Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c7d96a2-4b5a-399e-8354-6371120c1b0c.roa
File:                     4c7d96a2-4b5a-399e-8354-6371120c1b0c.roa (raw, json)
Hash identifier:          ahbjoTBM+O+SHmoNfDs8OjWnyciuaOSp5exCVvS8O+0=
Subject key identifier:   32:07:6B:E1:A5:F3:FA:88:36:32:E9:3A:A2:97:E0:3B:F8:49:EC:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411129E5F0257E5D0E45900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c7d96a2-4b5a-399e-8354-6371120c1b0c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:12:9e:5f:02:57:e5:d0:e4:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e224b6d6-9c9e-4151-bee1-bfc9bebdf949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:7a:6f:3b:6b:fa:bc:e2:cf:70:4c:d4:1e:
                    65:9d:ec:ae:6a:fb:f0:cd:e6:97:09:d1:3c:ae:0b:
                    d6:24:01:49:6d:3f:93:7a:b2:0e:7b:0d:bd:86:08:
                    3e:8d:eb:8d:5a:a8:fe:57:2c:d2:14:8b:15:49:f7:
                    69:64:d7:bf:71:27:51:b6:2b:f4:8e:81:4b:10:56:
                    bb:5c:91:88:67:ad:3d:bd:05:18:c3:43:50:05:96:
                    6f:34:8a:8f:de:7b:6b:29:2a:7f:e3:75:8f:a0:1b:
                    d2:f9:54:7d:09:10:0d:6b:f5:62:ec:80:58:4b:93:
                    7c:0f:f6:1a:e5:a0:54:90:dd:34:ac:98:53:dd:e4:
                    61:d5:7f:d4:62:8f:66:f6:1f:28:19:14:a6:98:b7:
                    6e:c8:43:5a:cf:9a:de:95:36:d4:ab:3d:c3:f4:d3:
                    24:98:65:7d:a9:ec:44:e5:fe:e7:67:02:80:e0:a9:
                    e8:d9:34:02:74:44:34:0e:88:9b:8e:0b:7c:c9:66:
                    2f:fe:ec:83:e5:10:8c:f2:b4:6f:c9:6a:86:f1:43:
                    30:cd:5b:b3:ae:a5:e1:8e:d7:33:1c:7d:4c:4f:4c:
                    20:c9:e5:a7:fd:05:1c:79:d4:07:69:71:18:f8:3b:
                    60:31:33:ee:2b:8f:7b:01:b6:99:46:b2:3c:b7:92:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:07:6B:E1:A5:F3:FA:88:36:32:E9:3A:A2:97:E0:3B:F8:49:EC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c7d96a2-4b5a-399e-8354-6371120c1b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:49:2b:90:e4:d6:d6:de:44:f1:9d:4e:4f:07:69:77:1c:3c:
         36:13:f5:c5:97:03:19:dc:23:a6:e5:38:5e:29:a9:7f:9a:80:
         af:48:18:a0:4f:dd:bf:9b:8b:12:cf:8d:b0:ca:3e:c4:57:75:
         b4:68:9b:77:2a:39:4b:e5:8a:63:cc:e7:74:67:ce:ac:e7:b9:
         b4:9f:61:b8:40:88:1a:e4:b8:d4:96:61:20:56:4d:d3:8d:13:
         ed:60:2b:2d:95:ba:13:d0:86:c7:10:5e:5d:91:69:31:12:80:
         76:fb:8d:a3:99:c6:bb:88:3b:04:ca:61:b2:8b:70:18:51:3c:
         5b:2d:cd:8d:4c:71:44:7d:42:28:79:42:86:d6:a1:2c:68:85:
         2d:9e:ca:20:21:e5:b5:9a:c3:40:ec:33:d8:0a:91:eb:fe:bd:
         dd:77:7c:20:da:f5:0b:51:52:64:17:38:2c:c7:67:5f:96:5a:
         6e:0a:47:e9:f1:d7:bc:21:ea:84:fd:be:fd:d0:a6:94:7d:2b:
         74:e8:bd:52:3d:02:2d:1e:97:98:d0:7d:d7:4e:68:c4:14:c4:
         2c:47:3d:5e:4c:e9:dd:26:dd:5b:fe:08:62:5d:d5:8f:85:17:
         a9:f2:79:30:0d:74:49:b9:07:d7:7d:44:90:99:a8:cc:86:5c:
         1e:d2:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:35 2025 by rpki-client