Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0f7b7de3-b30a-3a57-bf26-bc8067173d47.roa
File:                     0f7b7de3-b30a-3a57-bf26-bc8067173d47.roa (raw, json)
Hash identifier:          UcmddjilkhmPcUd1AVgw5wwlg1O/m7xRjDa1i69Bwl4=
Subject key identifier:   05:A2:7A:BA:08:70:6C:BF:E7:DB:F9:72:A8:56:46:BD:6D:AB:D3:C5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E07BA39DEB17104B485F20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0f7b7de3-b30a-3a57-bf26-bc8067173d47.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.105.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:7b:a3:9d:eb:17:10:4b:48:5f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=02ca2b90-a3fa-4d15-be89-07bb28659568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:f7:a8:b3:cd:96:5a:63:da:62:c9:44:8d:
                    7e:3f:79:c1:a6:9c:b1:d8:e6:c9:f2:e9:ce:4c:3e:
                    8f:87:bb:7e:50:d6:fe:7f:e0:ae:32:7b:3a:67:0e:
                    b4:7f:0a:23:11:f0:1e:49:0a:d3:76:83:40:01:d1:
                    5c:3c:22:e9:39:ce:f0:7a:e7:e2:6d:85:6e:94:15:
                    0d:bc:d5:9b:fe:c1:55:af:fd:d2:76:c4:76:d1:53:
                    97:65:e1:1f:1a:cc:b8:9f:51:f5:9e:6a:08:d7:96:
                    8c:d7:bf:02:d0:42:67:d3:59:67:4b:46:cc:b3:9e:
                    48:fb:8a:16:6e:4b:12:97:07:f0:aa:81:93:21:41:
                    b5:21:21:76:f2:69:23:65:5a:79:24:07:1b:e3:7f:
                    18:92:81:2e:3e:cb:3e:93:e1:f5:1f:d9:1b:2f:3b:
                    b9:25:5a:65:79:cb:61:78:b4:1d:8a:b1:cd:08:31:
                    d6:47:53:40:b3:1e:12:e9:00:d7:16:54:04:2c:56:
                    d5:15:5f:01:8e:10:74:58:4f:ad:2a:00:47:85:df:
                    bb:ef:12:c3:e8:71:9b:e8:a5:5a:42:b5:25:33:b9:
                    54:95:d3:c7:32:19:1c:64:82:df:6b:a3:6b:49:8a:
                    e6:57:a6:cc:d8:df:83:f9:44:22:37:0d:a6:f5:25:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A2:7A:BA:08:70:6C:BF:E7:DB:F9:72:A8:56:46:BD:6D:AB:D3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0f7b7de3-b30a-3a57-bf26-bc8067173d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:1d:a4:c0:57:81:e0:a4:2b:fa:19:68:fd:78:b3:bb:e1:6c:
         8c:43:6b:20:2d:d5:09:4b:43:07:91:b6:c8:88:db:11:74:d1:
         6a:74:be:5f:0b:a3:e7:8b:90:90:e3:13:42:c9:68:50:ab:2e:
         29:41:d5:e2:f6:01:86:11:0b:34:ca:81:ee:f8:3f:61:14:d6:
         77:54:7f:90:d5:9f:27:5b:0c:ee:63:54:58:fb:82:f3:0d:3d:
         64:3b:1c:64:c9:1e:43:50:77:a1:e3:c4:45:4f:7f:8f:f0:c8:
         ea:7e:a1:39:76:fd:86:12:0d:25:a2:2f:52:4a:8b:b4:be:40:
         2f:e8:3a:19:c0:57:20:ef:89:b2:29:d8:4e:48:aa:b8:42:45:
         56:e7:b2:d4:67:5c:38:c4:54:1d:8b:70:31:69:5d:b2:8a:ba:
         d8:bb:24:54:34:e4:80:67:31:72:c5:61:ef:1e:84:67:87:74:
         35:cf:09:23:08:92:ee:21:ac:fe:d9:9d:79:fa:d9:e5:7f:d0:
         0a:f3:ac:41:f7:ff:c4:bb:fa:af:6b:4e:08:16:ce:5e:f1:f2:
         d7:6a:4f:86:d1:98:36:26:3d:fe:bf:4d:4d:de:c4:b5:b1:16:
         6b:31:1f:f8:69:b7:6a:9a:ab:d2:89:30:06:eb:90:d1:9a:5e:
         38:ff:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:09 2026 by rpki-client