Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66e7dfc2-217d-37a6-bc29-faaf6e63b79b.roa
File:                     66e7dfc2-217d-37a6-bc29-faaf6e63b79b.roa (raw, json)
Hash identifier:          mW8nTqYjZCjyCkEy/xg8IoKJqwrWUqn8eaz4lfAPJb8=
Subject key identifier:   C9:10:4E:C3:5D:2D:E9:02:8B:74:64:BD:C9:9E:EA:98:7C:C0:A2:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCE132142073C396A95D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66e7dfc2-217d-37a6-bc29-faaf6e63b79b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.104.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:e1:32:14:20:73:c3:96:a9:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=453e2fc0-2b1d-4423-b711-2b9a7957058a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:0f:7c:f8:8f:83:d8:9b:1b:99:08:e7:b2:
                    61:dc:a8:29:d1:29:de:f7:66:7a:44:c7:5f:83:e2:
                    e9:d8:63:05:26:31:22:2c:a5:de:19:0d:55:0d:60:
                    15:0b:f4:6c:45:d1:f9:d4:5a:3b:ae:eb:cb:b5:e1:
                    33:d5:0b:8e:36:79:3c:9b:f5:e0:35:2c:da:b7:0b:
                    29:32:6a:83:c6:93:e8:ff:1f:90:f5:2d:a5:77:52:
                    5b:00:23:98:2f:4f:2b:4a:4d:68:92:0c:94:72:57:
                    19:c5:03:ff:5c:83:83:ae:ef:f1:00:0d:56:aa:2e:
                    0c:38:96:46:b9:55:c8:71:66:00:19:61:e8:41:45:
                    a0:09:28:dd:2b:c0:03:c7:65:50:64:be:78:2b:8f:
                    47:b7:5f:72:4e:12:8e:da:ec:e7:4c:c4:23:af:19:
                    e5:59:18:b9:49:40:a2:c1:00:6c:59:ad:d7:8f:9a:
                    5b:b6:a8:7d:c7:41:68:01:fb:9d:b9:80:9d:63:6c:
                    91:46:fc:8b:59:b9:18:25:72:f1:80:30:5f:13:fa:
                    69:43:3d:80:84:ed:f9:42:73:ca:d1:40:a2:43:fc:
                    ac:ed:55:23:2c:a4:46:44:d5:ee:29:66:81:a2:11:
                    96:b3:6b:bf:80:15:c1:f6:f5:8f:5d:bb:3d:dd:49:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:4E:C3:5D:2D:E9:02:8B:74:64:BD:C9:9E:EA:98:7C:C0:A2:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66e7dfc2-217d-37a6-bc29-faaf6e63b79b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:4c:9f:b4:01:b8:38:e7:86:d9:7b:71:19:15:9c:e7:c0:35:
         4c:1a:23:58:46:90:5e:30:e4:53:d5:ef:89:1d:39:66:21:ef:
         58:54:c6:69:55:40:92:07:68:e7:e4:0c:29:f4:d3:91:3e:ca:
         8b:ce:13:88:cc:6b:95:0e:84:54:f6:3e:62:50:03:10:a5:97:
         73:d4:ef:d6:68:fa:cd:ce:93:40:e2:69:e5:f5:7d:98:ba:5a:
         7b:ee:42:c4:62:ce:f3:23:56:da:8e:28:9b:7b:0d:13:e4:6e:
         c1:20:ac:b3:68:48:76:59:f3:fb:df:0d:5b:d1:2e:f0:50:f4:
         fc:4e:e9:c4:4d:4a:38:15:d5:66:3d:92:20:30:45:06:5c:46:
         80:e5:8a:6f:fd:da:70:68:aa:98:07:1e:f3:84:b0:aa:55:82:
         56:49:d4:9b:5b:fb:76:6f:f8:66:a7:32:f9:de:32:79:ff:9f:
         3b:3d:e4:53:8c:4d:8b:b0:85:26:51:8e:80:a9:0f:d8:9a:82:
         63:5e:e6:e3:c4:35:12:40:a0:6f:d6:50:c7:a0:a9:50:b7:12:
         64:f7:67:fe:a4:4b:ab:f0:0f:0b:14:2a:e6:6a:52:4f:3a:aa:
         48:9e:68:5b:76:e7:68:ec:4a:44:49:81:01:ab:52:22:b7:d4:
         f0:18:16:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:06 2025 by rpki-client