Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b8d6508-dbe2-3a19-a06d-83637c908bdc.roa
File:                     3b8d6508-dbe2-3a19-a06d-83637c908bdc.roa (raw, json)
Hash identifier:          wFDDcW7b7s9y9oEybA5GfqcSq9RE2SAfqhvtLtsx67A=
Subject key identifier:   04:72:F5:7F:F5:5E:01:B1:5B:6D:E1:4B:6B:5C:96:CE:A8:66:9E:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411DD30D4575D2B71919070
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b8d6508-dbe2-3a19-a06d-83637c908bdc.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.107.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:dd:30:d4:57:5d:2b:71:91:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c97b4cda-d891-4821-93b4-41dd5594c4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:92:1c:52:9c:6d:f3:83:68:b6:22:a4:a8:07:
                    1f:62:48:bb:b2:54:5c:71:19:76:cf:d9:07:65:f0:
                    1b:7b:e2:e0:21:f3:a2:2e:c7:dd:db:c2:0f:7e:3b:
                    bf:46:0b:65:65:26:4e:65:1d:da:df:00:1f:d7:3a:
                    71:03:60:3e:93:b3:4c:b1:e1:9d:c8:be:59:2f:3f:
                    74:ff:5b:ee:ed:f6:e4:06:5c:ff:ae:11:29:f1:63:
                    f7:22:ee:61:79:e2:16:97:ea:61:c6:01:07:32:8e:
                    c0:ba:dc:eb:f3:bc:86:f8:82:b6:93:9d:78:10:d3:
                    fc:24:c7:f2:80:25:42:be:e2:61:31:17:53:e1:70:
                    81:f4:c4:27:73:0a:73:5d:55:c9:34:20:59:fb:68:
                    76:b9:4d:fa:3f:87:37:70:82:19:c7:60:29:96:bc:
                    68:7d:2c:fa:b6:5a:92:68:f0:7e:6e:4d:f7:1f:76:
                    9a:cb:30:9d:98:a9:74:ed:cf:e7:f1:35:86:5e:b2:
                    e1:59:60:6d:c4:36:73:8b:18:a9:68:06:5c:7c:42:
                    fc:aa:e8:08:57:b6:23:64:d1:75:63:d7:29:fe:1a:
                    87:ec:cd:12:6c:b3:9c:b6:be:92:51:72:33:0c:f8:
                    96:33:9b:cd:dd:d2:57:53:a3:57:44:b7:12:c0:2b:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:F5:7F:F5:5E:01:B1:5B:6D:E1:4B:6B:5C:96:CE:A8:66:9E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b8d6508-dbe2-3a19-a06d-83637c908bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:c0:6b:3f:30:89:24:2a:07:4b:c4:ff:b2:5d:4e:42:b5:b8:
         a6:9d:3b:30:b3:ef:f3:d5:01:e1:c6:e4:57:6b:71:c8:cc:09:
         77:74:91:48:d3:2f:82:63:fa:88:e1:0a:07:1c:63:7d:c0:96:
         d2:e9:b6:d0:b0:c7:84:98:c4:48:b5:77:f9:f6:a2:a9:5a:1f:
         f6:3a:01:62:45:20:02:e9:ad:70:f4:16:4f:7f:30:dd:6f:49:
         ac:66:40:65:a0:f8:15:5e:09:ad:f0:a0:65:60:bb:5d:59:b7:
         e7:30:16:2c:b1:e0:6d:19:dd:82:8e:4a:45:8f:61:e3:04:b9:
         08:cf:20:1a:6a:91:2a:92:e0:59:c8:ec:c6:50:36:89:3d:f5:
         0a:b4:4b:cb:a2:ff:51:60:7e:87:22:45:a2:72:c1:77:6e:cc:
         b7:85:34:51:97:7b:79:8c:ef:b2:7e:a1:f2:d8:38:7e:68:8c:
         19:43:ad:b9:02:44:e0:ee:46:be:ba:05:51:42:2e:42:f9:9e:
         ef:70:c8:33:5b:5a:49:7c:56:97:dc:ee:43:f1:73:f2:20:f0:
         0c:97:ee:d6:b5:59:a0:09:23:d6:98:f4:2d:75:43:07:a2:ba:
         0a:e9:c3:c6:08:b3:22:fc:dd:2f:78:12:f0:b3:d4:09:17:56:
         7e:5d:4d:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEd0w1FddK3GRkHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
Yzk3YjRjZGEtZDg5MS00ODIxLTkzYjQtNDFkZDU1OTRjNGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJIcUpxt84NotiKkqAcfYki7slRccRl2z9kH
ZfAbe+LgIfOiLsfd28IPfju/RgtlZSZOZR3a3wAf1zpxA2A+k7NMseGdyL5ZLz90
/1vu7fbkBlz/rhEp8WP3Iu5heeIWl+phxgEHMo7Autzr87yG+IK2k514ENP8JMfy
gCVCvuJhMRdT4XCB9MQncwpzXVXJNCBZ+2h2uU36P4c3cIIZx2AplrxofSz6tlqS
aPB+bk33H3aayzCdmKl07c/n8TWGXrLhWWBtxDZzixipaAZcfEL8qugIV7YjZNF1
Y9cp/hqH7M0SbLOctr6SUXIzDPiWM5vN3dJXU6NXRLcSwCuN+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARy9X/1XgGxW23hS2tcls6oZp5ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2I4ZDY1MDgtZGJlMi0z
YTE5LWEwNmQtODM2MzdjOTA4YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2tpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPAaz8wiSQqB0vE/7JdTkK1uKadOzCz7/PVAeHG5FdrccjMCXd0kUjT
L4Jj+ojhCgccY33AltLpttCwx4SYxEi1d/n2oqlaH/Y6AWJFIALprXD0Fk9/MN1v
SaxmQGWg+BVeCa3woGVgu11Zt+cwFiyx4G0Z3YKOSkWPYeMEuQjPIBpqkSqS4FnI
7MZQNok99Qq0S8ui/1FgfociRaJywXduzLeFNFGXe3mM77J+ofLYOH5ojBlDrbkC
RODuRr66BVFCLkL5nu9wyDNbWkl8Vpfc7kPxc/Ig8AyX7ta1WaAJI9aY9C11Qwei
ugrpw8YIsyL83S94EvCz1AkXVn5dTSM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:48 2025 by rpki-client