Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f889d8d-8b11-3e30-826b-63313316f6aa.roa
File:                     1f889d8d-8b11-3e30-826b-63313316f6aa.roa (raw, json)
Hash identifier:          euhu/uL1KWaZtcCjOaPkDGYV7K/c3v69Rx2cO/9wuT8=
Subject key identifier:   51:99:35:61:65:49:51:58:BD:5E:B1:0F:F1:35:D4:37:C8:73:E6:C6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFD5E2ADF371EAF7725C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f889d8d-8b11-3e30-826b-63313316f6aa.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.106.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:d5:e2:ad:f3:71:ea:f7:72:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=548a03e2-d720-4edb-b689-42a0a5ea240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:53:d7:c8:55:d0:14:51:7a:57:7b:32:b1:
                    25:d5:85:35:7e:cb:cc:ec:45:a2:13:bd:ee:51:90:
                    81:ba:dd:30:f4:23:36:2c:cd:46:19:a5:d6:39:f3:
                    96:90:d7:2d:29:0b:ca:98:92:75:fd:36:3d:cd:e7:
                    40:e7:57:16:74:78:5d:da:14:0c:91:d2:1e:53:ee:
                    80:f6:f3:e4:b8:0d:7e:e4:05:d6:9e:13:7f:bb:1a:
                    db:45:88:80:c6:40:88:eb:0f:c2:a3:64:aa:4a:ef:
                    b3:21:cc:36:44:12:74:61:77:d6:4e:21:68:77:e6:
                    0c:fb:0a:41:f0:8f:85:94:8a:9d:45:cb:22:b6:4a:
                    29:ee:4c:23:b4:2e:02:48:71:59:0d:6e:ab:c9:30:
                    a3:84:1b:a1:f7:62:a2:db:93:70:97:71:60:14:49:
                    02:10:cb:f5:b3:b1:8d:0e:ab:6c:cf:b5:45:6e:7c:
                    06:17:13:72:9f:2f:c2:7d:d7:23:8c:55:a4:3c:11:
                    fa:87:84:98:2a:9e:32:d9:15:e8:66:9d:1e:0d:02:
                    82:bc:0e:16:87:dc:ff:90:68:ea:77:ee:d2:fe:3b:
                    46:e1:38:4f:02:7a:24:d0:d4:7f:6b:3e:8c:0b:65:
                    0c:f0:01:6c:9e:2e:33:27:2c:f1:33:23:9c:5b:91:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:99:35:61:65:49:51:58:BD:5E:B1:0F:F1:35:D4:37:C8:73:E6:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f889d8d-8b11-3e30-826b-63313316f6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:00:9a:5a:0d:00:65:f3:8d:df:02:82:39:1f:bf:d1:74:07:
         9e:a0:3e:fc:fa:96:44:22:1e:d3:fb:b5:46:8b:9b:01:52:fa:
         a6:97:68:1b:9c:6f:95:c6:a2:ef:cd:cc:e5:0c:aa:72:29:bb:
         b1:5d:d2:58:09:02:cf:7c:d0:2e:70:a8:ff:61:88:94:ba:dc:
         84:01:d5:36:c5:db:e2:08:dd:06:30:f6:5d:08:22:89:26:95:
         84:ac:55:8f:bd:1c:bb:82:77:8d:71:e4:67:9e:78:29:6c:c5:
         50:ce:1f:b7:5f:a9:c5:92:53:1b:03:03:8a:e7:81:01:62:d6:
         f9:4b:eb:97:03:f4:c7:d0:12:9f:7f:9e:0a:1a:5a:77:9a:1c:
         aa:bb:74:d6:d9:c1:35:48:40:e7:2f:16:58:bc:cd:84:82:cb:
         ba:db:79:3c:5c:aa:db:6f:fe:38:b9:49:60:74:87:ec:99:f4:
         af:6b:31:d9:4f:ee:92:c2:3f:08:f9:aa:06:c0:90:ac:1f:d9:
         33:be:46:19:d3:9f:65:d6:58:07:46:2b:ad:3c:0d:8e:3e:a3:
         5e:18:8f:44:be:30:7c:54:0a:2a:ae:f9:78:8b:ee:13:b3:06:
         8b:fd:37:90:92:ef:87:3c:2f:2c:48:bf:cb:6a:be:b0:f3:c9:
         1c:ad:bc:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k39XirfNx6vdyXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NTQ4YTAzZTItZDcyMC00ZWRiLWI2ODktNDJhMGE1ZWEyNDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJhT18hV0BRReld7MrEl1YU1fsvM7EWiE73u
UZCBut0w9CM2LM1GGaXWOfOWkNctKQvKmJJ1/TY9zedA51cWdHhd2hQMkdIeU+6A
9vPkuA1+5AXWnhN/uxrbRYiAxkCI6w/Co2SqSu+zIcw2RBJ0YXfWTiFod+YM+wpB
8I+FlIqdRcsitkop7kwjtC4CSHFZDW6ryTCjhBuh92Ki25Nwl3FgFEkCEMv1s7GN
Dqtsz7VFbnwGFxNyny/CfdcjjFWkPBH6h4SYKp4y2RXoZp0eDQKCvA4Wh9z/kGjq
d+7S/jtG4ThPAnok0NR/az6MC2UM8AFsni4zJyzxMyOcW5GqdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGZNWFlSVFYvV6xD/E11DfIc+bGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWY4ODlkOGQtOGIxMS0z
ZTMwLTgyNmItNjMzMTMzMTZmNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2rCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMEAmloNAGXzjd8Cgjkfv9F0B56gPvz6lkQiHtP7tUaLmwFS+qaXaBuc
b5XGou/NzOUMqnIpu7Fd0lgJAs980C5wqP9hiJS63IQB1TbF2+II3QYw9l0IIokm
lYSsVY+9HLuCd41x5GeeeClsxVDOH7dfqcWSUxsDA4rngQFi1vlL65cD9MfQEp9/
ngoaWneaHKq7dNbZwTVIQOcvFli8zYSCy7rbeTxcqttv/ji5SWB0h+yZ9K9rMdlP
7pLCPwj5qgbAkKwf2TO+RhnTn2XWWAdGK608DY4+o14Yj0S+MHxUCiqu+XiL7hOz
Bov9N5CS74c8LyxIv8tqvrDzyRytvCM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:26:44 2026 by rpki-client