Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/413c4077-f544-3539-9ce6-65aa5d94f6f4.roa
File:                     413c4077-f544-3539-9ce6-65aa5d94f6f4.roa (raw, json)
Hash identifier:          8njz5SDMNyluUsYE71Fyc/F0hY4fLgQJtQr3vcQ0MCg=
Subject key identifier:   1D:01:8E:EC:CC:9C:09:E4:35:C5:EF:7E:3D:94:2A:E5:50:DC:CE:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841120C06392398068DDAF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/413c4077-f544-3539-9ce6-65aa5d94f6f4.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:20:c0:63:92:39:80:68:dd:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3e2dc80e-3100-47c6-bd7a-4ad5821a0ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:0b:4f:1b:59:24:2a:3a:76:b8:ea:08:e0:
                    d4:f0:7b:c4:ab:08:0d:3f:53:bc:be:2e:74:0f:bc:
                    fe:93:d9:4c:2b:22:57:a6:c9:bb:14:cc:df:9f:fb:
                    bc:fa:25:30:11:7f:7d:58:48:4b:7b:93:3e:95:b8:
                    f4:1f:c4:98:cd:21:3e:f4:1e:af:1b:3c:59:65:73:
                    89:0d:7d:f6:2f:b0:e3:71:1c:1d:36:7e:b2:04:ed:
                    31:1d:6a:48:0e:48:20:d5:f5:56:1c:49:99:d0:48:
                    7f:2d:1e:42:93:49:45:06:3c:84:11:c7:dc:ab:4d:
                    01:ca:15:8c:5b:7e:45:d7:1c:45:f5:0f:43:32:d9:
                    02:fc:7d:07:07:23:aa:ad:51:54:52:71:c9:ae:01:
                    23:3a:4a:0a:8c:d5:b9:c1:86:fb:18:a2:f5:5b:df:
                    b1:1a:9a:bc:86:bb:7e:e4:a7:3c:b7:48:79:f0:85:
                    32:13:d3:10:6c:85:de:d2:d2:9a:48:89:e3:16:16:
                    3e:0f:6e:79:0c:9d:d5:5c:e4:d4:2e:85:58:98:df:
                    17:eb:67:f6:50:0e:4c:c7:32:ae:0d:ec:e4:76:50:
                    46:c0:6a:84:5f:cb:fe:00:56:ba:d6:83:89:98:6b:
                    86:56:cf:40:a3:f7:7d:e2:27:85:a1:98:8e:38:79:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:01:8E:EC:CC:9C:09:E4:35:C5:EF:7E:3D:94:2A:E5:50:DC:CE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/413c4077-f544-3539-9ce6-65aa5d94f6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:63:03:a6:91:ab:1d:64:9f:8f:77:15:d4:94:c8:cc:1e:06:
         9f:38:ae:50:2a:56:c1:4b:12:eb:8b:01:b1:f8:2e:17:b8:d9:
         fe:36:b2:56:08:b5:14:3a:82:71:d5:89:f1:11:dc:43:42:4c:
         87:67:a1:0e:be:ba:26:37:ea:ba:5b:7a:7d:26:d0:a0:e9:34:
         1d:5f:0a:dc:08:c4:a1:60:cb:0c:36:37:1b:6d:79:49:b7:72:
         b8:31:7f:89:48:d0:b8:84:9b:93:ea:72:f1:95:2c:67:71:77:
         5d:06:88:e6:98:93:64:d7:eb:41:8f:e7:a3:df:39:c0:e3:ea:
         95:b2:f1:2c:da:5e:af:4a:e6:9c:45:7c:1d:db:7a:3f:18:f4:
         30:12:76:71:df:c0:2b:11:4b:fb:20:86:8b:8c:12:b9:12:b8:
         fb:e9:0c:5a:ae:e2:12:d9:d3:bf:b9:80:d8:19:af:37:c0:ca:
         60:17:0e:44:ef:00:53:99:c2:08:e2:ca:47:69:84:ce:c2:f9:
         9e:34:dc:17:19:43:34:95:fd:5b:38:7a:a5:20:fb:88:62:99:
         b7:6b:a9:7d:43:c2:af:7f:1d:72:4a:a8:bd:15:48:5f:1c:25:
         1e:69:2d:17:51:a3:f1:55:b6:a1:07:21:7e:63:48:cd:12:02:
         86:26:c3:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEESDAY5I5gGjdr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
M2UyZGM4MGUtMzEwMC00N2M2LWJkN2EtNGFkNTgyMWEwZmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNkLTxtZJCo6drjqCODU8HvEqwgNP1O8vi50
D7z+k9lMKyJXpsm7FMzfn/u8+iUwEX99WEhLe5M+lbj0H8SYzSE+9B6vGzxZZXOJ
DX32L7DjcRwdNn6yBO0xHWpIDkgg1fVWHEmZ0Eh/LR5Ck0lFBjyEEcfcq00ByhWM
W35F1xxF9Q9DMtkC/H0HByOqrVFUUnHJrgEjOkoKjNW5wYb7GKL1W9+xGpq8hrt+
5Kc8t0h58IUyE9MQbIXe0tKaSInjFhY+D255DJ3VXOTULoVYmN8X62f2UA5MxzKu
DezkdlBGwGqEX8v+AFa61oOJmGuGVs9Ao/d94ieFoZiOOHk68wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0BjuzMnAnkNcXvfj2UKuVQ3M65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDEzYzQwNzctZjU0NC0z
NTM5LTljZTYtNjVhYTVkOTRmNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2oHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxjA6aRqx1kn493FdSUyMweBp84rlAqVsFLEuuLAbH4Lhe42f42slYI
tRQ6gnHVifER3ENCTIdnoQ6+uiY36rpben0m0KDpNB1fCtwIxKFgyww2NxtteUm3
crgxf4lI0LiEm5PqcvGVLGdxd10GiOaYk2TX60GP56PfOcDj6pWy8SzaXq9K5pxF
fB3bej8Y9DASdnHfwCsRS/sghouMErkSuPvpDFqu4hLZ07+5gNgZrzfAymAXDkTv
AFOZwgjiykdphM7C+Z403BcZQzSV/Vs4eqUg+4himbdrqX1Dwq9/HXJKqL0VSF8c
JR5pLRdRo/FVtqEHIX5jSM0SAoYmw1w=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:33 2025 by rpki-client