Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76e88158-5766-3c81-a43c-b5505316c4ee.roa
File:                     76e88158-5766-3c81-a43c-b5505316c4ee.roa (raw, json)
Hash identifier:          J1oHSPrxvU88f4vamFoI9k1Jmn2uW2jAKXfviBrUCRA=
Subject key identifier:   9F:0E:FA:FA:6C:4E:12:A5:D9:46:47:8F:57:D2:DC:2C:51:64:CE:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411BF609D8B03591F457E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76e88158-5766-3c81-a43c-b5505316c4ee.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:bf:60:9d:8b:03:59:1f:45:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a903958f-808c-460b-a526-9f76757ea807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:ad:1e:d5:f4:49:aa:bd:d6:67:cb:d3:66:
                    0c:1a:7a:0f:73:e0:6c:43:f5:39:55:0a:ec:a6:0e:
                    42:81:14:91:b5:c6:83:bf:be:4e:31:4e:8b:6b:d7:
                    c7:6d:4e:3a:48:42:32:fd:49:02:9b:25:e5:f6:95:
                    22:d8:c8:33:51:69:c4:35:a4:e2:9a:d6:a8:a6:44:
                    95:47:c8:fb:82:57:0e:c8:df:98:14:8f:82:a9:a1:
                    21:26:7c:22:40:da:d8:89:54:0d:d0:86:e8:66:4b:
                    ef:ce:e2:b8:b1:8c:5a:f6:1e:a0:48:5f:da:5f:f1:
                    c5:67:eb:db:c8:ff:0d:bd:f4:4c:e1:33:53:1b:e2:
                    5c:92:3d:7e:b1:74:3b:d2:f3:c9:e4:dc:77:e8:62:
                    39:98:29:e1:84:1b:0e:dd:a7:9e:68:71:a8:85:54:
                    7d:ec:e1:0a:6a:80:6d:d2:4b:7b:57:c6:15:77:41:
                    09:16:ae:de:90:ba:42:05:dc:bc:17:2f:a7:6b:fd:
                    37:20:ed:73:52:51:17:c2:e6:24:f6:a3:6c:28:2a:
                    5b:44:b0:be:52:38:af:0a:f0:d8:3e:44:91:ec:0c:
                    ee:89:d7:3d:38:42:6d:5f:41:29:01:19:1f:2c:fa:
                    8d:78:80:40:20:29:18:36:99:74:f8:29:da:4e:bd:
                    6d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:FA:FA:6C:4E:12:A5:D9:46:47:8F:57:D2:DC:2C:51:64:CE:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76e88158-5766-3c81-a43c-b5505316c4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:6f:3f:6b:6c:24:1e:40:2b:f7:49:00:63:42:2c:1a:bc:
         cc:54:8e:06:ab:80:12:e7:39:22:44:ec:3d:df:1f:dd:dc:ac:
         2e:53:e0:17:35:c8:4c:39:52:b9:2f:de:2f:19:1d:10:3e:3b:
         9f:d1:e7:4f:df:71:35:e0:b1:05:d0:3b:ab:58:b8:6e:3a:d9:
         3f:fb:ec:af:3e:11:8d:dc:0e:8d:fb:51:90:d0:22:82:58:ba:
         28:96:ed:b9:4a:3b:8d:bd:04:81:9d:2b:1c:2f:3c:29:ca:dd:
         d3:ca:d0:fb:e4:6d:c2:a8:63:52:34:0b:5f:f1:f1:49:0d:2a:
         53:b3:91:77:e7:7f:b7:fc:56:08:33:6c:6c:28:e4:4b:51:79:
         2a:9f:30:7c:b9:ca:7b:61:53:8a:d3:ba:97:c1:41:e3:59:75:
         33:e6:db:fe:fc:c7:c3:c7:31:1a:6b:25:a7:50:f9:a5:54:8d:
         e2:b7:7e:8c:c5:12:a4:13:2b:48:ff:0d:ef:f9:73:0d:66:4f:
         f9:d7:b5:70:f4:5a:6a:bc:29:23:42:7c:b8:16:37:39:a8:03:
         de:cc:8b:56:6c:8d:be:6f:5d:01:c6:66:e7:04:4f:0c:56:95:
         d7:cc:7a:81:0b:d2:f9:ac:be:9f:1f:b2:a6:81:f4:0b:62:af:
         78:d1:2a:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEb9gnYsDWR9FfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YTkwMzk1OGYtODA4Yy00NjBiLWE1MjYtOWY3Njc1N2VhODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTetHtX0Saq91mfL02YMGnoPc+BsQ/U5VQrs
pg5CgRSRtcaDv75OMU6La9fHbU46SEIy/UkCmyXl9pUi2MgzUWnENaTimtaopkSV
R8j7glcOyN+YFI+CqaEhJnwiQNrYiVQN0IboZkvvzuK4sYxa9h6gSF/aX/HFZ+vb
yP8NvfRM4TNTG+Jckj1+sXQ70vPJ5Nx36GI5mCnhhBsO3aeeaHGohVR97OEKaoBt
0kt7V8YVd0EJFq7ekLpCBdy8Fy+na/03IO1zUlEXwuYk9qNsKCpbRLC+UjivCvDY
PkSR7Azuidc9OEJtX0EpARkfLPqNeIBAICkYNpl0+CnaTr1tewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8O+vpsThKl2UZHj1fS3CxRZM4RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzZlODgxNTgtNTc2Ni0z
YzgxLWE0M2MtYjU1MDUzMTZjNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2hhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnBbz9rbCQeQCv3SQBjQiwavMxUjgargBLnOSJE7D3fH93crC5T4Bc1
yEw5Urkv3i8ZHRA+O5/R50/fcTXgsQXQO6tYuG462T/77K8+EY3cDo37UZDQIoJY
uiiW7blKO429BIGdKxwvPCnK3dPK0PvkbcKoY1I0C1/x8UkNKlOzkXfnf7f8Vggz
bGwo5EtReSqfMHy5ynthU4rTupfBQeNZdTPm2/78x8PHMRprJadQ+aVUjeK3fozF
EqQTK0j/De/5cw1mT/nXtXD0Wmq8KSNCfLgWNzmoA97Mi1Zsjb5vXQHGZucETwxW
ldfMeoEL0vmsvp8fsqaB9Atir3jRKk4=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:08:50 2025 by rpki-client