Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03796685-530d-3cc7-bacd-683e5c463e6f.roa
File:                     03796685-530d-3cc7-bacd-683e5c463e6f.roa (raw, json)
Hash identifier:          k4CrNXbg47tXJrWZw53CVqu5KTqYl+NKbjk0+F9ph9w=
Subject key identifier:   8A:32:70:79:BC:92:1A:76:0C:DD:FC:71:D5:3C:F8:0F:2B:0A:A2:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFC5ABCD78895936A7E600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03796685-530d-3cc7-bacd-683e5c463e6f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:c5:ab:cd:78:89:59:36:a7:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=10726dab-7637-4040-8abe-62f4bc905066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:f0:5b:8c:7a:90:1e:7a:e6:77:fd:32:20:
                    a2:92:bb:94:a1:2a:c6:12:4c:a6:1c:65:8c:7a:de:
                    50:7b:f3:55:81:4c:01:e3:54:e4:1a:2f:de:2d:dd:
                    ef:4a:93:e4:5d:f3:5b:0e:c8:93:f6:54:f1:d5:d0:
                    ea:3d:1c:10:2c:ca:71:95:48:e9:af:33:bf:97:e8:
                    b6:85:c3:b5:b8:fc:9d:a2:a2:87:9d:fe:39:91:99:
                    b3:55:e1:39:13:a4:6d:36:b4:34:72:55:0a:58:4b:
                    72:b9:b2:94:8b:2a:87:25:a6:7c:e0:ae:1d:b2:7a:
                    c5:e4:d4:cd:8c:73:49:96:c3:20:1a:fe:49:35:10:
                    de:02:9e:6b:e2:1e:35:eb:ab:b6:62:2c:fd:c5:45:
                    fd:22:f7:29:ee:fb:37:c7:da:6b:15:86:83:24:85:
                    72:fc:a6:5f:75:14:1d:c0:c5:64:ad:2b:8a:b1:27:
                    f7:cf:7a:94:62:36:76:8b:8a:2c:a9:86:4f:e8:ae:
                    6b:10:25:0b:3f:b5:81:f5:5b:88:30:1b:b3:d2:a0:
                    59:b8:af:ae:08:19:b1:6a:5e:bf:6e:a2:d8:58:a5:
                    d7:f7:79:8e:aa:c8:8d:96:ac:f6:7e:53:e7:ed:83:
                    73:a6:db:ce:84:a3:83:27:69:98:15:ba:10:ff:29:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:32:70:79:BC:92:1A:76:0C:DD:FC:71:D5:3C:F8:0F:2B:0A:A2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03796685-530d-3cc7-bacd-683e5c463e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:39:84:89:93:b2:2d:83:77:06:ed:fc:ac:c6:3d:51:45:24:
         aa:3f:27:01:75:44:d4:8f:ca:3a:20:48:65:65:c5:52:71:f3:
         ed:40:bf:df:24:92:46:4e:9b:d1:65:82:15:0a:93:71:80:70:
         e4:90:d8:36:d4:40:3d:44:a8:74:01:28:1f:be:6d:a1:92:44:
         af:17:b6:9d:d3:6b:95:d0:f5:fc:e8:f1:93:0b:a6:9f:c0:36:
         26:24:87:a3:46:ca:58:2f:c9:72:83:97:91:da:1b:20:fe:01:
         5a:67:d6:a1:a3:7f:e7:56:9f:18:95:96:e1:7e:3b:6c:40:35:
         7a:5d:3f:9d:0a:d7:b7:2b:6b:a1:8e:36:9d:84:82:c0:f4:9f:
         81:e3:a9:53:64:0c:a9:8a:8e:73:c3:7a:5c:b6:ef:5f:f5:18:
         63:ab:e0:db:95:7a:84:dd:9f:24:96:9c:75:35:25:0a:af:75:
         9d:8a:c4:28:99:41:72:13:1a:fc:f0:c6:18:f4:e5:69:ce:0c:
         0a:47:37:22:3e:7a:25:f0:3e:ef:ad:b6:d3:c6:cc:c5:49:7a:
         5a:42:2b:e5:ca:07:d9:fa:e1:37:44:43:8c:b1:a9:23:f3:d8:
         73:46:7a:61:d7:6a:ac:9c:18:51:03:68:22:be:8b:18:4a:7e:
         50:b5:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:19 2026 by rpki-client