Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/655d97c6-6897-3bd9-8494-fe2ce108f666.roa
File:                     655d97c6-6897-3bd9-8494-fe2ce108f666.roa (raw, json)
Hash identifier:          wPxPtzqfUaIGcYSCOfeXkZ1wU85uKiEEXXzQ2knIn6g=
Subject key identifier:   28:E0:56:50:59:CB:84:9B:90:0E:74:03:F1:60:27:96:85:1C:DF:1B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCC5EC5E22673D85891E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/655d97c6-6897-3bd9-8494-fe2ce108f666.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     40306
IP address blocks:        75.104.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c5:ec:5e:22:67:3d:85:89:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f80affb7-88f4-4877-9db3-2a0b5941932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:62:bc:70:d3:f7:4d:79:3f:7b:eb:44:5d:
                    c0:f2:1c:f9:f5:76:fe:c1:4a:98:a3:6b:78:1c:34:
                    f1:89:ce:67:82:d2:1a:ad:0a:e3:d3:45:95:de:0b:
                    f8:a2:88:8f:1b:8c:45:24:95:c6:23:04:03:d0:6a:
                    81:6b:7e:8a:53:bb:2c:a8:28:91:ac:c0:48:29:20:
                    10:c6:77:de:2b:c4:33:f6:17:b6:01:87:3f:52:5b:
                    13:73:fc:7e:63:98:80:92:50:28:0d:1e:69:8a:ae:
                    19:17:19:fc:fb:70:fa:6a:2b:8c:9e:cf:04:2f:b9:
                    63:a9:34:ca:e8:36:98:85:90:ae:50:c4:06:63:15:
                    11:de:71:3c:1a:ea:cb:c6:0c:5d:ef:5e:0d:a9:0f:
                    01:7e:73:10:f4:86:bd:39:18:ec:c4:50:5b:b4:aa:
                    2e:33:20:c1:14:f8:8f:36:a4:38:16:23:82:1f:25:
                    49:16:59:31:13:86:14:a7:e8:b0:4e:3d:2c:03:ef:
                    0d:13:56:6f:d3:cf:53:89:b6:fe:cf:10:dd:1f:43:
                    9d:8c:2f:58:6e:62:8b:8f:eb:a1:a3:69:f0:0c:a1:
                    09:a5:53:47:82:7c:59:95:13:a5:23:13:04:f0:ee:
                    4b:d2:4e:01:7e:71:a0:06:d4:a7:71:75:0f:d6:d6:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E0:56:50:59:CB:84:9B:90:0E:74:03:F1:60:27:96:85:1C:DF:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/655d97c6-6897-3bd9-8494-fe2ce108f666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:de:33:ae:9d:b5:d5:d3:7d:1f:59:67:0a:86:de:07:2d:
         96:45:8c:02:fd:8f:c3:35:50:d0:4c:38:92:8f:d2:8a:b1:0b:
         5f:fa:87:9d:f7:73:60:43:d4:c2:1d:15:b8:34:f1:8d:38:94:
         9c:32:82:09:86:11:8a:41:1a:0e:ae:a0:76:f9:68:10:0e:bc:
         f9:90:a6:8e:f7:0b:25:e4:6d:7f:27:71:71:4e:7b:c4:a5:32:
         d7:18:99:8f:b3:4e:b4:34:86:6d:ec:38:4d:6e:e1:1c:b3:8d:
         34:d6:cb:73:ff:f5:7b:05:5d:db:eb:5a:55:e7:3e:b9:6b:43:
         4a:4d:f6:5d:09:9f:3d:68:33:6a:f6:50:0a:c1:26:93:22:d7:
         b9:d4:4d:91:05:c7:16:58:b2:bb:cc:65:98:a0:68:99:99:a2:
         86:ef:53:e4:6c:7d:48:ea:e5:7e:28:65:3c:06:14:cd:bb:2f:
         5d:11:3e:63:3e:bc:d2:55:ac:77:be:b1:5e:37:35:d9:05:73:
         5e:e6:dc:8e:54:c9:a4:87:25:b1:5d:ac:10:f3:3d:2c:30:f7:
         fd:a2:fe:ef:ea:11:cb:6f:b8:89:d6:6a:05:82:32:ae:45:8c:
         96:b6:42:45:a2:85:f6:05:07:2f:31:3c:d1:e6:53:50:13:69:
         62:eb:8c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 21:11:55 2025 by rpki-client