Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8b3134d-109d-351b-b339-16d166c679e7.roa
File:                     f8b3134d-109d-351b-b339-16d166c679e7.roa (raw, json)
Hash identifier:          ELJAFvxy7MhQca56wt56bKk2GGks9DlG4QbjbYHTPDE=
Subject key identifier:   42:80:EA:21:53:E7:91:F0:78:6A:65:A8:CC:E6:2B:5A:2B:8C:66:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841128C6E7EC57C828512540
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8b3134d-109d-351b-b339-16d166c679e7.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.106.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:28:c6:e7:ec:57:c8:28:51:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3e8d6d6b-28ad-4261-b7b6-1bf52dbc551e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fd:37:ae:b0:f6:e3:c5:e7:08:58:ce:12:e2:
                    87:0f:f2:e9:e8:26:ee:33:c6:32:0f:71:24:23:2b:
                    5c:78:fb:6c:fd:05:8e:23:1c:d9:cd:6a:6b:ce:b8:
                    0c:bd:c8:69:ec:c0:2d:d9:b6:14:bd:47:1d:63:62:
                    a6:22:8b:7c:57:6b:ab:d1:c3:06:74:fa:ce:22:33:
                    9a:51:f5:38:0d:e6:a5:d9:7d:b6:83:49:62:d9:27:
                    df:6b:1b:d4:8f:88:14:15:54:c1:42:80:5e:52:bd:
                    2f:88:38:da:3c:39:eb:e0:9a:82:28:55:9b:b8:ea:
                    44:68:12:62:93:26:0a:72:8a:12:0b:da:2c:0e:3f:
                    d1:3c:0a:78:ee:1e:e1:4e:97:32:3d:57:60:38:11:
                    49:c0:77:cf:bf:f2:47:1a:32:82:f5:ab:04:12:86:
                    62:31:73:6a:3e:8d:04:65:b5:a9:ae:b0:61:bd:4f:
                    63:d3:a0:49:66:21:93:0a:da:4a:b7:09:92:a1:68:
                    fa:26:c3:6e:64:4d:d3:5d:cb:b4:b3:de:37:4f:51:
                    36:24:12:23:ac:75:70:20:0b:2e:dd:73:cc:aa:d0:
                    fd:8b:d0:64:ad:0c:05:06:73:2f:73:65:ed:a9:ac:
                    24:66:47:1d:0a:22:5e:bb:59:ac:26:f7:25:23:0d:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:80:EA:21:53:E7:91:F0:78:6A:65:A8:CC:E6:2B:5A:2B:8C:66:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8b3134d-109d-351b-b339-16d166c679e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:e6:0c:1b:4c:53:d7:07:94:b3:09:2d:66:81:1b:bf:d8:
         d8:7c:1d:85:b8:82:9b:6f:32:33:bb:99:6f:9c:21:3a:9a:96:
         5b:40:9a:74:ef:36:e1:eb:6e:93:ef:ab:4a:b0:0c:0e:75:e1:
         ed:d5:f6:a8:03:08:e3:58:34:cf:87:c9:f2:f5:f5:2c:77:34:
         e3:31:84:f5:66:e1:a1:dd:b4:e3:ac:f9:df:0b:fe:db:5c:23:
         1b:ad:71:e6:42:28:fa:f3:a2:ca:f8:1e:6c:b7:35:dd:a5:e4:
         44:29:28:60:9b:b6:0d:74:61:02:92:84:83:04:6e:09:2b:a7:
         f1:8a:c1:e0:2a:45:cd:9e:a6:5b:be:d4:16:2d:eb:7b:23:08:
         a8:1a:ce:98:23:d8:84:82:4d:56:ab:32:c0:a0:38:56:6b:ac:
         de:6a:65:f9:3a:e6:db:6f:62:95:74:df:ad:dd:48:1a:4e:3d:
         82:c2:58:fd:de:6a:93:ad:a6:b9:d0:80:a5:27:aa:08:30:e6:
         6b:7c:19:d2:74:35:79:a1:ef:5f:26:17:18:5e:49:0e:b9:e8:
         aa:63:db:53:c6:84:ae:3a:9d:d2:09:76:ac:98:ed:cb:26:bb:
         6e:45:e9:8d:ec:51:f2:8f:c3:f3:b3:27:0c:4b:45:03:d3:64:
         4f:ef:cc:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEESjG5+xXyChRJUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
M2U4ZDZkNmItMjhhZC00MjYxLWI3YjYtMWJmNTJkYmM1NTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP03rrD248XnCFjOEuKHD/Lp6CbuM8YyD3Ek
IytcePts/QWOIxzZzWprzrgMvchp7MAt2bYUvUcdY2KmIot8V2ur0cMGdPrOIjOa
UfU4Deal2X22g0li2SffaxvUj4gUFVTBQoBeUr0viDjaPDnr4JqCKFWbuOpEaBJi
kyYKcooSC9osDj/RPAp47h7hTpcyPVdgOBFJwHfPv/JHGjKC9asEEoZiMXNqPo0E
ZbWprrBhvU9j06BJZiGTCtpKtwmSoWj6JsNuZE3TXcu0s943T1E2JBIjrHVwIAsu
3XPMqtD9i9BkrQwFBnMvc2XtqawkZkcdCiJeu1msJvclIw0/1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEKA6iFT55HweGplqMzmK1orjGYFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjhiMzEzNGQtMTA5ZC0z
NTFiLWIzMzktMTZkMTY2YzY3OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2roMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB815gwbTFPXB5SzCS1mgRu/2Nh8HYW4gptvMjO7mW+cITqalltAmnTv
NuHrbpPvq0qwDA514e3V9qgDCONYNM+HyfL19Sx3NOMxhPVm4aHdtOOs+d8L/ttc
IxutceZCKPrzosr4Hmy3Nd2l5EQpKGCbtg10YQKShIMEbgkrp/GKweAqRc2eplu+
1BYt63sjCKgazpgj2ISCTVarMsCgOFZrrN5qZfk65ttvYpV0363dSBpOPYLCWP3e
apOtprnQgKUnqggw5mt8GdJ0NXmh718mFxheSQ656Kpj21PGhK46ndIJdqyY7csm
u25F6Y3sUfKPw/OzJwxLRQPTZE/vzMQ=
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:19 2025 by rpki-client