Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/676ea41b-25e0-3542-b245-2a0ce81b85c4.roa
File:                     676ea41b-25e0-3542-b245-2a0ce81b85c4.roa (raw, json)
Hash identifier:          Dwx8TLiiGbNXqB2wBNCCjayYd4rpn+z8gwaH5rI1WUA=
Subject key identifier:   45:25:97:73:31:39:CB:D7:FC:AD:13:0F:26:A0:15:7D:04:6D:8E:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411C2F320CB86CBB3C887C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/676ea41b-25e0-3542-b245-2a0ce81b85c4.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:c2:f3:20:cb:86:cb:b3:c8:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=2ae21cac-cc0d-489c-8edc-1906d563c6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:8f:f5:dc:ad:10:66:8a:50:d0:21:92:2a:
                    95:92:61:72:f6:65:cc:ab:22:06:c5:3f:34:9c:ba:
                    88:2e:69:87:71:7d:b4:cc:8b:ab:9b:cb:ff:58:41:
                    7d:52:11:34:76:36:ee:43:9e:59:97:0a:ce:64:42:
                    60:3a:72:c5:cf:fb:a1:43:4b:cc:22:32:7a:3f:da:
                    83:c9:78:8e:de:84:7e:05:09:d5:c1:9f:97:e2:b2:
                    6f:37:92:bc:90:ad:df:2d:c0:99:24:f4:45:68:5f:
                    63:26:c7:32:4d:62:05:86:df:64:70:f8:01:3f:ad:
                    46:f0:4e:b0:e5:73:a1:63:d9:f5:c8:d9:a8:99:ab:
                    cf:4b:46:f7:87:ce:e8:4a:70:8a:92:50:ca:24:a5:
                    e5:91:c6:58:4b:39:01:55:69:86:5f:09:ee:40:77:
                    2a:28:7c:11:be:da:96:92:91:17:be:eb:54:cb:51:
                    a0:81:69:a4:ba:03:79:05:7c:d2:74:0e:5b:d3:ae:
                    ab:14:76:1d:7c:4b:3e:6d:bd:7b:53:90:cd:b6:5f:
                    68:a6:d7:04:8e:79:82:3d:86:e1:8a:33:9e:67:f8:
                    51:2d:bc:91:6d:b1:6c:67:8d:f6:1f:9d:ba:46:77:
                    1d:f0:f7:bd:8c:0e:5b:d5:fb:0f:db:66:18:78:97:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:25:97:73:31:39:CB:D7:FC:AD:13:0F:26:A0:15:7D:04:6D:8E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/676ea41b-25e0-3542-b245-2a0ce81b85c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:35:8a:a2:22:84:1d:5c:15:8a:96:71:d6:c8:ec:97:f7:c0:
         d9:46:bc:4a:77:80:b2:94:f8:c0:2c:e5:30:71:f7:d7:74:39:
         1e:43:a1:3f:28:ed:a0:e3:01:0e:2c:14:1d:b7:de:03:18:06:
         8c:fa:b8:0d:4c:bb:32:8f:ca:a5:65:80:ca:2a:47:2b:6b:61:
         53:ea:83:a5:ed:13:b6:ce:b6:b5:ca:fd:86:50:9b:49:95:f5:
         d8:1f:0f:e6:ec:d2:66:1b:47:aa:8e:73:a6:af:47:03:e2:b2:
         6b:52:87:92:59:5e:2a:dc:76:44:b9:27:c7:d4:df:50:f6:81:
         e2:81:1b:d7:84:cd:68:ee:a1:fa:81:54:d1:2e:aa:6b:06:79:
         34:d0:48:bc:ad:0a:57:d8:81:b9:2a:d8:67:ff:72:5c:d1:6d:
         ce:fe:18:60:b7:ff:e1:e5:b0:2b:d7:5d:71:0b:44:68:59:60:
         14:c8:cf:62:26:9a:ed:40:83:4c:10:c9:f8:5d:4f:10:7a:ea:
         a9:eb:a6:d5:08:30:2f:26:20:a9:85:c4:58:b8:e3:9e:f0:87:
         0d:f7:0b:19:ce:93:4a:01:13:38:2f:a5:b4:8c:bc:bf:2d:54:
         aa:88:89:0c:4f:74:97:ce:e8:ec:2a:85:ef:72:8d:8a:58:75:
         5b:b5:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:04 2025 by rpki-client