Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a641aae-cb25-3f30-b57a-5840e4a2c0ac.roa
File:                     4a641aae-cb25-3f30-b57a-5840e4a2c0ac.roa (raw, json)
Hash identifier:          Bee4d6WuBk+Cse4LtUM3GwAYHIZv0VRgLILPqojCmwo=
Subject key identifier:   B2:CA:DF:F1:4B:CF:48:7D:A1:EB:3F:C9:86:45:3F:2A:98:60:F6:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411D9EFA8BFDBF7CC900B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a641aae-cb25-3f30-b57a-5840e4a2c0ac.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:d9:ef:a8:bf:db:f7:cc:90:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1f0cac8f-88e7-4abb-87a9-f27266749ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:89:b6:e4:d7:33:d2:d5:d6:56:0b:68:ac:
                    d6:52:6d:49:ba:4b:6e:8e:77:67:97:a6:3a:c5:e8:
                    1b:f4:5c:45:34:b6:40:5a:77:1f:73:ba:b8:78:fb:
                    28:46:42:36:96:e8:77:d2:97:4a:30:d1:85:7a:a2:
                    85:f5:71:ed:29:70:05:10:7c:ff:98:82:e4:3b:78:
                    30:c2:be:1c:36:68:a9:c2:0e:94:6d:ae:24:ee:05:
                    e6:93:b2:c5:0f:98:3d:32:3e:1c:c7:9a:48:8b:d0:
                    7c:69:c2:52:ad:69:27:08:5c:af:46:8e:23:9e:67:
                    ae:ff:2c:f9:1c:fe:27:b3:64:93:19:d5:b2:16:3c:
                    ec:c3:79:97:8b:79:cd:8b:72:bc:2e:d7:d2:ad:da:
                    6f:8e:a3:01:f6:73:01:c8:0c:8c:0a:f3:f7:15:16:
                    77:d7:56:0b:4d:c3:81:8e:f6:da:d8:64:c2:41:fd:
                    c8:1c:a8:66:ad:0d:00:e5:fc:12:da:3c:bc:a4:a4:
                    cb:3c:08:80:e5:36:91:88:2e:0f:1f:8f:ba:52:6d:
                    45:95:3d:17:c3:4e:22:92:c7:4a:6f:73:72:35:e6:
                    b5:3a:e3:85:e1:a1:17:e2:64:6a:63:60:3f:45:28:
                    94:8d:51:42:aa:4f:95:02:70:d7:f8:07:b8:d1:39:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CA:DF:F1:4B:CF:48:7D:A1:EB:3F:C9:86:45:3F:2A:98:60:F6:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a641aae-cb25-3f30-b57a-5840e4a2c0ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:33:52:9b:7f:3f:84:b9:9c:50:1c:1b:fe:27:e4:38:52:8e:
         1e:aa:5b:e1:39:a4:b2:52:ca:3e:81:cf:a9:5d:6f:43:e0:e9:
         57:d7:81:3a:f1:d2:3e:ab:d3:d8:5f:dd:e0:3f:6d:00:ea:34:
         8d:d7:73:7d:4d:10:4c:1b:ab:25:50:50:dc:f1:08:57:ed:a4:
         87:c2:ea:f5:ad:3c:1b:6f:82:66:a2:da:97:9f:1d:ec:5a:81:
         c0:37:81:c4:bb:db:bb:2a:c5:8d:e5:98:90:db:4a:5b:df:4a:
         b5:b5:91:e5:cf:35:d4:22:94:76:d4:07:da:2b:a1:f4:5a:92:
         b5:96:85:78:41:74:72:2e:ac:89:b4:87:ca:f0:16:9a:b3:9e:
         c4:f6:dd:69:33:64:3f:b5:75:5b:e0:6f:50:82:c4:44:92:c2:
         4d:7f:3b:2f:f5:9f:5b:a4:a3:ca:9f:cc:17:4a:39:1c:02:22:
         0d:cd:5e:38:ca:ff:04:1e:f3:ad:80:9f:67:45:ce:64:46:26:
         9d:2b:29:12:cc:39:df:3b:1c:e5:f0:d3:d8:ec:a9:5c:50:43:
         90:33:52:90:00:c4:90:5b:60:21:5b:06:83:06:0e:6d:a9:a5:
         ab:8e:0c:1d:0e:71:63:3b:8b:22:e6:78:56:41:e1:61:66:13:
         4a:b4:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:55 2025 by rpki-client