Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90ba9edd-f9fa-3d24-98fc-e8aa1b1eccfa.roa
File:                     90ba9edd-f9fa-3d24-98fc-e8aa1b1eccfa.roa (raw, json)
Hash identifier:          NL2/wusOj3ftjYPsU6Zd5aBOlK4tDbWMv4YmM+bVEAc=
Subject key identifier:   33:05:EB:82:C4:29:9B:22:0F:F3:A9:6C:F0:46:69:0C:37:F2:0B:38
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84112E95607711FD0B599000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90ba9edd-f9fa-3d24-98fc-e8aa1b1eccfa.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.107.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:2e:95:60:77:11:fd:0b:59:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7cac30ae-f362-412e-8ea7-fcda67ae2df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:06:e5:fe:63:1d:08:7e:bd:d5:45:0a:b5:
                    5f:5b:b7:17:9f:92:dd:ab:13:fd:16:70:7b:f9:06:
                    cd:0d:4c:b9:df:e8:01:5b:c4:4c:91:dc:8d:6c:73:
                    bf:61:0c:62:1f:a0:a1:fd:02:4b:50:ab:77:3a:19:
                    e1:92:9a:f9:df:ca:49:3f:99:0c:0b:66:5d:32:67:
                    a8:63:53:6d:96:7a:e2:56:c4:a9:43:04:06:b5:51:
                    12:fc:26:38:4e:4c:43:dd:6b:76:97:4a:8c:ec:37:
                    eb:51:fc:0d:83:d7:30:71:b2:e4:a5:8c:3b:59:42:
                    0a:00:ae:d4:f6:0f:64:7f:6a:d5:c2:56:e4:12:76:
                    5b:45:55:b7:19:47:47:4d:e5:e1:d6:ff:a8:16:bb:
                    e2:b3:71:2a:13:06:c7:5c:74:93:8e:cc:08:68:10:
                    e3:ca:09:52:00:3a:5d:a7:46:e0:c5:47:34:aa:8e:
                    bb:fa:21:36:c8:81:c2:00:0f:65:d2:aa:2f:fc:4a:
                    28:1d:fd:cf:e9:1d:b7:e8:bc:a4:0f:63:b9:3e:0d:
                    80:90:53:29:c1:c4:97:eb:13:da:ab:df:1d:08:58:
                    36:7b:fb:28:69:3c:81:e5:99:ec:d3:aa:fc:7c:02:
                    83:e8:e7:e1:52:01:48:6a:a2:f1:a8:7d:d4:f6:14:
                    fb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:05:EB:82:C4:29:9B:22:0F:F3:A9:6C:F0:46:69:0C:37:F2:0B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90ba9edd-f9fa-3d24-98fc-e8aa1b1eccfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:d4:13:c0:7f:39:c9:a9:48:e5:26:fb:5b:f8:c5:eb:c6:
         f4:ae:1d:18:29:b5:12:b6:ba:fe:51:bc:b0:d9:4d:54:3f:59:
         f6:11:3d:55:36:9c:9c:5e:f9:e5:b8:18:c1:70:53:96:cc:ce:
         5e:62:ed:15:04:cb:3d:87:43:6d:9a:4b:ba:1a:c7:d9:5c:8e:
         e4:84:2c:8b:0f:35:9d:96:3f:fa:7b:ce:2d:39:48:7d:c6:a9:
         ff:86:e4:5c:45:ff:cf:56:fb:2d:36:03:1f:52:70:b1:3e:eb:
         ad:7b:8f:03:ff:52:8a:a0:d8:89:83:7d:8b:6d:c4:0c:17:df:
         81:a6:9f:c6:3c:a5:34:b5:76:43:9c:d5:8d:48:6d:05:c3:b2:
         66:1f:6c:76:39:49:19:89:05:45:b7:30:1d:7f:59:14:ea:a5:
         97:3a:56:10:ae:9f:44:91:6a:be:81:b0:c8:7b:ff:84:63:3a:
         e1:a3:eb:03:f4:a8:1f:45:a4:64:32:c0:7a:f5:bf:e4:0c:b5:
         da:ff:6c:c8:1d:6a:4c:91:e4:6d:c3:6e:bd:15:98:2a:f2:87:
         6d:a4:67:8c:cc:9a:a8:f3:e7:fd:a1:71:d1:d1:18:09:e7:4d:
         35:e1:dd:0b:db:63:79:f5:51:c0:49:07:a0:60:a4:8f:e6:76:
         8b:92:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:59 2025 by rpki-client