Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69311c38-cf33-3bf8-b927-f3cbe84932c2.roa
File:                     69311c38-cf33-3bf8-b927-f3cbe84932c2.roa (raw, json)
Hash identifier:          GnNrs8Q5Cm9dmsNAoICAj5S8XCUt5mPLCTJbVYC3IIs=
Subject key identifier:   C9:A4:61:DB:0D:AD:0F:50:EC:10:14:B1:14:84:A2:92:B5:F2:C8:A5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841124E547A535CDA4804200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69311c38-cf33-3bf8-b927-f3cbe84932c2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:24:e5:47:a5:35:cd:a4:80:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b04d66ab-b94b-4f44-befa-1d9211c230e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:5b:e1:2c:12:c1:28:b4:ea:cb:f9:17:39:
                    83:15:72:52:72:63:b4:f6:69:d6:f1:f4:d0:e3:77:
                    4e:3d:3d:ba:de:c2:3f:d4:51:e0:5f:31:b4:84:c2:
                    31:74:52:63:3f:f4:85:5d:e8:9b:f6:9c:c2:10:45:
                    f8:e1:46:f6:91:73:c0:ad:2b:04:27:4a:15:e6:39:
                    30:86:c5:ff:c0:f8:f5:0d:4b:1d:af:07:dc:ef:d4:
                    96:0b:08:29:7e:e1:69:75:26:e6:60:91:b2:28:29:
                    8e:7b:c6:7c:e7:9e:4e:9d:46:86:4e:3c:b1:f2:9d:
                    a7:6e:a9:22:9c:ff:7b:bd:c9:0a:f4:9a:5e:5c:99:
                    36:c9:f5:46:7c:19:07:ac:44:49:43:d8:80:a9:b3:
                    37:e3:94:3d:f6:8f:54:33:79:fa:04:fd:49:33:04:
                    2d:28:f8:3e:7b:9f:9b:f1:6d:21:21:6c:9b:3d:fb:
                    29:08:cc:9c:14:7e:85:46:b8:d9:c2:be:99:f3:22:
                    26:94:01:a8:24:6c:79:94:2c:fb:91:94:ab:06:39:
                    07:1b:26:18:62:8f:f9:c7:15:69:9d:7e:01:af:5b:
                    e7:58:a7:d7:07:80:6e:65:32:5d:cd:74:b1:3a:17:
                    13:d2:a3:d2:99:f8:9b:87:4e:26:72:b7:0e:a9:7d:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:61:DB:0D:AD:0F:50:EC:10:14:B1:14:84:A2:92:B5:F2:C8:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69311c38-cf33-3bf8-b927-f3cbe84932c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:2e:2d:38:4c:51:4e:b6:be:1f:c5:73:a6:53:6a:0f:a1:01:
         2c:5a:a7:70:6f:fa:c6:fe:3f:bd:74:df:dc:12:46:9e:8b:05:
         6f:66:0a:d0:e8:b6:55:5a:4f:03:be:59:5b:c1:78:9f:05:bf:
         1b:a7:16:59:7f:14:26:c5:9b:99:49:04:e5:70:43:a2:72:6f:
         1f:46:62:bf:b2:0c:17:28:5a:aa:d3:54:61:76:32:c2:89:4f:
         38:55:47:ad:8e:bb:6f:56:95:bd:91:d4:a1:42:67:3a:04:bf:
         23:8b:7e:2a:a3:15:bc:cd:f1:af:1f:57:d4:1d:c4:18:11:9c:
         af:82:a1:fa:09:19:5f:38:55:05:d1:6a:50:98:bb:49:61:2f:
         e3:34:f7:b2:28:65:5f:68:fa:62:29:fd:06:23:e6:46:3a:37:
         cb:c3:63:40:d9:f1:f1:35:cc:8e:1b:fb:f3:0b:a2:a5:6c:34:
         f6:4c:ad:03:1f:7c:b4:68:59:db:b4:2c:a7:85:6c:ed:b7:d4:
         df:30:da:7d:93:37:a9:84:bf:38:f1:ed:f5:06:5d:e6:01:cb:
         fa:29:60:32:2b:21:f5:cd:18:ae:4e:6f:18:56:14:a4:29:1d:
         a3:0a:78:45:c4:cc:fe:73:84:7a:b4:b9:a4:63:25:2c:0e:31:
         61:1c:25:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:44 2025 by rpki-client