Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19bd27ed-080f-330f-a1d9-012a6bd65351.roa
File:                     19bd27ed-080f-330f-a1d9-012a6bd65351.roa (raw, json)
Hash identifier:          t68DNkXycuynaAs9nCHN/1mvbaH1x56KBdGMXsS65vA=
Subject key identifier:   ED:78:D7:32:C0:ED:40:F6:A3:13:D3:B4:DF:A3:DD:B7:43:E7:B2:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411CFB7FC5CFB91B4464B60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19bd27ed-080f-330f-a1d9-012a6bd65351.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.105.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:cf:b7:fc:5c:fb:91:b4:46:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=41e1814d-3525-4290-b170-b7fa05a3788f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:88:cc:3c:ed:55:fb:81:12:fd:0c:cf:46:5d:
                    14:c2:87:09:8a:2c:9f:81:71:ae:e2:dc:5d:a1:f8:
                    33:ff:33:95:1d:ce:a4:d1:4e:ab:fa:87:32:58:c7:
                    c8:6c:85:01:a5:0b:e0:aa:71:2f:4f:dd:a4:74:72:
                    88:7f:74:cd:12:97:5c:21:d0:2d:d2:d8:e1:dc:f4:
                    db:1c:f2:7d:80:a6:37:58:4c:07:8b:39:5c:54:46:
                    08:8d:84:6b:e2:87:90:ed:f8:81:a1:29:c5:52:eb:
                    02:00:15:08:99:3b:0d:df:c1:d3:ea:45:ca:68:d2:
                    dc:f2:bb:5e:bf:b2:5a:05:e0:c3:39:9b:e7:57:2c:
                    f0:1a:73:cd:b9:ab:4c:ba:d5:75:fa:db:ef:62:c0:
                    be:01:49:7d:7e:6a:59:db:72:38:00:cf:be:56:06:
                    12:71:14:db:28:8f:27:6c:3a:65:71:85:30:49:56:
                    88:66:bc:53:cf:11:73:39:91:f8:e5:ff:db:e0:25:
                    74:46:dd:d9:c1:39:ac:00:85:26:f4:f8:f8:94:01:
                    ff:d2:97:0a:13:03:7a:ca:bd:d7:45:03:ec:ff:12:
                    3e:f4:a5:b2:6f:5e:24:b7:d6:5d:0c:7b:0d:b6:ac:
                    c6:7c:e6:52:5d:71:f9:09:1e:ba:a4:1e:8d:3c:20:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:78:D7:32:C0:ED:40:F6:A3:13:D3:B4:DF:A3:DD:B7:43:E7:B2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19bd27ed-080f-330f-a1d9-012a6bd65351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:81:60:a6:a5:98:fd:00:8f:a6:88:d2:1d:69:02:21:72:db:
         58:9a:87:02:2a:0d:f5:9f:35:6a:c2:5f:e8:50:03:0c:3e:e9:
         7a:25:d4:bf:b2:af:c1:be:54:27:60:9f:c7:21:6d:dc:dc:d5:
         c1:49:b4:73:3d:75:48:cb:95:09:5e:af:9a:b4:a0:f3:a4:fc:
         dd:dc:0d:17:3a:de:9a:47:e8:29:af:3e:c0:2a:a7:f2:de:a5:
         5d:15:c7:f0:ff:c0:b3:30:76:00:d9:b7:a3:d4:3f:ec:a6:69:
         5f:39:86:58:2c:69:a9:e1:70:3b:7e:7e:ba:2c:b2:72:81:a9:
         f6:41:67:64:1f:6d:66:65:d8:90:ff:e1:b8:35:f7:cd:3c:87:
         a2:67:de:96:02:82:58:eb:78:21:63:90:ba:ab:2e:90:6f:c9:
         02:74:29:fc:25:f0:79:d4:c8:d2:24:89:7b:f5:5f:d2:90:35:
         ed:af:d6:3c:55:f1:99:2e:14:a4:3f:94:13:b2:b9:a0:b8:5a:
         6c:bf:31:fd:65:56:87:c2:15:27:61:69:b0:3a:20:1b:64:63:
         92:34:3d:ba:7b:5c:10:1f:5f:7e:53:8f:34:a3:12:01:58:3d:
         9f:56:c6:72:4d:03:c9:d1:42:9e:86:d3:f3:ec:e9:83:8f:ed:
         f2:75:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:35 2025 by rpki-client