Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3896329-2d02-3b4c-9402-b4c42c98565e.roa
File:                     c3896329-2d02-3b4c-9402-b4c42c98565e.roa (raw, json)
Hash identifier:          P/j+d1jxJt3ICtXEBZbuYsKo1sUJ3nDJeSMxZIZArvE=
Subject key identifier:   94:EB:6B:58:91:E1:3D:FB:13:E4:FF:1D:9C:5B:D2:6E:10:DB:47:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84111261AA621928624B8A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3896329-2d02-3b4c-9402-b4c42c98565e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:12:61:aa:62:19:28:62:4b:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d99965eb-1626-4d94-9f21-bfe16845480a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:bf:bf:d5:6d:40:8e:d1:68:19:34:66:f6:
                    47:0c:60:07:6c:fa:ac:ba:d9:ad:c5:f7:52:a2:21:
                    8b:3a:84:1d:b3:b8:77:12:cb:af:f2:b1:44:03:ff:
                    ba:34:58:c3:7b:ba:3d:8c:70:60:4b:28:56:9f:4a:
                    65:6c:fb:26:4b:01:54:4e:f3:9b:0c:0f:89:99:ac:
                    90:6c:46:77:be:c8:ef:c5:e1:45:44:97:e9:dc:26:
                    b1:ee:c0:67:12:32:89:9e:bb:bf:a9:8d:d8:11:d4:
                    26:59:48:68:15:af:37:e3:b2:a4:29:6f:9a:21:b2:
                    76:b4:fb:7c:0d:ec:ac:ce:80:c0:63:1a:19:f0:fe:
                    74:6b:c9:2b:1a:50:b6:32:87:94:cd:c1:0c:a6:22:
                    93:34:a7:13:be:47:28:af:e1:a5:1d:57:ee:da:73:
                    cd:e6:53:b6:6d:70:aa:14:59:ae:f7:3f:c5:44:c6:
                    8a:b5:0b:1b:ff:8c:f3:29:03:94:e8:9c:9c:13:90:
                    55:ca:bd:cf:f5:bc:ed:6d:27:e9:e1:4d:96:65:af:
                    fd:0b:a8:1a:15:3a:68:ef:79:d9:2c:57:92:0e:12:
                    97:57:17:c2:f3:26:97:b4:9f:f4:5b:f8:16:d2:0f:
                    d1:9b:db:97:38:73:68:b2:c6:b0:9a:ea:28:38:80:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EB:6B:58:91:E1:3D:FB:13:E4:FF:1D:9C:5B:D2:6E:10:DB:47:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3896329-2d02-3b4c-9402-b4c42c98565e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:71:56:9c:80:19:07:82:6c:47:2b:cf:63:b4:a2:58:b8:89:
         12:6d:ad:b6:fb:0a:a1:13:bc:9b:d6:e8:48:3e:16:d8:22:6c:
         90:b1:90:4b:b5:29:9a:19:ea:93:3b:92:4f:9c:3a:83:9f:93:
         87:eb:aa:1d:63:3e:f6:3d:3e:d4:b0:89:03:bf:13:6f:61:6d:
         de:5b:f0:ee:4a:07:c2:25:c3:1e:2f:ce:d6:4b:c2:da:25:09:
         8e:bf:df:96:e8:42:72:be:31:06:79:03:70:ce:ac:59:47:a9:
         39:6c:31:cc:49:4c:f4:17:10:87:53:a7:f3:50:7f:c1:ec:67:
         ab:40:8f:ff:23:a0:6a:ea:a5:bc:a6:d6:12:fe:92:d4:15:23:
         73:a4:da:2a:fb:8b:28:9a:44:42:65:cb:41:55:c1:f2:83:0c:
         ac:11:82:c8:d5:c4:94:66:12:0c:d7:4f:0b:71:d8:de:8f:15:
         7c:ec:79:6e:bc:38:b5:a2:fe:33:dd:c6:98:e3:9d:d7:24:47:
         6f:8a:dc:81:61:a3:5b:ae:cb:5c:7d:a9:63:f9:0e:31:49:9c:
         65:23:68:42:18:35:6c:65:d7:42:83:43:0a:f9:8d:0e:82:e6:
         44:89:16:82:21:37:c2:3b:ef:2a:3a:81:6b:e5:ba:4b:15:c8:
         a0:2b:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:08:54 2025 by rpki-client