Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe485754-5d01-3012-9910-ec9375700622.roa
File:                     fe485754-5d01-3012-9910-ec9375700622.roa (raw, json)
Hash identifier:          y0/xq7l5KpLyms1/KWEqsvvBZty1YWBVml5k9J4i7gg=
Subject key identifier:   76:C8:81:A7:4B:82:37:CA:C5:92:9B:C7:92:B1:C6:30:87:23:D9:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84110F924B6474925B1EFE40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe485754-5d01-3012-9910-ec9375700622.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.104.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:0f:92:4b:64:74:92:5b:1e:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=14afc1ca-0028-4bb3-b916-43c83fa75523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:54:f7:6f:a8:47:46:d7:04:b7:1e:b4:4b:
                    41:49:50:18:6c:09:29:3d:c8:10:08:83:10:7e:f7:
                    23:ff:df:98:b1:8a:c7:5e:66:f8:30:17:51:77:6a:
                    04:6a:9b:fa:ee:90:24:b9:2d:a0:2c:ae:68:0f:b7:
                    9d:a0:f2:b4:17:85:8a:b0:90:f0:52:0e:a8:63:44:
                    95:b3:21:b5:07:98:52:8a:9e:bb:62:cc:92:6a:37:
                    91:fa:73:27:ae:a1:fb:79:ab:f7:19:90:58:fc:3f:
                    7e:41:db:d5:46:c2:bc:0a:f5:c3:d3:23:4a:11:8b:
                    15:76:de:fc:6c:89:0b:8b:5e:dd:75:5b:16:68:0c:
                    d1:01:8c:77:df:89:95:b9:33:29:48:5a:f7:5b:af:
                    f9:2c:67:66:2f:80:a5:0f:7a:5f:a7:5a:94:0b:d4:
                    2b:bb:11:0f:cd:ca:1c:7c:90:87:a5:be:e2:5f:f5:
                    ae:8e:7c:8a:2e:36:b1:16:57:34:6c:99:ba:96:57:
                    ef:f2:aa:77:4a:2d:ac:df:bc:f0:0e:8e:87:4c:2c:
                    60:58:20:7a:05:ea:00:9c:79:cb:c6:7f:4a:7e:91:
                    ce:6b:11:e3:b3:08:b2:d9:0c:9f:08:45:fd:e3:f5:
                    e2:a3:ab:84:fe:12:c5:a9:7d:30:2a:81:3c:b0:57:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:81:A7:4B:82:37:CA:C5:92:9B:C7:92:B1:C6:30:87:23:D9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe485754-5d01-3012-9910-ec9375700622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:7d:96:9f:9e:4c:99:7f:e3:9f:12:fc:7a:f6:ab:81:65:
         72:42:24:b0:51:fa:72:87:35:08:f7:ae:88:a7:ca:b7:af:53:
         f5:91:2a:3a:5f:2c:a9:40:ba:e1:45:fe:3c:41:27:05:69:78:
         6f:25:c5:13:c1:9c:d2:3a:96:1e:a0:8f:cf:3c:46:f8:ae:9b:
         af:23:2f:ef:3a:21:20:79:b7:b8:f8:fa:14:2a:91:7b:81:f3:
         75:c5:e0:6f:b4:65:89:9c:23:c7:5a:7f:07:9a:c5:a3:60:54:
         c1:cb:f4:ad:4b:46:53:9b:8b:55:6e:bb:cc:d6:71:05:73:f9:
         80:63:c5:60:3b:05:7a:e4:fd:15:56:55:2a:49:30:fc:8d:60:
         cc:09:e8:aa:90:06:91:e7:f8:ae:2a:03:da:28:89:c7:b1:ac:
         95:c2:ac:ba:12:b3:d3:02:93:cc:4f:2e:eb:94:fa:9c:64:d3:
         42:ba:89:fd:75:d3:7d:e4:a6:66:0f:ed:32:1d:b3:8e:f3:c2:
         21:44:46:47:08:bf:de:d7:f1:9c:ea:3b:d3:2b:3b:b8:0f:52:
         a3:fb:d0:2c:6c:87:cc:2f:19:cb:4c:a5:1c:cb:22:3b:bc:5d:
         a0:21:33:10:c5:27:f3:87:21:2c:df:62:bf:8d:ce:0f:9c:45:
         11:ee:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:18:09 2025 by rpki-client