Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1281a657-bc2d-37fb-a0c6-c901ce197d18.roa
File:                     1281a657-bc2d-37fb-a0c6-c901ce197d18.roa (raw, json)
Hash identifier:          SeykWfd6w59WNSKqnhstPHQBUWwBK/Ww0Qt98UaL5+E=
Subject key identifier:   4C:EA:C9:45:C8:16:A0:B4:23:0F:60:76:92:C4:DD:4F:E9:03:F1:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411C9CCD652F0A07B305C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1281a657-bc2d-37fb-a0c6-c901ce197d18.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:c9:cc:d6:52:f0:a0:7b:30:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e73a5119-6d7b-4e6b-9910-972284e0c350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:35:b9:36:6c:e0:fb:44:e1:d1:af:25:d9:
                    36:43:90:36:0b:26:96:eb:0a:82:e0:85:c4:6a:6d:
                    6c:08:04:43:2d:87:ea:39:d3:83:fc:f6:d8:db:ed:
                    9b:d0:ef:62:e8:d9:d6:e2:f5:eb:f1:24:7e:46:f3:
                    c3:c3:c0:8e:69:97:67:2b:73:1a:74:16:a0:7f:93:
                    54:d8:42:c8:6a:63:93:57:80:02:35:c1:63:25:a4:
                    62:e9:8f:cc:60:46:ea:30:da:e1:d0:fd:0b:b2:0a:
                    38:2f:59:15:60:bc:6c:fe:23:cf:75:4d:e7:1a:68:
                    52:1e:76:44:bc:e3:d2:1e:37:7c:9e:c5:d4:1a:be:
                    91:42:15:42:7a:d6:d8:e3:c8:b8:6a:de:44:29:15:
                    b8:bb:b9:f0:f0:41:61:3b:d8:40:db:a4:16:fc:8f:
                    c1:bc:15:a0:57:2e:d9:1e:0b:59:aa:9e:a8:1f:f6:
                    6d:0e:0a:96:cb:98:52:51:0c:c7:c3:1b:de:81:f6:
                    51:ba:e9:24:81:7b:67:13:fc:dd:91:ed:93:4b:dd:
                    10:f7:02:61:1f:56:f1:df:93:63:f4:b7:e2:61:dd:
                    bf:aa:e6:54:37:56:2f:5b:58:50:70:42:89:1b:75:
                    2c:35:63:cd:eb:a8:0d:c6:49:ab:de:3f:c0:73:9a:
                    dc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:C9:45:C8:16:A0:B4:23:0F:60:76:92:C4:DD:4F:E9:03:F1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1281a657-bc2d-37fb-a0c6-c901ce197d18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:90:00:7b:16:f0:1a:66:ee:a8:cf:e6:d8:f2:bb:02:3c:9c:
         7a:fa:48:32:79:26:ca:a8:d0:df:1f:db:9d:65:52:75:51:5d:
         bd:d8:20:12:e0:9d:7e:71:ba:ae:af:d6:3a:99:68:56:a4:7c:
         08:eb:06:93:92:be:95:f2:5c:78:7e:20:2f:38:bd:e9:d3:c4:
         f8:4a:39:3c:5a:d8:40:7a:2e:d6:4b:e4:a5:6d:98:26:24:cd:
         cd:b4:e2:14:30:1e:ab:1d:58:90:af:45:bb:d8:52:ed:7c:cb:
         7e:86:97:ae:d2:f7:be:21:d0:4f:9e:34:c6:bd:7d:31:c6:5f:
         ef:9b:64:fc:cf:c1:78:13:a9:a7:17:b4:30:20:fc:db:99:e2:
         c1:db:f1:b7:b3:ef:56:85:35:9f:b0:68:c0:73:fd:88:bc:7d:
         21:c0:3a:4a:71:99:94:3f:c0:94:f9:3c:ad:f2:55:df:05:81:
         2f:11:f7:a3:8f:8c:64:39:e5:7d:60:98:3d:ff:0c:db:fb:fa:
         71:ea:73:17:bc:c6:d7:ab:7c:ca:3e:da:83:a6:03:44:f9:6f:
         7a:57:c0:0a:e6:02:91:c0:7a:ee:e9:99:91:1d:b4:ac:8f:e1:
         65:aa:13:37:48:b3:48:9f:05:c7:d8:73:e8:b3:0e:de:1d:d5:
         66:56:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:29 2025 by rpki-client