Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a5a8497-f987-3158-9606-930f7fa1e7ab.roa
File:                     4a5a8497-f987-3158-9606-930f7fa1e7ab.roa (raw, json)
Hash identifier:          7xM/xlKkpPWWJLx0cLX1arprpGeJZSVxRSFg+tK0WGY=
Subject key identifier:   07:57:F3:82:1C:F2:CB:43:11:FC:30:F6:49:84:89:E9:E5:BD:8E:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E1DD442FB655D9EEFF40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a5a8497-f987-3158-9606-930f7fa1e7ab.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.107.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e1:dd:44:2f:b6:55:d9:ee:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=8f5c0bf9-b65d-41f1-8a03-c5dd0b711118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:90:d8:53:b2:ae:bf:b3:5d:82:51:c7:6a:
                    2f:7f:25:55:d8:f7:59:1d:e8:1f:6c:d1:f8:71:47:
                    5f:2a:29:f6:90:46:6b:21:e5:40:98:9b:37:a4:d9:
                    5c:f0:08:63:6f:7d:de:f1:df:96:71:32:83:14:c8:
                    ce:49:5c:b6:2f:ba:27:bb:7e:23:c3:3b:5c:d1:77:
                    85:c4:7e:82:d5:0f:91:55:a3:97:a3:37:6e:0b:b8:
                    02:6e:2f:dc:e7:44:ff:f5:df:9b:f1:6a:e5:53:c7:
                    08:ad:7a:77:a6:48:73:c9:d2:98:57:96:99:d8:ed:
                    27:2a:e9:4f:4b:6f:10:56:73:39:e0:da:46:b2:19:
                    65:b6:59:34:d0:dc:02:a2:f2:bf:15:f9:d3:07:eb:
                    3a:c9:96:46:6b:eb:31:19:51:96:90:01:c3:a4:0f:
                    80:40:db:10:df:4d:b7:a6:69:11:59:95:f4:83:cf:
                    96:16:a8:38:30:c1:82:b6:75:c4:61:a1:6e:b1:84:
                    63:9e:6c:48:b1:71:c7:cf:89:c6:75:2a:b3:c8:b1:
                    aa:90:da:74:3f:1f:97:71:7d:92:44:ee:3b:35:e3:
                    0b:3e:88:bd:1b:2a:e5:e8:1e:53:c9:7e:82:9c:a1:
                    fb:b8:b5:e9:f3:31:6f:22:b5:ab:2d:57:74:91:aa:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:57:F3:82:1C:F2:CB:43:11:FC:30:F6:49:84:89:E9:E5:BD:8E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a5a8497-f987-3158-9606-930f7fa1e7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:0c:17:9c:26:e0:a4:23:75:00:db:2c:a0:65:e6:17:5c:f6:
         7b:2d:9f:79:37:35:3e:01:4c:6e:f6:e0:c3:82:f7:37:ec:fa:
         14:7f:48:81:10:6e:75:40:d4:1f:fc:39:e9:67:82:e4:39:8c:
         67:45:01:f8:da:04:19:46:1a:a7:0d:79:5c:20:16:dc:02:6c:
         13:c7:22:c4:79:73:f0:03:41:2a:80:8d:63:c5:2a:61:b9:3c:
         32:69:1a:b2:a2:90:8b:41:64:d6:14:79:96:fc:74:cf:33:2b:
         27:72:f4:76:54:0f:38:43:a9:28:b7:1f:bb:02:24:72:37:9d:
         5c:b3:25:44:a6:60:4a:f2:2c:24:0d:9a:e5:c9:2b:7f:ff:69:
         5a:e1:14:86:9c:e3:68:4a:3b:77:b4:43:37:05:96:db:ff:2c:
         55:2c:1e:ac:26:7e:07:5d:ef:6f:45:35:ab:6e:c4:ab:f8:98:
         9b:b6:c5:31:ac:ee:5d:d7:d3:33:09:fd:69:88:bc:21:cf:39:
         a7:19:13:64:50:8d:e4:a1:72:ad:ab:b7:ec:09:d0:90:4d:74:
         88:92:21:f3:1c:24:71:3c:f2:26:1e:59:70:c3:c4:f7:c5:18:
         be:a1:c8:1d:3e:79:e7:57:89:86:2f:8b:c4:e6:f9:6b:a0:2c:
         f2:47:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:19 2025 by rpki-client