Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f573f50-a666-3a40-aebc-4836fffa8444.roa
File:                     1f573f50-a666-3a40-aebc-4836fffa8444.roa (raw, json)
Hash identifier:          lN3JCuMDgH6IcpSpK+Mt1zg0a64Rz5a7SV1fnkDXtGY=
Subject key identifier:   D6:3E:26:FE:BE:C6:0C:5C:18:F0:F5:3E:31:58:D7:10:76:F5:7E:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B2D93F3E4271868022800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f573f50-a666-3a40-aebc-4836fffa8444.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.105.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:2d:93:f3:e4:27:18:68:02:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5fb33ec8-4366-4710-9788-6adfe479b9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:fa:67:fe:5c:13:9d:55:5a:cb:57:c3:b5:
                    af:6e:d1:3f:5e:9b:1a:23:7c:d7:5a:26:5d:23:e4:
                    6f:ef:82:9f:3b:d0:20:aa:bb:c7:3c:e3:a2:7a:b8:
                    a6:03:55:35:42:d1:ca:71:78:7f:6d:05:98:0c:e5:
                    dd:2e:b8:65:4d:9d:9c:a3:91:52:f0:36:e8:00:79:
                    fd:fa:66:73:d7:cb:83:55:05:bf:67:58:67:24:f4:
                    5b:dd:2d:e6:55:c7:96:87:87:52:4e:29:ab:30:e3:
                    f6:c6:a9:24:70:d2:26:5b:48:ba:0b:df:5b:1a:0d:
                    1b:c6:be:26:aa:47:ea:49:8d:bb:89:1f:cb:e6:ab:
                    0a:ed:cd:a1:5b:cc:9a:42:5f:7e:d9:56:da:dc:b6:
                    1a:0d:d5:8f:bf:01:5e:33:b2:24:31:3c:db:46:14:
                    3c:10:d9:a0:ec:b9:ff:dc:19:6e:84:70:05:46:b9:
                    a4:9c:4f:6c:48:57:76:34:18:1b:8e:7e:0d:db:f7:
                    2d:cd:e5:19:ec:fe:4e:c1:16:40:4d:05:fa:9f:d4:
                    24:b8:3f:f5:71:00:8f:19:64:76:4b:19:c1:c1:27:
                    70:0a:1b:43:e2:7c:53:1b:5f:be:59:5c:4b:e3:01:
                    f1:66:f1:65:b2:7b:45:5d:ae:74:0a:e8:b9:d8:0c:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:26:FE:BE:C6:0C:5C:18:F0:F5:3E:31:58:D7:10:76:F5:7E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f573f50-a666-3a40-aebc-4836fffa8444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:14:d3:aa:11:78:a3:cf:b8:e3:0e:6b:b1:ac:d4:cf:f6:
         d1:23:1b:38:e1:7e:b6:2a:47:c0:a3:95:e9:59:dd:a8:25:d8:
         c2:ca:95:07:80:f5:d6:2e:de:b9:b9:6f:1a:6d:4e:e3:51:0f:
         6c:45:5d:cf:06:c5:29:aa:ad:b9:d0:37:29:10:ae:9d:57:78:
         d9:61:bb:88:64:42:f3:90:99:7c:69:31:f0:c0:44:1d:83:79:
         d6:d1:77:ea:99:de:3c:b6:09:92:09:0f:71:22:30:54:2b:7c:
         10:a2:05:75:4d:58:c0:da:54:cb:cf:8f:da:af:6e:64:6f:63:
         d5:96:4b:3e:3b:68:83:17:e1:66:dc:b9:5f:26:24:af:78:7f:
         c9:e6:6f:0f:3f:99:5f:76:fc:f5:ad:a6:6e:94:1e:96:d6:59:
         3f:a7:f6:d6:67:1d:e9:9e:61:b2:bd:3c:0d:87:50:d2:a9:2b:
         20:f9:23:34:09:d5:73:d5:d5:c8:64:88:d5:e3:af:dd:88:77:
         3a:c0:fd:85:97:5f:79:b4:52:7c:91:3b:ce:de:91:ae:a6:1d:
         19:0a:16:66:e4:ee:f8:db:da:d1:81:e0:91:58:be:04:0f:e4:
         92:f2:b4:72:6a:c9:e2:d1:b3:26:04:f6:10:c5:0b:b9:e1:13:
         9d:2f:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:50:58 2026 by rpki-client