c:8a:fc:a3:44:4c:c2:b2:
         f4:63:76:6b:77:3c:85:22:12:e0:4b:56:54:f7:93:46:3e:a7:
         0d:98:3d:0f:b4:85:5b:a4:b1:ad:e2:fb:2b:ab:cc:d8:aa:07:
         76:38:c8:68:ca:62:22:34:54:b3:7d:5c:dd:a6:80:5e:c2:6c:
         c2:cf:0b:10:a1:6b:1f:04:75:d3:4a:88:a9:e7:55:cd:5d:95:
         d8:3c:66:a4:04:ee:4e:19:fb:5a:0d:9d:80:9b:13:8d:33:e2:
         5f:a5:2a:01:da:2c:ac:ba:b7:7c:b1:35:98:97:9c:7c:b8:37:
         64:7e:4f:89:af:bd:ea:8a:0b:0c:40:46:e2:58:99:4a:ef:b1:
         c6:b8:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:03 2025 by rpki-client