Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cd6fb2-c6e9-3bfb-ac70-2304f96adf2c.roa
File:                     21cd6fb2-c6e9-3bfb-ac70-2304f96adf2c.roa (raw, json)
Hash identifier:          To+s2Wl7Q1hZe3dnhH5xPIYSdVEYZKTWxhps9H3X0hc=
Subject key identifier:   2C:50:7D:40:4E:50:6F:E4:C6:03:E4:B4:1C:9E:D3:48:86:DB:D6:C2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841122BCDDBAD09171973E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cd6fb2-c6e9-3bfb-ac70-2304f96adf2c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:22:bc:dd:ba:d0:91:71:97:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=73b9d4db-c648-4228-9367-050997a84578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:be:09:a2:d8:87:5e:1b:a2:2a:4f:91:99:
                    15:7c:de:d5:5f:43:94:90:44:a0:e9:ed:70:ef:93:
                    29:27:55:76:e9:e3:57:90:d6:0f:92:09:1c:3f:cb:
                    be:9d:b6:22:c7:80:94:90:17:07:42:94:2a:f8:55:
                    ef:50:19:57:62:f5:75:49:58:b7:6f:97:5d:ed:81:
                    d9:a3:8d:dc:8d:93:a5:ba:80:f3:51:54:89:5a:b7:
                    3f:f6:ae:b7:9b:38:b1:45:be:19:b2:aa:02:b7:65:
                    b2:28:d7:3d:39:32:52:24:6d:32:f4:93:85:af:c1:
                    61:3b:02:da:51:47:77:f4:12:88:2a:22:e5:03:39:
                    78:9f:6a:8c:87:41:66:a5:ca:70:12:cc:a1:4e:99:
                    7a:2f:5e:88:06:25:c9:11:e8:e4:08:82:42:ce:02:
                    11:e6:e2:5f:ef:3a:a0:69:f1:3b:cb:ec:de:fd:28:
                    76:97:ac:12:0b:f4:e1:e7:b1:af:71:9b:6f:ab:71:
                    a0:35:c9:41:83:93:b8:75:cd:21:35:5d:89:6b:3e:
                    b7:f9:a6:13:be:6e:e3:e8:f8:22:dc:56:95:2c:97:
                    04:08:c2:c2:ba:86:fb:f1:e9:bd:c1:26:b3:1d:39:
                    9c:b1:2f:37:39:3f:79:e9:3a:43:bc:aa:f4:d8:94:
                    f5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:7D:40:4E:50:6F:E4:C6:03:E4:B4:1C:9E:D3:48:86:DB:D6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21cd6fb2-c6e9-3bfb-ac70-2304f96adf2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:c1:4f:a4:d1:6f:e7:09:18:fa:86:c4:66:a7:27:6a:c5:9f:
         2e:61:4b:ad:44:fb:9e:46:0a:74:b0:03:61:2a:c4:6a:ff:93:
         00:06:40:bf:24:04:60:15:5a:20:13:a7:e5:0a:67:22:26:48:
         db:63:96:2d:ed:9f:61:9d:e6:f8:45:d9:e5:99:91:67:56:54:
         b3:11:66:3b:cb:dd:cc:0c:d8:7f:da:2e:1d:bf:28:f5:65:7b:
         1c:65:2c:a3:a2:6c:70:54:96:dc:c5:c7:88:95:d3:80:51:d7:
         ed:9f:8c:b0:f5:70:61:f6:60:22:e7:b2:f0:f2:de:0b:4e:68:
         9e:26:10:fa:29:43:2d:8b:d5:c1:55:b2:08:82:eb:b7:a0:59:
         1f:f6:10:3b:24:9a:68:83:ac:09:1f:9e:06:74:c5:2c:83:20:
         62:29:68:cf:ee:30:4d:0e:21:97:81:5d:53:d3:51:26:12:5c:
         11:30:e0:5a:d3:4c:e9:3f:8d:73:cf:db:98:39:6b:cd:82:2f:
         a4:57:fe:2e:3b:f3:d2:c8:30:d6:a0:f3:d1:bd:fb:8e:16:be:
         ec:38:db:fe:3a:0c:19:28:f7:19:33:de:c9:ad:6a:b9:13:8f:
         b7:a2:f7:d4:69:3c:53:79:37:31:3f:ee:01:86:12:71:85:65:
         2d:61:5e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:03 2025 by rpki-client