Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b970098-ae5e-35f5-a408-cb4295517b25.roa
File:                     9b970098-ae5e-35f5-a408-cb4295517b25.roa (raw, json)
Hash identifier:          zJnER9Nyxyd5qR0PGj57ZpdGJe5RjoaD0sS9fOA0qCA=
Subject key identifier:   F9:C0:3B:77:F9:FA:79:48:1F:19:DA:44:09:3E:E5:13:95:F6:44:D1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411D476DDABA702C995C600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b970098-ae5e-35f5-a408-cb4295517b25.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:d4:76:dd:ab:a7:02:c9:95:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3f9907c6-246c-4240-a7de-86f381af1eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:de:e7:63:d3:5e:63:4f:2d:77:a4:41:de:
                    f5:1c:d8:50:a1:ca:66:9f:c5:0d:1a:05:4d:a9:6c:
                    93:fc:cf:d6:d6:90:54:59:31:16:a1:c2:e0:4a:6b:
                    a1:9a:04:80:9a:3a:9d:50:f8:df:54:d9:92:8c:c7:
                    85:0e:8b:6c:fa:57:50:b7:ef:ca:95:d4:99:c6:bd:
                    ee:ab:b1:d1:f2:1e:cf:fa:bf:9b:64:51:cd:46:f7:
                    6d:92:0b:65:78:ce:fe:3e:ce:bb:f1:0e:6b:38:d6:
                    86:99:46:70:db:63:74:e0:c6:62:9a:c1:52:bf:97:
                    d1:1d:21:91:c8:d2:10:ee:29:45:38:6b:82:10:2e:
                    c4:2d:7f:6c:00:e2:c9:53:4d:89:0b:f5:d6:71:f2:
                    7c:61:8a:b5:62:3e:05:20:a3:01:96:7c:5e:b6:a9:
                    ad:db:6d:10:37:12:98:3a:18:a0:51:5f:10:33:e7:
                    3e:d1:5d:9c:d5:5d:a5:b9:94:f4:de:1a:61:de:d2:
                    93:c4:4d:ba:dd:3a:fc:b5:4c:73:54:8d:96:81:5a:
                    df:eb:d0:a1:04:de:98:f5:44:18:56:e8:7b:a8:0f:
                    50:89:de:7c:9c:fc:54:f7:0e:12:40:78:6e:83:fe:
                    13:86:20:8c:72:1e:61:bf:83:86:31:05:f1:de:11:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C0:3B:77:F9:FA:79:48:1F:19:DA:44:09:3E:E5:13:95:F6:44:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9b970098-ae5e-35f5-a408-cb4295517b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:7b:6d:3d:6e:2b:72:2c:0d:8a:2b:6b:e1:01:6e:a0:14:69:
         7b:02:89:b2:54:b0:6e:39:d9:74:d3:c8:76:8c:19:77:89:14:
         52:91:ea:b9:fb:eb:8f:63:ae:b7:62:4a:23:00:1e:be:fa:0c:
         90:c0:ca:87:ee:8c:51:6d:c8:a1:30:f6:f3:eb:38:ad:5b:02:
         59:2e:b0:bc:51:b0:8a:86:dc:47:ca:1d:8f:e5:aa:c0:ab:d8:
         e2:fd:1c:aa:3b:05:04:e6:1e:a6:87:7e:44:42:d0:00:a6:4c:
         47:e9:83:61:e5:e6:a9:d4:76:66:b0:10:a1:e0:4c:31:5a:51:
         7a:f0:59:23:78:10:d0:76:b7:0e:b3:f7:d1:7d:9e:d0:2a:e0:
         a7:ef:b1:86:3a:8d:af:5d:50:97:b7:bd:19:c2:68:a1:c6:39:
         d0:f3:93:1c:75:82:93:8d:15:23:99:62:d3:a5:4f:c5:52:f6:
         cb:a7:f8:f2:2c:ca:07:40:2c:30:0a:44:73:11:78:60:4d:07:
         44:44:6e:d1:6f:7c:42:d5:ff:68:a4:54:50:cb:b1:47:e7:26:
         42:ed:5c:84:bf:6c:37:c1:dc:e0:3b:c0:1e:9d:34:be:dc:3e:
         f1:93:c7:36:49:5e:d4:50:04:8e:6b:ed:95:ee:73:b0:2d:76:
         ae:4f:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:16:15 2025 by rpki-client