Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d4a4b3-d151-34bd-b814-bbe6e5882309.roa
File:                     38d4a4b3-d151-34bd-b814-bbe6e5882309.roa (raw, json)
Hash identifier:          5iEMsbSVWO21547g9uYmS/MISxlmDK59o5MW9jAH/ss=
Subject key identifier:   4F:63:35:47:C0:11:DC:59:D3:64:18:50:90:BA:4A:0D:91:6C:49:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E0C616B62CD437711400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d4a4b3-d151-34bd-b814-bbe6e5882309.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.107.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e0:c6:16:b6:2c:d4:37:71:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=60653f26-4a7f-4b7b-a9e7-819856db261a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:a9:b7:ee:25:8f:5f:33:e8:c4:8f:4b:3e:
                    f5:ec:25:ef:4e:86:02:70:91:c4:61:e7:c2:11:b1:
                    15:bc:dc:d6:7a:43:ba:2a:39:e7:51:db:7d:8e:11:
                    cf:1d:4c:14:09:50:b9:38:9e:6d:66:a2:53:c2:d5:
                    9e:b2:ed:b7:0e:38:f4:5d:fe:f2:10:90:c1:85:b3:
                    b4:75:8c:dc:8e:b0:bd:b4:23:a0:c4:7d:c4:ac:b2:
                    ab:0f:99:40:64:ad:1a:d0:f1:66:de:12:ae:9b:2a:
                    ac:6b:42:ab:08:63:11:51:fe:b8:ff:df:04:3d:8a:
                    18:ae:78:da:7c:62:5e:95:0e:84:be:7c:3e:01:49:
                    b0:23:26:51:29:b6:b5:1e:d7:d5:75:30:1f:d7:46:
                    09:37:cf:74:36:38:3d:38:60:04:51:b1:f4:7e:87:
                    20:83:dd:30:e0:83:fb:0d:70:6c:b1:ba:a5:85:80:
                    0e:49:37:6e:3c:81:08:90:27:03:b6:45:ba:8c:e1:
                    00:f1:9d:8e:63:b8:62:25:fd:e7:4c:ac:56:4d:a3:
                    e7:05:7e:c4:fe:6d:af:ed:4c:7a:55:2e:0d:fb:41:
                    c4:68:40:56:f4:87:87:fa:e9:d0:6a:21:21:16:9b:
                    d3:a5:99:96:b1:38:5c:2f:7b:26:f8:78:a4:62:b7:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:35:47:C0:11:DC:59:D3:64:18:50:90:BA:4A:0D:91:6C:49:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38d4a4b3-d151-34bd-b814-bbe6e5882309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:af:7c:13:8c:1e:c3:a8:d4:ed:68:74:dc:6d:fe:18:a8:16:
         e8:2c:21:f3:16:18:41:2a:72:fb:9d:82:74:73:4b:8b:f3:3f:
         a8:6b:64:d2:55:6d:32:06:c0:cb:9f:9b:ef:f3:fd:83:d8:b6:
         d5:76:0b:56:50:2b:62:7c:e1:0a:ea:44:f5:33:ff:ad:4b:bc:
         fa:b3:90:40:b3:c1:8c:5f:e0:27:5c:f4:78:82:8b:5b:c7:cc:
         3c:30:2c:5e:e4:8d:ab:c7:97:29:d6:e3:3f:ee:bd:0f:3b:3b:
         ab:da:02:53:88:e7:b7:5f:05:90:7b:4f:0d:05:01:1b:eb:d1:
         11:fd:42:84:02:58:1e:f7:60:9e:00:9d:db:42:9d:c7:7c:1e:
         5b:bd:5f:fa:4d:f6:a8:3a:d0:51:0d:27:7a:58:0d:fa:e6:5d:
         e4:21:e3:0e:ec:1e:27:44:bf:5b:1e:95:94:2e:fc:64:99:64:
         7b:98:c3:2e:53:65:d2:68:02:01:d8:25:ec:73:d5:17:8d:8e:
         9d:c9:03:8d:b5:dc:c6:c4:ca:42:69:42:99:c8:4e:1e:18:6b:
         29:f8:9b:3d:b2:29:cc:36:97:c3:96:e8:94:1c:36:01:2e:64:
         1f:67:ee:30:ab:58:76:85:22:f0:f4:7b:a2:be:c4:a7:62:f5:
         85:7a:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:43 2025 by rpki-client