Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e35bcf3-4578-3ed8-a76a-2b1c59671641.roa
File:                     5e35bcf3-4578-3ed8-a76a-2b1c59671641.roa (raw, json)
Hash identifier:          wKr76p8G7JGEqPHYJF9TfftUG5u4W8xwnUxxI7zJTUU=
Subject key identifier:   17:5C:3E:5C:BF:01:F2:B4:72:90:4B:08:77:F5:07:D9:8B:EF:F2:ED
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFBF991280908AA53FD680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e35bcf3-4578-3ed8-a76a-2b1c59671641.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:bf:99:12:80:90:8a:a5:3f:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=584246c1-2e54-4f2d-819c-4bcfda3b8342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:d5:80:c2:9f:68:ab:2e:13:3e:60:aa:7e:
                    ca:8d:ae:da:9b:3e:a7:f0:4f:76:df:55:4f:21:a5:
                    d4:48:4f:41:0c:d0:db:21:7f:8d:80:99:f7:5d:2d:
                    75:2d:75:20:69:5e:62:12:f2:f8:4d:46:41:c9:59:
                    6b:7a:9b:dd:8c:32:e4:ef:dd:09:41:b1:91:c5:c6:
                    ac:d8:d4:69:c9:fe:7b:20:b8:6c:e7:1f:60:5c:b0:
                    02:7d:6a:0e:83:4a:ab:c9:58:66:e8:04:77:d7:52:
                    fb:61:91:7c:3d:6b:6d:fc:e1:a9:15:17:b2:bf:f7:
                    b5:fb:1f:22:c9:c6:fe:e6:26:ce:51:4f:42:ac:f4:
                    88:9b:e8:3f:a8:a3:2d:5a:a1:b4:63:51:e4:ba:f7:
                    4f:a3:65:6e:9d:6d:0a:37:fb:ac:69:ac:35:58:7e:
                    8a:0a:97:d8:7c:71:42:14:8b:7e:3e:12:b1:50:09:
                    42:69:6d:62:f7:f0:6e:87:ab:96:ee:66:a6:ea:26:
                    55:80:79:e9:3a:6f:6e:1d:17:10:1c:d0:12:99:bf:
                    34:06:f9:0a:3e:f3:c5:20:11:99:7c:c5:01:0c:1f:
                    5d:15:3c:de:cb:12:c3:a1:96:24:ad:70:79:4a:ac:
                    e5:8e:65:13:fe:4b:af:be:1a:fb:3b:67:93:1e:b3:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5C:3E:5C:BF:01:F2:B4:72:90:4B:08:77:F5:07:D9:8B:EF:F2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e35bcf3-4578-3ed8-a76a-2b1c59671641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5f:34:9c:a0:91:49:02:3a:b5:f1:64:ff:fd:03:7e:8a:1c:
         09:c3:95:93:a4:31:f1:59:8b:06:9d:fa:54:bd:19:ab:a5:b8:
         08:34:88:0b:d7:6c:53:99:4a:10:18:4b:44:e8:bc:c0:ce:aa:
         b7:12:fe:5c:af:bf:58:b8:98:89:e0:c9:94:b1:f6:f8:d4:51:
         17:6a:7d:ee:97:e3:d1:26:69:73:9b:0a:c0:18:36:6d:86:34:
         49:f8:b9:73:fa:04:c1:e9:c2:02:1e:c1:12:26:04:47:19:6c:
         e9:91:da:fa:74:cc:70:9c:1b:ed:58:19:11:1c:b3:f4:2c:f9:
         08:54:3e:fa:77:74:61:53:81:d4:ea:df:fe:37:3f:5c:c9:68:
         80:46:d5:17:69:01:0f:5e:9c:b2:cb:e9:80:72:70:c1:ee:4b:
         e1:63:73:bb:47:ea:b5:4d:32:a3:c1:ee:02:a6:d2:8c:c3:aa:
         64:80:c1:1c:6c:1c:95:ac:59:ee:4b:56:4b:3e:26:17:38:da:
         61:b8:80:e3:a3:fa:93:ca:2c:bf:c7:3c:2d:38:e0:9d:a3:96:
         62:6e:7a:e5:07:c5:3a:32:f9:89:52:69:77:60:48:4c:d9:0f:
         c7:70:5f:c3:e3:f9:94:76:8c:99:1b:95:45:58:9a:32:bc:ae:
         28:70:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:29:06 2026 by rpki-client