Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add081fb-0365-30f3-8573-c0e0beed1c45.roa
File:                     add081fb-0365-30f3-8573-c0e0beed1c45.roa (raw, json)
Hash identifier:          J4srFRhNM3QyDUthLIRYI191Jf1/wYiKfB+OABpCswM=
Subject key identifier:   F1:D0:D1:94:D2:63:1C:BE:E0:30:D3:4D:5F:6B:07:17:0C:00:ED:BC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411CCCB59993D27279CA8C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add081fb-0365-30f3-8573-c0e0beed1c45.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.105.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:cc:cb:59:99:3d:27:27:9c:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b9348345-dd5a-404c-b892-e52933736944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:ec:1e:82:37:f7:e8:20:da:97:a7:72:86:
                    34:ad:81:98:b2:e4:fa:9b:18:b3:5f:88:bd:83:97:
                    31:50:68:19:44:65:07:85:f8:4d:4a:61:41:aa:c6:
                    45:8b:15:df:56:05:3b:26:ae:01:d6:66:cd:ec:29:
                    1f:cb:93:42:cc:df:2c:b9:98:68:ac:e1:4d:a1:57:
                    57:45:f6:b6:b0:ae:5f:c3:81:12:cd:a9:8b:8d:d9:
                    cf:eb:f8:2e:06:2e:23:48:c7:26:e5:b1:fa:c3:ae:
                    16:02:6a:de:f9:04:20:81:c7:34:67:15:54:75:5c:
                    3a:4c:13:3a:14:cb:1e:ce:31:1a:23:3a:48:cc:c7:
                    57:02:b7:c0:39:ae:17:22:b6:e7:67:74:0f:d3:be:
                    1d:41:0e:71:74:65:7f:f5:9c:46:a1:4b:38:d4:e2:
                    54:e8:32:73:2c:b1:30:a9:3d:2c:d8:b6:a9:bf:a7:
                    a5:e0:0f:fc:c0:ba:57:e8:b1:68:18:11:84:32:eb:
                    80:df:f8:c8:da:f1:da:5d:7c:d5:e8:33:9f:7d:94:
                    88:42:13:92:aa:d1:82:5b:14:b7:ff:c7:83:64:7e:
                    78:0f:6f:2c:b5:3d:b1:cd:e9:d6:3c:c8:b2:38:f2:
                    51:91:7b:59:58:45:61:11:2e:b7:27:e0:5d:80:65:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:D1:94:D2:63:1C:BE:E0:30:D3:4D:5F:6B:07:17:0C:00:ED:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add081fb-0365-30f3-8573-c0e0beed1c45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fb:03:30:a6:06:4e:89:b4:3e:50:4e:48:83:62:33:ca:2e:
         5c:bf:50:dd:e1:6a:50:40:88:58:a8:5a:e8:de:9d:2d:b9:b4:
         7c:5a:a1:bd:8d:21:ca:dd:8a:f4:5d:77:dc:d5:4f:de:54:b4:
         c7:7b:fc:24:7e:24:b8:9e:60:60:7b:18:c4:43:a5:66:ef:db:
         b7:1c:f6:16:06:2b:2a:67:31:58:f4:ea:a2:e0:a7:cf:6d:00:
         e5:86:39:54:ec:0b:ee:4b:ea:99:c2:23:60:2d:3d:77:40:2f:
         15:70:5d:b4:c3:1d:a5:79:16:79:d1:94:90:2f:63:ea:75:07:
         0f:00:8b:61:f5:11:86:4a:93:ea:03:d3:b0:59:fa:75:4d:9a:
         d8:80:f3:6f:e0:83:11:51:6c:12:b6:88:61:1c:a8:b0:90:5b:
         38:47:cc:48:33:28:51:96:21:2a:ae:96:21:5c:5f:00:4d:db:
         01:96:48:8a:58:31:ab:84:69:21:92:77:01:95:48:5f:e5:15:
         4c:ec:ef:4d:04:12:ff:69:16:4f:e2:60:59:c0:88:ef:ba:29:
         1f:7e:6e:68:2d:fc:2a:de:2d:10:3a:75:de:8d:8f:82:ce:88:
         6d:ee:9b:f9:b9:e3:71:34:d7:1a:2c:a3:80:55:8f:7e:2c:7d:
         a7:43:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:19 2025 by rpki-client