Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12d8caf6-beb2-3289-97de-b525455958ee.roa
File:                     12d8caf6-beb2-3289-97de-b525455958ee.roa (raw, json)
Hash identifier:          xWsacU+JOsUXC2G45pbPzyrz+PmI/FbhR/FI7e3mIk8=
Subject key identifier:   1B:09:0F:A9:87:A7:DD:B5:0A:77:5C:48:31:BE:22:2F:19:B5:64:E8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411CB5F999C53041E964940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12d8caf6-beb2-3289-97de-b525455958ee.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:cb:5f:99:9c:53:04:1e:96:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=70a87b21-c4b3-48e1-9972-712e60a57dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7b:a1:c8:ba:4e:9e:9c:62:62:81:dd:16:d5:
                    d2:cb:1f:e6:b9:c7:d3:05:0e:06:f1:6c:1e:4e:bb:
                    d3:68:8d:48:b3:8c:ee:a3:5f:a0:1d:0f:36:87:ee:
                    73:c9:a3:c7:a7:4a:c9:a2:13:cc:98:9e:17:59:0a:
                    1b:c3:89:32:7b:a6:3f:2e:24:ae:95:ba:9b:04:2e:
                    6c:7c:67:fd:47:ac:3e:a3:bb:d7:a8:4a:12:90:a7:
                    a1:43:c0:1a:cd:93:5a:a5:8a:e0:36:a1:a8:27:4c:
                    b6:08:9d:ae:c6:1a:2c:a5:63:1c:8a:a6:35:e4:f1:
                    67:cf:be:67:18:d0:cc:63:e5:94:60:85:49:c7:b8:
                    3e:74:b3:92:20:57:bc:47:82:ee:47:f4:9a:58:3a:
                    5a:29:e7:ed:bd:94:9e:5e:6e:7b:fb:c3:e1:e6:bf:
                    13:9d:bb:ad:81:63:47:6e:4e:b9:c5:22:71:10:88:
                    75:0c:eb:43:15:11:9c:8d:1f:aa:d3:f3:f1:2d:00:
                    7a:26:c7:65:7e:70:e2:6d:78:54:c8:fa:39:1b:c4:
                    24:18:52:01:fe:0b:65:e8:b7:26:dd:45:0c:a7:4e:
                    50:55:09:09:e5:b1:09:14:31:f6:55:a1:a0:5d:88:
                    26:d1:8f:0b:af:90:0c:25:51:1a:41:9f:a9:87:d6:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:09:0F:A9:87:A7:DD:B5:0A:77:5C:48:31:BE:22:2F:19:B5:64:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12d8caf6-beb2-3289-97de-b525455958ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e4:3b:92:4e:b4:da:51:1c:a0:2f:7f:44:6a:20:7a:8a:e0:
         70:e7:b6:77:cb:14:1a:46:ef:2e:e6:d8:e9:e5:69:f5:35:c2:
         80:92:d2:8b:a6:1e:fc:df:ad:b9:47:dd:8f:6b:f5:8f:7a:e5:
         ce:ce:84:86:f0:e6:a9:1c:a3:10:63:0f:86:ff:93:ea:18:6f:
         d1:be:bd:4c:0a:2a:a7:0e:56:84:a7:4f:cd:01:b8:7c:fd:7a:
         43:76:7d:21:78:74:c3:0c:8d:25:e0:52:7c:c3:f0:c4:0f:e8:
         39:bb:11:c7:b2:5a:bc:2a:62:f9:0e:23:2f:69:5f:28:2f:bd:
         4c:4f:18:18:77:b3:a6:38:d4:e7:fc:d3:57:88:a0:d3:bc:35:
         30:4c:57:21:4f:23:d6:cb:25:ed:87:70:c4:16:95:0a:7d:b7:
         ee:fe:82:e0:6d:a4:74:00:14:67:a7:6e:6d:de:a0:de:b4:7e:
         f2:04:df:6e:1f:04:10:8e:d2:a5:a5:e3:a5:8c:1b:5f:e2:7b:
         33:96:c1:1c:e7:ea:02:e6:c6:b8:d3:fe:2d:5b:0b:dc:c7:51:
         3c:04:ab:1b:69:e1:2e:59:f7:2c:be:8b:25:d4:b7:b1:49:61:
         b9:5d:e3:24:ae:5c:56:35:e9:50:c3:5f:a2:72:5d:04:ec:9f:
         ff:f6:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:42 2025 by rpki-client