Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71c24915-63df-3257-99c4-59b3ba82ec67.roa
File:                     71c24915-63df-3257-99c4-59b3ba82ec67.roa (raw, json)
Hash identifier:          IP7cBOU2e493JkM6rA+3KP6PDjiKcqyA9In20xyNPro=
Subject key identifier:   89:40:27:C6:4A:BE:1D:A0:0B:DD:BE:CE:79:E3:D1:C7:F1:7C:C2:38
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E11BC148D8C87DAD3B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71c24915-63df-3257-99c4-59b3ba82ec67.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.107.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e1:1b:c1:48:d8:c8:7d:ad:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3323217f-18de-4655-85d4-3a99a90005ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:8f:72:24:a9:38:4f:f6:ab:da:d8:04:7b:
                    f1:a3:07:2b:ca:88:58:9b:59:5c:e4:42:33:02:33:
                    de:d0:ac:b1:13:5c:f8:ac:4c:98:0c:00:72:50:21:
                    f3:af:e1:95:67:d6:8e:c8:9a:7f:39:f4:8c:c2:94:
                    0e:7f:7c:de:bc:c4:2f:a8:b5:8a:1c:57:2e:2b:bb:
                    1d:39:e3:5a:91:87:2f:6f:c6:26:c9:e0:69:13:30:
                    62:78:d8:23:52:a2:4d:78:27:ef:a0:a4:0b:c8:22:
                    14:b9:43:f0:36:3c:f7:63:a6:5f:5a:e0:63:3e:20:
                    ff:38:c7:86:0a:f1:e5:af:95:17:d0:ab:72:3b:72:
                    38:b9:48:38:2c:bf:11:cb:b2:56:b0:5e:03:d8:48:
                    a9:44:5b:6e:03:ac:45:3c:0c:fb:1f:42:07:8e:4d:
                    25:4f:3d:d7:83:c2:33:62:d5:2f:a2:71:bc:df:a2:
                    45:77:57:77:16:3b:65:f0:31:9f:ec:7a:2a:54:e0:
                    f8:73:92:bf:62:38:f2:fe:42:d8:3f:c9:cb:b5:1a:
                    bd:bd:00:11:f9:73:2b:54:a7:16:23:56:20:82:fd:
                    91:7a:8f:36:c2:ef:c8:0b:a4:7d:4a:e8:4d:6e:87:
                    ff:71:87:86:81:93:82:47:d6:25:20:84:50:20:19:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:40:27:C6:4A:BE:1D:A0:0B:DD:BE:CE:79:E3:D1:C7:F1:7C:C2:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71c24915-63df-3257-99c4-59b3ba82ec67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:75:d9:b7:43:72:8a:42:5c:82:85:40:44:a3:56:d0:c8:68:
         69:b3:f9:5c:33:56:b0:6a:a7:91:7f:a9:dd:45:06:de:aa:a2:
         33:61:82:06:da:41:3e:2f:73:8b:49:76:5a:50:35:ee:81:01:
         9f:1c:b0:21:09:de:f5:cc:f7:4a:fe:b2:75:48:d9:33:75:16:
         a5:7e:02:ca:ce:ab:24:e2:38:fa:ea:43:74:e4:d3:3f:60:cc:
         84:ff:4f:bb:97:55:74:e9:a1:dd:2a:de:80:6c:61:2d:df:96:
         9d:2b:e3:a3:6c:09:c5:9a:24:72:c4:64:32:44:ee:94:34:c9:
         fd:52:31:26:2a:84:4c:74:f6:7d:c8:f0:4d:4b:e7:96:f7:0b:
         17:68:7f:1d:98:79:05:a1:e0:60:a6:49:ca:ae:b0:3f:a5:56:
         e8:9f:c0:9d:51:cc:b2:f0:10:14:bc:5b:50:72:f6:9b:09:db:
         4a:50:c7:a3:02:d0:51:3e:67:57:c6:db:31:db:85:9e:bd:99:
         23:61:53:e0:1d:f4:ee:cd:5c:58:e5:a8:59:3a:8f:f4:8b:6e:
         d1:2a:2b:25:35:e7:36:69:a7:40:ea:54:42:04:4d:f4:a8:4a:
         fd:e4:55:13:96:8c:15:f6:71:c5:ce:59:3f:01:6e:40:36:74:
         32:be:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:43 2025 by rpki-client