Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95f588b4-d966-3de3-8082-be2436096509.roa
File:                     95f588b4-d966-3de3-8082-be2436096509.roa (raw, json)
Hash identifier:          cPKFE7JV0Xy8r1yPsaf785iidK2Cn6hg2VBg9SNMU9o=
Subject key identifier:   67:8F:E4:72:23:94:14:2F:0B:F7:E9:EE:80:95:51:D3:E7:76:59:93
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110F6771F2581961EC79C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95f588b4-d966-3de3-8082-be2436096509.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:0f:67:71:f2:58:19:61:ec:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1076c350-1358-4178-b9bb-105f27e84104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:5d:6b:c1:cf:d6:1a:9f:3a:78:32:6a:de:
                    8d:b3:a7:e9:61:cf:ee:a0:5f:63:6e:c4:b1:d4:e4:
                    9f:1f:f2:e1:b2:49:29:b6:92:74:ee:72:30:b3:95:
                    67:84:41:30:06:a7:35:09:89:b1:a2:cb:f1:25:d8:
                    c3:d1:0e:c9:9b:00:57:70:33:19:2d:c1:27:aa:41:
                    be:16:22:57:92:27:1c:78:31:e2:7b:9f:0d:ab:3f:
                    a1:62:cf:59:88:48:09:47:1f:a3:4a:5a:f5:6d:d5:
                    3c:99:47:a6:46:0b:5c:b7:21:2f:f3:24:b2:f5:d4:
                    77:a0:fc:8d:b7:6f:91:d8:9f:f8:1f:32:65:e8:f7:
                    02:89:33:27:74:51:91:0c:7c:65:1a:b9:47:64:a5:
                    66:dc:96:fd:1f:22:fc:81:63:8f:01:ed:4e:7c:b9:
                    2e:e1:63:5f:2c:69:f2:49:f8:d3:09:b8:30:4e:96:
                    7e:58:02:85:43:13:5a:1c:ef:aa:f7:b4:3f:0e:f7:
                    4b:c7:a8:d6:ae:9b:ac:2f:27:2a:75:1b:40:e8:dc:
                    94:a4:4c:1d:b4:7a:13:d1:67:94:0c:45:70:63:53:
                    4f:54:9c:65:49:65:23:37:f4:dd:40:1a:34:e4:dc:
                    63:3f:1f:35:32:f0:00:b4:28:ce:ae:49:69:46:59:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8F:E4:72:23:94:14:2F:0B:F7:E9:EE:80:95:51:D3:E7:76:59:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/95f588b4-d966-3de3-8082-be2436096509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:47:83:23:bf:fa:14:5f:8a:61:8f:cb:2e:f3:82:c6:4f:19:
         6e:f9:31:88:25:64:6e:55:8e:ee:e2:08:49:a1:a2:02:86:a4:
         03:d4:cd:2e:ef:bc:75:da:f1:bb:bf:d2:52:d8:00:1c:6d:14:
         94:1c:4a:82:cd:c4:6c:e5:ff:90:9f:ee:a8:d7:da:6c:0e:f0:
         f6:af:c0:26:9a:9f:58:17:ae:24:98:4b:61:71:7a:b5:18:ef:
         6f:1c:ab:29:2c:ab:b8:43:b1:73:0c:7a:aa:ec:56:fd:18:65:
         1c:dc:e1:c7:52:1e:0b:39:16:3d:cb:62:58:a7:31:00:93:18:
         3d:2c:82:ad:4c:68:8f:45:88:5a:1e:c1:51:b0:f0:87:5c:ff:
         ff:d0:8b:f1:72:28:24:53:67:a9:54:63:a4:44:19:65:73:80:
         fb:a7:21:56:61:a7:fa:57:fa:ac:6a:a6:fd:e4:0f:ae:a0:87:
         ae:7c:b6:ed:c8:94:6c:67:b8:b0:bf:fc:0e:54:0f:e5:59:2e:
         73:e2:a6:f6:74:f9:09:35:61:cf:0d:dd:02:ab:14:03:a1:58:
         e7:4e:9a:ec:43:f5:9d:e4:0b:2a:07:13:17:7f:0d:a3:c9:c0:
         9d:82:e8:ba:7f:76:c5:48:ac:6d:78:76:af:f9:65:46:c3:0a:
         8b:b7:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:15 2025 by rpki-client