Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa
File:                     f4915199-1761-3ed4-9601-4c4aa26b25da.roa (raw, json)
Hash identifier:          u3UhPVtZkKCoHooO2NXrtrKCh1Vqzr5BpYspn+4e1zA=
Subject key identifier:   23:0A:14:E3:6C:61:C1:FB:44:83:83:96:88:55:F9:9C:BE:EE:EB:C6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841121B0823CEFE958F76CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:21:b0:82:3c:ef:e9:58:f7:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=20ccfccd-d7b7-4467-98b7-43a3fa210118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d5:83:b5:10:1a:4d:54:75:08:88:ee:db:9b:
                    e2:5e:53:f4:5b:c5:c6:50:2a:d7:63:a9:59:46:68:
                    be:d8:66:c9:19:5f:55:bf:c6:c9:73:b4:3b:4f:b6:
                    a7:5e:e5:63:80:c6:aa:71:3f:89:31:4b:b0:5d:3d:
                    a7:e9:b1:30:13:2f:4f:e2:93:fb:d1:7f:b5:c1:53:
                    0c:b7:e6:5b:b6:13:61:a9:27:21:db:e2:88:93:46:
                    01:fb:b7:56:04:70:69:36:c4:53:69:06:06:b2:98:
                    74:22:59:a8:2a:e3:5c:f6:96:a3:bf:bf:6b:fd:73:
                    38:a5:dc:ce:c8:94:82:cc:60:9c:8a:1b:85:09:92:
                    7f:2c:b6:25:e2:d6:02:60:b2:22:41:88:68:a1:7a:
                    1e:5e:7c:5a:1c:4b:a1:b3:06:ce:90:fd:04:13:06:
                    6f:da:4a:45:c9:e0:a3:0b:41:78:58:53:06:a6:bc:
                    67:44:f8:d6:82:1e:f2:0d:be:02:ff:7d:58:b5:38:
                    c7:15:0f:9d:4a:d5:20:e6:bc:51:1d:8b:6e:d6:58:
                    a3:78:91:37:4c:68:c9:c2:23:7f:e3:c2:7e:d2:56:
                    99:17:3d:b4:18:a4:b4:34:36:ee:80:a0:5a:33:27:
                    2b:72:03:30:e5:14:85:6b:5b:49:40:03:45:07:dc:
                    fa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0A:14:E3:6C:61:C1:FB:44:83:83:96:88:55:F9:9C:BE:EE:EB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:ab:03:8a:70:01:92:af:2f:a1:6a:c5:78:9c:d8:93:0a:
         e9:e2:c3:b5:6f:70:07:e3:81:90:21:7a:24:bf:b1:60:a2:dc:
         f2:3b:23:6b:5d:fa:ac:4c:6c:43:59:03:d3:79:ff:fc:db:c0:
         b3:c6:fa:9f:2c:29:ea:b7:3e:e7:66:86:5a:7d:e9:f9:57:8e:
         db:a8:34:3a:de:96:2e:c3:f6:25:3e:dd:9c:12:ff:a0:ce:cc:
         46:db:68:b0:f1:06:d4:a6:4e:47:45:86:d2:f8:04:fa:e7:62:
         7f:a3:09:a1:12:c5:6f:88:58:77:21:a0:73:9c:03:43:a0:7c:
         29:1e:b3:04:de:5d:88:75:98:28:18:ff:6b:c9:bc:83:a8:ca:
         79:23:1e:e0:aa:5b:f3:e9:24:f4:c2:27:bf:31:bf:51:01:17:
         a9:7d:76:d7:b9:c9:94:59:ff:6a:37:26:30:82:d6:72:d4:e7:
         88:ff:cd:58:27:c7:35:b2:56:21:b7:82:4b:07:ba:4d:91:b6:
         26:ff:da:28:2c:0f:a7:2e:4b:f6:b9:c2:b6:2e:2c:8b:c3:83:
         dd:14:f0:e2:a4:2b:8d:38:db:fc:5d:cc:f1:a0:92:10:6b:54:
         17:4c:a5:b6:4f:8f:4f:88:87:71:67:94:e4:eb:36:0d:c3:6a:
         a6:a7:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:14 2025 by rpki-client