Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65daa0c0-8f2f-3b2b-8d5a-bb69edc16b09.roa
File:                     65daa0c0-8f2f-3b2b-8d5a-bb69edc16b09.roa (raw, json)
Hash identifier:          K+BUvOvhj5fwmahflNB1QpXYqnyCGx1Viqz8LF5EQNw=
Subject key identifier:   DA:7C:90:0B:5A:4C:F8:C8:0C:5D:37:C9:76:D5:59:72:DD:B4:EC:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E06D9304462285C1D7F780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65daa0c0-8f2f-3b2b-8d5a-bb69edc16b09.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:6d:93:04:46:22:85:c1:d7:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=d099fabe-0f44-48b2-9722-7379257c3b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:06:f4:54:53:46:1e:a3:36:ab:72:85:f5:
                    6f:1c:74:21:43:70:cb:44:a1:47:25:7a:70:3b:74:
                    e9:48:6c:63:cb:8c:82:91:93:8e:ee:9e:02:63:bb:
                    ae:db:05:65:36:3e:7b:60:ed:89:86:05:34:3a:99:
                    97:1d:78:f9:12:52:13:d5:e4:b5:a5:ae:34:a9:a7:
                    12:1b:9c:ff:07:62:9d:f3:4b:e9:a5:c1:cf:6e:62:
                    9f:62:10:7c:f6:e7:f6:f9:92:c7:54:05:19:3c:e7:
                    36:cb:21:4e:36:df:6f:16:9c:76:22:38:a2:a4:14:
                    a9:21:7b:a0:0f:5d:13:b4:5d:da:ec:ed:54:2f:64:
                    ac:72:3c:69:b3:2f:65:e9:9b:e1:9c:9c:11:8e:d7:
                    60:a0:ff:c0:da:5f:14:0e:97:b4:7f:c4:19:a8:5f:
                    c7:af:e5:dd:40:b0:13:be:30:5a:84:9e:95:c0:79:
                    23:f0:86:f0:6c:1c:b4:c9:5d:f0:97:e0:e1:7e:e8:
                    8c:e0:b8:29:a9:c6:37:53:6b:db:9b:84:12:ee:ea:
                    b8:50:17:ca:a1:71:c3:62:a7:ad:74:d3:c4:87:b5:
                    f2:ce:33:d9:09:23:92:b1:9f:c9:95:85:d0:bf:df:
                    38:b3:d9:da:19:25:29:a4:b3:7a:82:f6:7b:88:cb:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:90:0B:5A:4C:F8:C8:0C:5D:37:C9:76:D5:59:72:DD:B4:EC:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65daa0c0-8f2f-3b2b-8d5a-bb69edc16b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:6e:75:48:18:73:6f:6a:5a:05:c1:ce:61:c4:e4:64:b3:4b:
         4b:13:a2:5d:67:27:e5:9a:48:99:86:c7:04:27:c5:1e:7d:e7:
         e7:4f:b7:c0:b4:9a:08:6e:2b:8a:ab:87:aa:30:e2:df:43:9c:
         c5:9a:80:4b:20:f6:20:0d:f0:fe:c3:0a:c6:8b:ee:24:e4:8a:
         f5:9c:9a:8d:33:bd:35:19:6a:f3:0a:0d:66:d7:24:a2:02:ca:
         d8:3d:05:71:fa:47:b0:4e:38:9f:3f:7a:6f:7c:09:b3:3a:b9:
         88:97:a9:21:f9:a9:17:43:21:fc:fc:8c:f1:89:54:88:e0:06:
         8b:62:ee:c1:ff:e9:7c:cf:a1:bf:98:f3:0b:5d:aa:63:2b:d3:
         a4:34:c1:63:34:2f:8a:60:35:fe:7a:1a:6a:46:c8:47:0e:fc:
         08:99:59:e7:72:07:ab:b3:42:34:30:95:c0:5f:1b:c2:05:c2:
         28:93:2f:25:ac:ea:5d:19:b6:5f:63:39:b3:25:73:88:2c:f3:
         1e:fe:d5:d7:89:db:b4:1d:c9:01:bd:95:b0:d6:81:88:e7:ea:
         2b:63:51:18:5e:59:1d:07:24:c6:70:4c:75:51:31:9d:90:09:
         ae:78:ba:77:ed:79:be:ae:21:c9:42:b8:7f:40:7b:b2:3c:cc:
         6a:d9:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:24:15 2026 by rpki-client