Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67238f3-4eb9-3c21-9f21-43675feb13c3.roa
File:                     c67238f3-4eb9-3c21-9f21-43675feb13c3.roa (raw, json)
Hash identifier:          kOF/u5ei1pmHnW1RLXXa210EPmV6Z0722FuK00UQ1uI=
Subject key identifier:   3B:F0:C3:FE:B3:81:C0:8E:E6:8A:B9:FD:32:98:27:B0:B4:29:65:5C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84111223DBF63B880B6DD2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67238f3-4eb9-3c21-9f21-43675feb13c3.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:12:23:db:f6:3b:88:0b:6d:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4062ae77-c56a-4040-8f3f-deb2ddf4dc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:2d:bc:51:c9:3f:03:35:88:8c:73:7c:6e:
                    94:05:e0:85:3b:b7:42:28:33:5c:9b:3f:c2:c3:ef:
                    64:bf:71:38:38:ad:26:b3:aa:7d:70:70:91:bb:9a:
                    0a:32:0c:8d:93:9f:01:0b:d8:6f:d8:39:3b:ce:3c:
                    ad:5d:b3:03:d6:a9:a6:35:ee:ca:2f:42:62:c4:bd:
                    1d:0f:36:16:9b:a9:ef:2f:22:55:47:7a:4a:ca:14:
                    81:11:08:fb:56:fe:e2:4e:2e:19:d7:f3:5a:1d:1e:
                    56:c5:0b:c0:08:6f:e0:ee:3a:de:34:f6:a7:24:c8:
                    7a:86:b2:7f:3a:ce:4d:e3:89:45:0b:14:b9:b0:16:
                    f3:c6:95:74:5d:c2:ae:45:ff:c8:e0:33:2d:70:70:
                    b7:d1:77:63:0c:b7:f4:37:45:2a:3b:32:cb:06:4c:
                    99:dc:2e:40:87:fd:cc:c0:a3:9e:4b:a5:08:fd:fe:
                    01:fa:0d:da:86:0e:bb:61:c0:02:3c:d8:e0:1e:54:
                    f9:8f:ee:7a:98:cf:dd:68:c6:7b:fb:da:ce:ef:4c:
                    f1:7b:ec:c3:fb:e2:b4:04:7c:dd:98:c1:62:cb:f7:
                    a6:d5:19:ea:56:e0:01:65:00:b7:eb:ed:72:9e:26:
                    b3:70:19:d4:a9:6f:bc:00:ef:2f:53:17:4d:10:46:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F0:C3:FE:B3:81:C0:8E:E6:8A:B9:FD:32:98:27:B0:B4:29:65:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67238f3-4eb9-3c21-9f21-43675feb13c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7a:95:4c:bb:92:59:6a:03:3d:9c:09:53:9a:69:05:9c:66:
         bc:1f:fb:b6:5c:b8:08:d8:ac:e2:59:ea:42:12:94:69:3f:5d:
         4b:72:02:d2:83:20:8c:9b:80:d8:b2:42:22:37:fc:e4:29:09:
         38:24:da:90:cf:b0:9e:9d:95:3c:b8:3e:23:82:5e:0e:bd:67:
         80:06:94:66:e4:e4:40:64:7f:6d:c7:09:51:57:b8:64:a7:5c:
         00:ca:ab:ff:7b:03:33:a4:18:4e:39:56:42:9c:63:bf:db:70:
         4a:68:49:bb:a6:b3:1f:a8:0c:11:a5:74:27:ef:4a:7a:18:41:
         78:2b:d8:ec:51:9a:e6:a9:ed:1a:7b:be:e3:27:10:13:a5:d1:
         57:71:bf:74:60:0b:96:b4:ca:15:af:94:e1:48:81:5e:fe:6c:
         e4:2c:1d:6c:00:90:15:a8:b0:08:7b:3f:cf:5b:95:11:1e:12:
         2f:ae:57:83:66:27:c6:16:32:7a:0f:ab:f0:e9:0d:01:4e:06:
         79:c2:93:09:0d:57:f3:13:37:a2:2f:89:af:7a:4b:22:27:9b:
         b8:6b:5a:00:90:df:04:eb:9c:0f:8b:04:90:3e:a0:99:58:94:
         14:b5:66:fc:6a:28:4c:01:02:78:41:ad:5b:dd:c5:a0:64:eb:
         3e:e5:6a:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEERIj2/Y7iAtt0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NDA2MmFlNzctYzU2YS00MDQwLThmM2YtZGViMmRkZjRkYzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlistvFHJPwM1iIxzfG6UBeCFO7dCKDNcmz/C
w+9kv3E4OK0ms6p9cHCRu5oKMgyNk58BC9hv2Dk7zjytXbMD1qmmNe7KL0JixL0d
DzYWm6nvLyJVR3pKyhSBEQj7Vv7iTi4Z1/NaHR5WxQvACG/g7jreNPanJMh6hrJ/
Os5N44lFCxS5sBbzxpV0XcKuRf/I4DMtcHC30XdjDLf0N0UqOzLLBkyZ3C5Ah/3M
wKOeS6UI/f4B+g3ahg67YcACPNjgHlT5j+56mM/daMZ7+9rO70zxe+zD++K0BHzd
mMFiy/em1RnqVuABZQC36+1yniazcBnUqW+8AO8vUxdNEEb+3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvww/6zgcCO5oq5/TKYJ7C0KWVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY3MjM4ZjMtNGViOS0z
YzIxLTlmMjEtNDM2NzVmZWIxM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB96lUy7kllqAz2cCVOaaQWcZrwf+7ZcuAjYrOJZ6kISlGk/XUtyAtKD
IIybgNiyQiI3/OQpCTgk2pDPsJ6dlTy4PiOCXg69Z4AGlGbk5EBkf23HCVFXuGSn
XADKq/97AzOkGE45VkKcY7/bcEpoSbumsx+oDBGldCfvSnoYQXgr2OxRmuap7Rp7
vuMnEBOl0Vdxv3RgC5a0yhWvlOFIgV7+bOQsHWwAkBWosAh7P89blREeEi+uV4Nm
J8YWMnoPq/DpDQFOBnnCkwkNV/MTN6Ivia96SyInm7hrWgCQ3wTrnA+LBJA+oJlY
lBS1ZvxqKEwBAnhBrVvdxaBk6z7lagM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:06:56 2025 by rpki-client