Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bdd012a8-0047-3806-8c8a-0fd5128fbf0b.roa
File:                     bdd012a8-0047-3806-8c8a-0fd5128fbf0b.roa (raw, json)
Hash identifier:          SOsuMUbTyFicLDC1ChVLaf/a0bgAZzJgqYiibxghb1o=
Subject key identifier:   C3:66:DE:95:EB:D4:02:A3:A4:56:4D:87:30:32:95:A6:C8:58:5E:15
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E06FEB5BB374ADD66400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bdd012a8-0047-3806-8c8a-0fd5128fbf0b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.107.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e0:6f:eb:5b:b3:74:ad:d6:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=03a6c551-6aec-49f6-b5b8-f80dcc366f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:78:0b:60:fc:42:9d:b2:62:7a:f1:c4:4d:
                    e2:4f:fc:2c:8c:51:51:f4:58:c3:51:49:5a:a3:59:
                    c0:cc:9c:49:0a:48:cd:6b:33:60:7c:df:85:b4:1a:
                    7a:11:6e:48:cd:63:6b:f0:c4:eb:1a:9e:dc:d6:f5:
                    09:57:8e:de:74:6d:99:91:57:cb:b3:5c:4d:68:65:
                    43:98:49:72:31:92:80:5a:03:c2:93:47:fe:c4:cc:
                    b7:ef:50:56:cb:1a:d3:d4:d0:ba:ce:ce:44:ab:74:
                    58:93:e4:f7:40:76:9f:c2:9d:72:3c:a5:47:5c:ff:
                    58:53:b6:62:9a:1d:4b:dc:d3:68:8b:3d:53:60:12:
                    f9:11:7a:74:f5:d9:20:b0:b0:ca:7f:94:97:67:78:
                    a6:b9:ff:ed:e2:d9:42:05:31:a0:cf:63:16:62:51:
                    95:50:4a:33:94:ae:3a:2b:7d:2d:a8:52:f6:7a:9b:
                    f3:27:b1:48:b8:b5:03:22:38:55:9c:85:59:df:a4:
                    22:ae:98:15:17:dc:6f:ec:1e:e8:de:8c:16:b6:3d:
                    c5:ad:99:0e:5a:34:f0:d5:5b:22:63:d5:95:d1:9b:
                    7c:f1:01:1e:69:3c:0e:ef:02:88:91:d5:92:1e:4c:
                    5e:99:83:4c:bd:9c:f5:c0:47:cd:a0:8c:ad:17:78:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:66:DE:95:EB:D4:02:A3:A4:56:4D:87:30:32:95:A6:C8:58:5E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bdd012a8-0047-3806-8c8a-0fd5128fbf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:89:e0:c1:03:0f:4d:6c:d1:48:35:d6:96:f2:50:9a:c5:d6:
         3f:f1:9b:f5:27:3b:b5:99:47:66:3b:c7:92:95:5e:d7:02:d6:
         dd:6b:d8:9b:2a:46:0d:ce:e5:ac:b1:22:ab:ec:fb:97:11:45:
         53:e0:ea:8e:a8:cb:1b:75:82:d7:27:36:fb:21:31:93:ed:0b:
         67:cd:b1:b9:aa:0a:cd:cc:fd:b7:ef:a9:f2:ac:ba:87:63:e2:
         76:8c:36:f0:8c:ec:be:1c:a6:39:e6:87:83:76:75:cd:fd:79:
         55:d0:8f:37:ea:79:85:38:ed:11:fb:c5:a1:64:bc:b8:5b:bb:
         28:7e:c9:2c:5e:41:6d:4d:0a:11:28:c1:6c:b1:32:5e:77:4b:
         bf:41:8c:31:35:52:49:8c:36:24:1b:d2:ca:04:77:7f:1a:a9:
         95:71:31:92:6d:25:26:d9:33:89:67:3c:9f:d8:61:5e:1b:e1:
         3e:43:27:c7:66:ba:ca:34:8c:f9:d2:d8:3b:f0:7c:bc:17:72:
         40:79:68:b3:58:f0:af:a7:e0:3c:23:24:9a:d8:a0:74:a1:82:
         6b:2c:63:a3:36:f8:88:8f:91:aa:78:46:71:71:70:8c:4f:96:
         aa:45:15:6f:97:bb:fb:8b:1c:ab:27:13:53:31:55:7d:7b:e4:
         4c:b2:c4:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEeBv61uzdK3WZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MDNhNmM1NTEtNmFlYy00OWY2LWI1YjgtZjgwZGNjMzY2ZjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZl4C2D8Qp2yYnrxxE3iT/wsjFFR9FjDUUla
o1nAzJxJCkjNazNgfN+FtBp6EW5IzWNr8MTrGp7c1vUJV47edG2ZkVfLs1xNaGVD
mElyMZKAWgPCk0f+xMy371BWyxrT1NC6zs5Eq3RYk+T3QHafwp1yPKVHXP9YU7Zi
mh1L3NNoiz1TYBL5EXp09dkgsLDKf5SXZ3imuf/t4tlCBTGgz2MWYlGVUEozlK46
K30tqFL2epvzJ7FIuLUDIjhVnIVZ36QirpgVF9xv7B7o3owWtj3FrZkOWjTw1Vsi
Y9WV0Zt88QEeaTwO7wKIkdWSHkxemYNMvZz1wEfNoIytF3icDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNm3pXr1AKjpFZNhzAylabIWF4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmRkMDEyYTgtMDA0Ny0z
ODA2LThjOGEtMGZkNTEyOGZiZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSJ4MEDD01s0Ug11pbyUJrF1j/xm/UnO7WZR2Y7x5KVXtcC1t1r2Jsq
Rg3O5ayxIqvs+5cRRVPg6o6oyxt1gtcnNvshMZPtC2fNsbmqCs3M/bfvqfKsuodj
4naMNvCM7L4cpjnmh4N2dc39eVXQjzfqeYU47RH7xaFkvLhbuyh+ySxeQW1NChEo
wWyxMl53S79BjDE1UkmMNiQb0soEd38aqZVxMZJtJSbZM4lnPJ/YYV4b4T5DJ8dm
uso0jPnS2DvwfLwXckB5aLNY8K+n4DwjJJrYoHShgmssY6M2+IiPkap4RnFxcIxP
lqpFFW+Xu/uLHKsnE1MxVX175EyyxNc=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:08:52 2025 by rpki-client