Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb45c372-223c-3c15-8ca1-7fffcb4c2d31.roa
File:                     fb45c372-223c-3c15-8ca1-7fffcb4c2d31.roa (raw, json)
Hash identifier:          AbhCCh2ij3phs3C65ilu04uhLzxCSPNnC1kb3N05kZ4=
Subject key identifier:   D6:80:AF:09:A1:8A:1D:FE:2A:0F:4D:3F:D8:C3:FA:C5:85:A7:53:4E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841110F670EE284DDA9A6E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb45c372-223c-3c15-8ca1-7fffcb4c2d31.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:10:f6:70:ee:28:4d:da:9a:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d6f39114-5194-4fe5-acae-38e0782bf697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:2b:b9:38:d0:03:62:24:1b:af:88:23:5e:
                    de:58:0d:ab:e3:ec:42:c6:c0:fb:1e:02:cf:72:fa:
                    cb:28:65:59:a1:a8:98:0c:59:70:08:d5:05:31:76:
                    8d:61:25:50:43:a5:39:b7:5f:38:fe:bf:97:72:5a:
                    d9:af:ff:48:af:e5:ce:2d:b2:51:f4:f6:72:64:81:
                    49:39:54:cd:80:e0:75:c1:5f:e2:69:94:23:74:45:
                    c6:60:9a:ec:38:4b:d0:d3:f1:fe:84:df:01:ef:b8:
                    73:86:1f:ac:84:69:b3:cb:bb:ef:57:8a:b6:93:a6:
                    77:f5:66:a7:54:b3:ff:cb:2a:f3:32:37:63:11:aa:
                    d9:85:24:46:ac:f9:7a:3f:50:a6:32:5a:73:02:51:
                    e5:f4:81:15:51:f6:6e:be:f9:ee:c3:ef:01:85:4e:
                    df:b6:e0:49:4f:83:3b:b2:95:bf:86:0c:aa:fc:1e:
                    d2:43:40:0b:be:52:f6:03:20:3e:f7:1b:05:50:70:
                    b4:fe:d4:94:5f:e1:0d:bb:d5:c6:2e:f2:ca:24:2a:
                    8c:92:f3:64:f1:c5:53:c9:df:9d:3e:87:b6:8d:7c:
                    2d:2d:bb:3c:49:1e:4b:49:81:f6:cf:84:24:c0:e9:
                    83:29:b9:91:cf:25:6f:34:c2:ce:94:7c:dd:ce:e1:
                    84:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:80:AF:09:A1:8A:1D:FE:2A:0F:4D:3F:D8:C3:FA:C5:85:A7:53:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb45c372-223c-3c15-8ca1-7fffcb4c2d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:de:e4:10:1c:d5:2f:db:b1:b5:21:f2:34:0c:8a:99:74:c0:
         6a:eb:10:81:b1:be:35:2f:de:b8:41:f9:69:62:4b:e3:2f:c0:
         39:48:1d:92:69:a0:ea:6e:04:dd:0b:d3:b8:15:90:6f:c3:18:
         b8:03:fc:65:17:57:47:c0:78:a0:b2:e2:71:e7:c8:6e:9d:8c:
         fc:3a:04:26:10:2c:d9:76:ae:eb:b0:78:91:9c:ad:4b:f9:0b:
         cb:4a:92:78:3d:33:2e:e7:60:db:d5:fe:76:ce:bd:da:2f:1b:
         0d:6a:31:ce:89:e3:6b:5c:fd:6b:d0:3a:4b:6f:77:56:d3:ed:
         6d:03:7e:cc:cb:50:d0:37:99:94:0d:87:8b:41:f7:03:17:89:
         a1:cb:ac:46:f2:2e:0f:a4:df:52:4a:8a:44:73:e8:cc:6c:07:
         ac:15:98:16:ad:10:2a:e2:99:40:da:9e:10:bb:4b:c2:42:80:
         9b:e4:52:8c:0d:36:85:9a:e4:d0:73:db:a8:ff:11:32:e8:02:
         50:d7:c5:2d:32:36:91:8b:5d:7d:5e:44:74:51:4a:84:72:e0:
         32:a2:4b:ca:e0:25:91:af:0c:5e:1d:a5:3d:20:d8:7d:11:01:
         58:5c:02:07:a3:b0:18:bc:de:00:8d:da:6b:72:7c:65:79:23:
         d7:c3:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:20 2025 by rpki-client