Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/886c6d68-562c-315b-88c3-a707a5f49b1b.roa
File:                     886c6d68-562c-315b-88c3-a707a5f49b1b.roa (raw, json)
Hash identifier:          OkU1PH3XZ/wsLS/uvIVVO3djQ9Z9yPaSE1IjiOKgVg0=
Subject key identifier:   8D:C2:6A:46:86:78:2F:14:0B:64:13:D3:3D:4F:7B:15:80:74:DA:3B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841127AD8EDEB1C3013E1620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/886c6d68-562c-315b-88c3-a707a5f49b1b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:27:ad:8e:de:b1:c3:01:3e:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aad455ca-b5f4-460b-aaba-7710415b4b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:c0:94:1d:8a:5f:ac:6a:02:22:30:1e:b9:
                    78:9a:37:33:ed:ba:7e:c5:19:81:b5:95:92:61:0e:
                    60:b7:3f:90:cc:19:cf:31:5b:28:92:f3:52:55:6c:
                    92:fc:0c:c3:19:59:6e:ca:bb:70:7b:02:f0:af:a0:
                    9e:99:03:2f:dd:5b:ef:ac:93:81:8f:a3:79:56:89:
                    2b:8a:ff:b7:6b:98:3d:9b:61:44:52:16:8b:df:bc:
                    62:30:aa:3d:a4:c8:e4:b9:ce:79:be:2d:4c:90:d4:
                    22:1b:5f:68:23:72:3d:f3:a5:4f:46:9a:0b:27:b7:
                    ac:b4:04:a5:08:70:46:a0:cd:6c:b9:4f:65:a0:06:
                    ec:c7:7a:d5:cb:e7:03:e3:47:49:40:de:8d:53:59:
                    f2:8e:d9:02:53:07:be:87:28:07:2d:ce:55:03:c8:
                    8f:94:10:77:c7:bd:b8:26:82:a9:ec:98:93:a8:0c:
                    bd:6a:ee:52:bd:6d:b2:af:ae:46:76:f0:80:37:43:
                    0c:28:1c:5c:9c:85:92:7c:55:81:da:49:c6:90:33:
                    82:d8:c2:f9:10:d4:cc:c6:d1:4b:c9:00:79:f2:27:
                    de:1c:6c:1e:57:92:b9:07:a1:ba:c8:25:8b:87:63:
                    28:3c:23:fa:a1:fb:ce:c0:e1:56:6c:66:7d:c8:04:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:6A:46:86:78:2F:14:0B:64:13:D3:3D:4F:7B:15:80:74:DA:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/886c6d68-562c-315b-88c3-a707a5f49b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:95:75:a0:db:0a:6f:55:b1:3f:d2:49:eb:12:7c:7d:eb:
         42:47:92:6f:92:65:29:6d:40:90:fc:af:6e:28:8d:08:32:1b:
         64:29:a6:7f:5e:31:49:bc:07:f1:8c:1e:6d:28:de:49:32:4e:
         56:2f:52:15:9d:06:50:16:13:94:f7:c7:41:0a:19:12:ba:fc:
         a9:8e:7d:72:08:40:b3:56:91:d6:e5:4d:78:97:5f:8e:89:8c:
         f8:39:5f:16:f7:33:6f:18:bb:e1:db:8c:b2:41:bc:b6:31:33:
         93:f3:77:fb:c0:88:3c:9a:9c:8a:d3:86:e2:a5:72:1c:ef:f9:
         70:f6:8e:5e:5a:23:cb:02:0b:e9:49:04:b1:6d:a6:40:0d:39:
         6d:bd:79:3c:b0:99:0f:9e:05:e4:87:dd:b4:03:3a:8c:b9:6b:
         50:1a:d4:f9:88:dc:7c:94:ae:e4:47:8b:0b:fa:a2:96:f5:f2:
         67:41:2d:c9:a5:5d:39:c6:ee:41:92:b4:96:fd:2b:1d:93:0d:
         43:49:ae:c9:81:09:19:01:b8:c9:5d:91:1a:e7:ff:f7:b8:67:
         5e:42:7d:5e:69:b8:6c:b0:db:17:e9:b5:2a:e7:bf:2a:ee:96:
         70:d1:2a:57:0b:e9:94:96:5e:82:4d:f0:38:bd:84:df:06:39:
         23:ec:48:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:14:21 2025 by rpki-client