Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/06663ef9-609f-3765-9933-ada277f45d30.roa
File:                     06663ef9-609f-3765-9933-ada277f45d30.roa (raw, json)
Hash identifier:          bHc+hIjgDgU2wx/Ecdv/e5mcp6LMTpIPbnkBT6WjWcY=
Subject key identifier:   84:D0:B7:FC:05:A9:1A:96:56:34:38:E2:AE:7B:F3:5C:72:3E:9A:34
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFC14BD5B439B68CF8B480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/06663ef9-609f-3765-9933-ada277f45d30.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:c1:4b:d5:b4:39:b6:8c:f8:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=3c085530-8b98-43c9-bdcb-b1c480394086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:69:01:09:4e:15:45:f5:90:cb:8d:f5:17:a8:
                    71:f3:f4:6c:01:8c:71:43:c9:a8:61:2e:3a:a8:6e:
                    1d:85:6e:e3:3b:28:de:97:7c:76:67:f8:c3:8e:e2:
                    cb:84:dd:c5:99:10:2f:11:cb:9a:c9:e6:c2:47:f7:
                    a1:4c:a1:54:47:e0:02:e5:a2:c9:f9:74:04:73:5a:
                    ac:c6:01:91:db:d3:af:37:ee:47:95:d6:9d:bc:8b:
                    b5:6b:08:07:7b:69:22:c7:d1:c3:3f:ec:35:6a:89:
                    ae:9a:b7:f2:37:dd:66:ad:b2:6b:86:65:2c:5a:79:
                    21:5f:8b:4b:e4:26:cb:aa:f5:f8:3d:14:23:ac:18:
                    b1:61:9f:8e:30:43:cf:b8:2d:5b:78:c1:50:71:4b:
                    a4:3a:0c:f9:9c:e3:f1:00:42:55:2a:37:73:93:70:
                    fb:a0:50:50:ff:de:ec:71:d5:b9:a1:f5:91:b5:51:
                    61:2c:7e:14:7c:19:4d:62:ac:9b:25:0f:b1:f7:7b:
                    41:79:a3:fd:ae:55:3a:47:87:c7:4b:52:6b:96:3f:
                    9d:53:c6:d2:b8:ae:a7:9b:7f:d9:73:d9:2b:7d:a9:
                    8a:21:f7:27:55:bd:3f:76:3b:e9:0b:9c:a4:d6:21:
                    8d:e9:46:bb:c6:0c:cc:5f:02:7f:b2:f9:14:69:9b:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D0:B7:FC:05:A9:1A:96:56:34:38:E2:AE:7B:F3:5C:72:3E:9A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/06663ef9-609f-3765-9933-ada277f45d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:28:8e:35:36:a4:45:e5:50:23:16:74:2e:50:52:ad:15:
         f9:b8:8c:6e:b7:68:af:91:ac:d3:1d:90:da:e9:2c:47:3d:9d:
         7d:0d:50:71:ae:65:09:c1:64:e7:62:01:a8:5a:08:9a:5b:a0:
         2f:ef:2c:0e:f9:d4:66:69:98:6b:86:08:94:fd:21:d9:6e:fa:
         00:ed:f4:a2:90:c1:2f:80:66:cb:75:10:dc:c0:ee:af:65:37:
         7e:70:fd:17:4f:91:d7:0f:fa:d5:64:88:68:8d:30:a3:5f:bd:
         b1:4f:27:7c:0b:c0:02:be:74:b4:c4:ff:ba:08:74:b2:e7:0b:
         f1:3f:5d:df:fa:c8:b4:4c:ba:2d:03:06:b8:58:13:57:13:26:
         2c:86:8c:52:79:c7:5a:cc:16:de:84:2e:70:dd:2a:fc:4e:a3:
         f6:e7:87:ce:72:15:02:7a:24:99:6f:7b:e3:2b:50:7e:31:95:
         2e:2b:01:c2:0d:5a:4e:ab:ca:07:7f:b6:8f:fa:ba:93:c9:89:
         fa:c2:3a:ca:41:07:85:ad:91:75:02:7e:9d:66:9e:c6:57:b5:
         9d:49:04:26:a2:7b:13:6e:82:b0:0b:1a:ad:ec:9e:ae:50:03:
         5a:b1:c0:7f:1b:53:9b:3a:44:30:5c:75:0b:00:f5:cc:d0:9f:
         8c:6a:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:07 2026 by rpki-client