Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d280e643-bd7a-3200-a18f-b606a0a193bf.roa
File:                     d280e643-bd7a-3200-a18f-b606a0a193bf.roa (raw, json)
Hash identifier:          xfLgHg8KVPakcggYOHBOgzqpyjMHMz8SD0+xZSuNF9E=
Subject key identifier:   0F:6F:29:BF:B0:94:22:F2:BE:29:29:C3:2A:23:2B:34:B9:ED:5C:14
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411C0ECE7E0374B330AEC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d280e643-bd7a-3200-a18f-b606a0a193bf.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:c0:ec:e7:e0:37:4b:33:0a:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1d434d3a-3ba6-463a-80aa-bd005e86293a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:81:36:fa:e4:d4:58:d4:6e:41:cf:59:47:
                    0b:1e:0f:9f:bb:74:9a:1e:6c:7c:0d:85:79:ff:21:
                    63:6a:88:9d:6c:60:83:2c:b9:39:4c:fd:91:71:d4:
                    a7:78:3c:0b:f1:59:df:28:0d:51:7d:38:4b:7f:90:
                    73:64:6d:7d:35:6c:2b:13:df:a4:05:df:e8:27:98:
                    3f:bd:0f:85:33:fc:04:ce:35:d1:c5:b9:65:99:1f:
                    f6:09:1e:76:ef:80:f2:5e:9e:b6:82:58:7c:6e:20:
                    10:ad:cc:75:08:49:16:b7:69:bb:55:56:fc:61:10:
                    62:3a:b0:1a:d0:1c:e7:ae:1c:fe:27:1f:50:90:40:
                    bd:db:23:21:85:19:c3:7a:57:d3:77:3f:0d:0c:2d:
                    39:24:e0:f3:3c:53:57:de:23:c8:9d:aa:93:a3:05:
                    16:fa:6d:0d:67:fa:d2:d1:44:bf:62:54:e6:af:fa:
                    fa:7c:89:e9:87:74:62:a6:ba:00:34:d2:d7:e4:0a:
                    f1:72:ba:e4:a4:9e:ce:54:e3:cd:6f:eb:54:e3:b6:
                    9f:5b:35:0d:d4:ce:04:50:16:53:61:79:1b:ce:5c:
                    d2:7e:06:f9:4c:56:84:3e:82:ba:41:02:b4:03:46:
                    98:ff:cd:88:f5:3d:ac:dd:97:85:6b:5d:75:10:f2:
                    b1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6F:29:BF:B0:94:22:F2:BE:29:29:C3:2A:23:2B:34:B9:ED:5C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d280e643-bd7a-3200-a18f-b606a0a193bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:19:6b:65:1b:23:83:cc:67:c9:e5:58:f8:da:11:5e:0e:eb:
         fc:fe:56:8a:0d:34:91:40:95:b8:fb:db:21:9e:4b:7a:ec:a8:
         f9:25:f5:57:57:c2:30:c8:f9:14:fa:39:29:31:5f:56:cb:81:
         19:c8:c0:85:4a:b7:b8:2e:4f:2c:39:17:96:d2:26:3f:8d:4e:
         90:79:91:4d:fc:a3:83:84:01:7e:18:f2:36:21:5c:d2:b3:26:
         29:83:3a:d0:25:0c:b2:dc:cc:37:f6:bf:b8:ac:26:55:0e:5f:
         cb:c9:27:db:03:ca:45:6e:e7:38:aa:7c:5d:c6:41:6d:2c:01:
         68:35:d4:78:a2:53:54:1c:36:5f:e8:0f:15:dc:9b:8a:34:be:
         7c:20:54:24:20:46:41:5e:ea:16:47:53:c3:59:64:26:89:d9:
         e8:04:7b:a0:3f:1e:c7:c4:33:ed:8d:94:36:16:b3:36:0a:9e:
         7e:3f:4e:01:ea:48:f6:25:cd:76:48:fa:73:12:dd:6a:60:96:
         4d:0b:1f:63:ab:35:bf:1b:de:5e:1f:cb:28:bc:d2:26:3e:b7:
         2c:0e:2d:a8:6c:d1:67:ae:c9:6f:81:47:53:c5:d3:e4:14:68:
         ed:4c:2a:68:25:39:36:73:7f:ec:ac:1c:11:87:19:d4:09:5a:
         98:b3:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:20 2025 by rpki-client