Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6e41da6-4ba4-3acb-a5cd-e481384d9dcc.roa
File:                     e6e41da6-4ba4-3acb-a5cd-e481384d9dcc.roa (raw, json)
Hash identifier:          o2Pqq8mgIQIO2GdJgaXTBApVXuzLJEf2Cjvu2xyxVEo=
Subject key identifier:   5B:65:75:D3:DE:63:59:BD:28:F6:4D:75:79:BC:CD:86:98:17:7C:84
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411BC91C94F8BBD790DA240
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6e41da6-4ba4-3acb-a5cd-e481384d9dcc.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:bc:91:c9:4f:8b:bd:79:0d:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b7482fcf-920f-471c-b06c-575c0578fa21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:02:a3:d1:65:49:2d:8d:47:81:40:7b:0b:8c:
                    40:69:b7:b6:3f:1d:15:3e:ac:03:93:0f:d8:08:d5:
                    20:44:2e:fa:9c:b7:28:88:b0:f7:d2:b1:50:fd:05:
                    73:eb:61:8b:dd:d9:95:a2:56:44:45:27:1c:2b:39:
                    b6:cc:cd:81:bf:ff:50:4e:65:77:ee:92:57:7a:7f:
                    57:94:62:25:3d:32:13:5e:38:88:e2:2a:d9:32:8c:
                    43:07:c1:5e:ab:be:79:9c:04:56:90:f6:a7:61:51:
                    79:4b:a3:07:81:99:b6:74:2e:bf:7a:70:ed:e5:14:
                    af:45:6d:42:82:fb:0b:7e:e4:0e:db:3e:b6:28:6f:
                    6b:02:0d:7f:96:c5:27:8e:12:bf:de:19:6f:4b:42:
                    0b:a8:56:32:fc:f5:ab:ca:0d:0c:7a:be:1e:2d:83:
                    fa:4f:cd:d4:4a:c1:52:14:8b:26:4f:70:6b:76:cb:
                    37:02:23:77:9b:b0:7f:6e:59:e4:be:b4:0d:62:f2:
                    31:98:0c:fe:a0:8e:03:9e:61:32:b7:78:24:2b:3e:
                    29:77:e2:25:e8:95:81:93:c0:b5:6e:f1:c6:62:c0:
                    cb:1b:96:22:6d:d8:92:8d:0e:48:ef:88:a5:76:a2:
                    e4:bf:24:a0:2b:dd:fb:c7:14:30:1c:8d:21:72:be:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:65:75:D3:DE:63:59:BD:28:F6:4D:75:79:BC:CD:86:98:17:7C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6e41da6-4ba4-3acb-a5cd-e481384d9dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:51:41:76:98:ad:e4:5d:5f:71:79:98:ae:ba:21:d7:c4:19:
         47:57:70:7c:f0:1f:23:31:9a:0f:e6:3d:76:2b:6d:10:d3:8f:
         8a:bd:a9:14:ab:12:b6:7b:17:d5:cc:ae:ff:06:eb:c8:d7:cd:
         77:ee:02:90:8b:c9:29:73:53:e4:c9:79:1f:e0:a3:fa:b9:d7:
         ca:a0:c5:81:e8:ad:cd:53:d9:cc:55:67:8c:26:a5:a1:58:97:
         1e:b4:25:ca:7f:ec:69:5e:b6:70:d9:19:db:bc:df:d6:99:41:
         d8:5f:29:17:72:9b:97:71:36:4a:e3:0a:5b:fe:95:72:54:c2:
         81:d5:6e:5a:7b:b7:20:5f:01:ba:c5:21:46:5c:dc:36:9b:8c:
         4d:c4:a1:b4:21:b3:69:59:d3:db:38:17:6e:d2:7f:77:f7:2f:
         f3:e6:47:1b:1f:0b:3f:78:12:1c:80:cc:20:66:54:58:f8:59:
         b6:f5:86:70:10:eb:a7:cc:5a:74:37:aa:50:a6:95:37:38:7a:
         b2:52:cc:0d:b4:84:ca:f8:86:d0:3d:df:ef:74:fb:3e:c8:bb:
         0a:9b:80:74:51:71:81:cc:d9:2d:64:a9:75:53:a6:87:3d:e2:
         d4:d6:b6:88:75:9d:7f:23:bc:11:3d:be:3e:c1:10:2d:78:57:
         c3:b0:ac:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbyRyU+LvXkNokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
Yjc0ODJmY2YtOTIwZi00NzFjLWIwNmMtNTc1YzA1NzhmYTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gKj0WVJLY1HgUB7C4xAabe2Px0VPqwDkw/Y
CNUgRC76nLcoiLD30rFQ/QVz62GL3dmVolZERSccKzm2zM2Bv/9QTmV37pJXen9X
lGIlPTITXjiI4irZMoxDB8Feq755nARWkPanYVF5S6MHgZm2dC6/enDt5RSvRW1C
gvsLfuQO2z62KG9rAg1/lsUnjhK/3hlvS0ILqFYy/PWryg0Mer4eLYP6T83USsFS
FIsmT3Brdss3AiN3m7B/blnkvrQNYvIxmAz+oI4DnmEyt3gkKz4pd+Il6JWBk8C1
bvHGYsDLG5YibdiSjQ5I74ildqLkvySgK937xxQwHI0hcr5KhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtlddPeY1m9KPZNdXm8zYaYF3yEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTZlNDFkYTYtNGJhNC0z
YWNiLWE1Y2QtZTQ4MTM4NGQ5ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2g8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZRQXaYreRdX3F5mK66IdfEGUdXcHzwHyMxmg/mPXYrbRDTj4q9qRSr
ErZ7F9XMrv8G68jXzXfuApCLySlzU+TJeR/go/q518qgxYHorc1T2cxVZ4wmpaFY
lx60Jcp/7GletnDZGdu839aZQdhfKRdym5dxNkrjClv+lXJUwoHVblp7tyBfAbrF
IUZc3DabjE3EobQhs2lZ09s4F27Sf3f3L/PmRxsfCz94EhyAzCBmVFj4Wbb1hnAQ
66fMWnQ3qlCmlTc4erJSzA20hMr4htA93+90+z7IuwqbgHRRcYHM2S1kqXVTpoc9
4tTWtoh1nX8jvBE9vj7BEC14V8OwrB8=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:33 2025 by rpki-client