Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21d03a62-c50f-3bd7-8cfc-4c82ea9d1478.roa
File:                     21d03a62-c50f-3bd7-8cfc-4c82ea9d1478.roa (raw, json)
Hash identifier:          3jgSjE0JGBrOSB8X5zlJmlmqXm4TfeQrrT9R6PiNNt0=
Subject key identifier:   6C:18:8F:30:1B:25:9E:65:BC:D2:63:FC:18:51:8C:19:C4:FC:F1:E4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F30528F3CC89FFBF403956A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21d03a62-c50f-3bd7-8cfc-4c82ea9d1478.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     40306
IP address blocks:        75.104.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:8f:3c:c8:9f:fb:f4:03:95:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=23890848-69f5-40a1-9cc2-d4e0d5e49f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:ae:75:07:d0:48:e1:cc:85:e4:87:2f:0a:
                    ce:d3:27:67:3d:ec:22:ae:14:53:9b:72:80:0d:d3:
                    0d:4f:7a:05:c3:3a:b0:f5:35:00:1f:01:15:26:1f:
                    5b:1c:41:dd:e5:0b:7a:1d:37:0e:b4:e3:cc:d2:4d:
                    7e:88:5c:01:7f:d4:67:cc:01:b3:32:12:ff:36:c2:
                    5c:e8:00:3c:13:76:d5:fd:35:59:7f:b6:5a:46:9c:
                    84:5f:e0:c0:07:b9:c9:8e:84:73:3d:5b:fd:d5:27:
                    41:95:f3:1e:54:3a:23:ec:b0:c7:c4:40:5f:2e:e4:
                    32:25:db:45:4d:f9:d9:88:4a:85:c1:cf:94:f6:af:
                    b9:ca:26:20:ce:e5:6e:ef:33:28:a0:a7:88:53:cd:
                    c0:ca:e2:be:b8:32:d1:ee:36:f4:87:fa:5e:f3:d2:
                    6d:08:69:97:c3:d8:ca:c2:dc:29:b2:b3:ea:e8:ac:
                    81:eb:05:5f:43:ae:66:cd:3f:c2:f5:e8:af:14:04:
                    64:6d:91:67:f6:8d:db:09:9d:10:14:59:39:01:e2:
                    a0:d2:a0:72:c7:9e:71:4b:39:f5:30:37:c5:bb:d8:
                    99:19:30:c6:a8:05:be:f5:35:f2:59:1b:30:37:18:
                    92:3d:cf:6a:5f:16:34:15:91:ef:52:7d:1b:94:0c:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:8F:30:1B:25:9E:65:BC:D2:63:FC:18:51:8C:19:C4:FC:F1:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21d03a62-c50f-3bd7-8cfc-4c82ea9d1478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:af:4a:2a:0d:9e:5f:5f:fd:92:4b:9e:c9:9a:17:a3:63:48:
         ec:d7:42:f5:0c:66:a7:e2:c0:65:76:d9:c6:32:cd:57:cd:fc:
         cd:0f:1c:91:f1:38:6f:3d:a9:fe:74:c2:ff:00:cc:19:28:38:
         31:41:ac:20:9d:1b:43:f3:b3:8c:df:97:52:56:ff:00:e1:5e:
         54:11:1d:71:b3:36:7d:2c:be:d4:44:d9:1e:63:c2:36:a2:0b:
         4f:09:3f:26:0d:32:b0:32:fa:ca:b9:3a:28:8c:a2:88:b4:29:
         f9:a4:44:32:08:a8:db:37:3d:50:76:a4:e4:6c:4b:83:d3:5d:
         3a:0b:8f:a4:89:0c:e6:59:39:a5:a1:2c:9a:9d:61:6f:f5:19:
         2a:7a:b7:70:81:5d:b5:2f:7b:8d:ad:d8:31:f3:64:98:b5:48:
         7c:66:da:7b:12:51:9c:bc:54:e0:c3:f8:06:63:7a:5f:d9:30:
         47:0d:0b:3d:01:d3:7a:42:10:bc:ab:05:70:df:07:06:98:c2:
         3c:7d:b5:a4:b3:c0:77:6d:ac:ea:b2:83:09:b8:8c:4c:bd:90:
         6a:17:16:a6:02:63:27:e1:65:3f:0c:16:97:8d:ad:a8:c9:70:
         11:7b:ab:fb:8c:e8:e5:4f:78:e5:f7:45:28:2e:03:ac:9c:81:
         3f:e9:9b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:53:01 2026 by rpki-client