Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/571c7d43-5b10-3329-aada-d50fb7e35814.roa
File:                     571c7d43-5b10-3329-aada-d50fb7e35814.roa (raw, json)
Hash identifier:          UKYOp4gCM8fRuR/FHR6AJXL6rRM/Fz9wDum96EkiQwE=
Subject key identifier:   93:A5:F9:96:E9:C1:04:7A:58:3E:6E:34:53:BD:E4:F3:EA:6B:24:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983663AF2DFDB625AF6A080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/571c7d43-5b10-3329-aada-d50fb7e35814.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.106.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:66:3a:f2:df:db:62:5a:f6:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2250df4d-af9b-4fc8-96f0-c66bfb7fd7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:9e:9b:a0:46:20:2d:3a:e7:e1:ab:b5:de:
                    2a:6d:65:17:cb:81:14:ec:9a:1c:e2:82:6d:84:0f:
                    6c:a8:f6:5c:35:50:9a:b8:cf:c6:b2:59:81:18:98:
                    cd:30:8f:c5:9d:cc:e3:53:25:7b:99:50:d2:24:ae:
                    3b:86:f5:d8:48:88:d7:54:57:d2:14:31:14:4b:76:
                    94:04:ea:fc:eb:e0:e3:56:5d:70:89:87:fe:ae:14:
                    2f:f9:fd:44:87:ba:c1:ca:83:38:68:5f:89:2b:5f:
                    2f:69:e3:8c:32:e0:c5:b0:48:84:ea:06:9c:63:c6:
                    6d:61:33:bb:c1:12:3e:c6:78:cd:bd:5a:70:1f:45:
                    f3:47:10:d9:da:b8:68:f9:ec:83:b7:45:ff:1c:ac:
                    db:e8:d6:0f:6d:2d:3a:46:e6:75:aa:26:3b:eb:9c:
                    20:e5:21:7e:ad:0d:01:4b:e3:65:84:ab:da:31:5b:
                    fd:f0:02:5b:9a:a0:27:54:e3:71:58:88:d4:73:ab:
                    cb:25:0f:11:b9:2e:ed:35:64:98:0e:73:d8:f4:36:
                    8b:da:9d:98:bd:04:32:48:11:d1:29:d0:54:06:e6:
                    fd:15:08:13:d6:8b:ac:e9:10:96:65:82:78:56:26:
                    e9:63:3b:60:47:72:18:77:52:51:c7:9f:4c:54:50:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A5:F9:96:E9:C1:04:7A:58:3E:6E:34:53:BD:E4:F3:EA:6B:24:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/571c7d43-5b10-3329-aada-d50fb7e35814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:5e:a7:f0:4f:29:ed:82:d7:52:fd:89:31:c2:e6:09:fb:e9:
         b7:2e:af:5e:d9:8c:8b:af:7b:e9:89:77:bd:fd:d8:6f:10:e6:
         22:30:ac:b8:57:34:81:aa:d4:b3:30:c3:d6:22:32:c0:7d:13:
         b3:63:02:d0:c7:09:3d:ca:fc:be:41:af:1c:26:8c:7c:77:4a:
         fd:f0:8f:b3:2f:e0:35:7a:0f:4f:76:d1:e6:73:31:c8:03:06:
         51:6f:27:c0:08:a4:d2:9a:e0:d4:a3:8b:cf:49:e0:29:78:60:
         91:35:53:9a:ac:53:d0:fe:79:23:d4:cb:7a:a3:b8:40:3f:14:
         28:b9:5b:86:6f:a2:37:5f:6c:b0:73:a3:3f:b3:16:4e:fa:7a:
         62:f4:39:bc:4f:7c:73:e6:ab:60:63:50:ac:70:f2:5e:8f:65:
         f9:83:9c:cd:56:09:1d:70:c6:2e:fa:19:6a:51:83:a5:9f:a9:
         b6:6a:5b:48:ba:96:03:d0:e4:7b:51:85:03:09:9e:0e:98:27:
         c6:a7:b3:da:ef:30:51:69:0b:5d:3b:91:fa:30:cd:a8:ef:50:
         cb:7b:74:f1:85:e5:80:01:fc:c6:c8:a1:d3:69:90:c2:8d:2e:
         b8:71:1c:27:da:88:38:e9:09:62:7b:0e:42:c0:42:72:20:1d:
         bb:24:06:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:31:29 2026 by rpki-client