Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9d737-065f-38ff-8d6f-94ad232bf2ee.roa
File:                     69f9d737-065f-38ff-8d6f-94ad232bf2ee.roa (raw, json)
Hash identifier:          YKJO0qt16CWOLG0JYC8CxJcWUudc8+MwSAETuB/xPTI=
Subject key identifier:   2D:50:A6:D8:B8:9D:84:9D:0E:86:C5:E6:0A:73:CA:4B:23:44:D9:44
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFCB1F3111CDCC7F3A2680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9d737-065f-38ff-8d6f-94ad232bf2ee.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.105.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:cb:1f:31:11:cd:cc:7f:3a:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f75724f3-04d7-4568-92eb-f799e3befe30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:53:90:ad:01:1a:e1:79:07:71:d7:a4:17:f3:
                    ce:fd:01:c0:08:5d:97:12:65:37:65:27:8e:63:1e:
                    44:bf:a9:cd:e0:5a:ba:fb:0a:84:e7:fe:46:1c:38:
                    2f:47:3b:f1:86:49:ea:99:06:52:8e:24:44:0e:28:
                    0c:7e:78:92:9f:51:67:25:97:58:36:16:ec:45:c1:
                    f6:06:fa:44:d5:0b:78:42:6f:d4:b9:e1:93:68:57:
                    8d:af:6a:d2:a3:15:28:72:a0:65:60:a2:89:c9:27:
                    f1:26:83:d3:3c:77:64:2b:30:7e:df:25:3e:d8:ee:
                    eb:b7:e5:10:41:8f:6e:89:31:79:cb:3f:94:2e:45:
                    ee:02:ea:9f:07:16:4b:89:2e:25:67:41:bd:ad:58:
                    d8:4f:57:89:ed:d5:7a:be:67:b8:e6:cb:c8:ef:62:
                    52:aa:8d:fe:95:bc:c4:59:f5:63:a9:e7:cc:3b:a3:
                    22:86:d6:81:6c:69:ba:af:80:b9:cb:ca:08:ae:55:
                    3f:b5:3f:6a:bb:e6:7f:5c:c8:b9:52:34:66:6d:ae:
                    eb:dc:44:3d:4b:6d:34:74:47:be:32:af:50:b6:22:
                    51:e4:52:3f:60:cd:7e:0a:0c:e2:08:e0:b9:c3:04:
                    63:a3:26:f2:1a:17:2f:a5:50:e9:d8:f1:97:79:02:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:A6:D8:B8:9D:84:9D:0E:86:C5:E6:0A:73:CA:4B:23:44:D9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69f9d737-065f-38ff-8d6f-94ad232bf2ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:72:d8:1e:fb:a4:95:f5:fc:7b:b6:b6:a9:a9:cb:96:87:f8:
         20:79:88:cf:d0:03:cd:79:7d:8b:ec:30:b6:cb:68:0e:03:f7:
         51:6a:35:b2:07:5c:f4:50:e1:47:b5:6a:97:73:e7:ae:10:a6:
         89:3f:1e:bc:4d:c9:ff:54:9e:7b:ce:f7:f9:d2:e7:a5:dd:ac:
         24:24:8e:b4:23:7c:83:e3:a5:2c:50:97:a3:80:eb:8e:2c:40:
         a0:72:c7:9e:c1:6a:6f:0f:8e:4e:3d:7a:64:21:30:04:fe:64:
         f4:61:a1:f9:a0:8b:5b:6c:7d:fd:3f:ee:f0:7e:49:ae:40:54:
         44:1e:92:1a:99:da:94:66:c4:89:98:93:d7:29:ec:e7:e5:c7:
         4c:fe:a6:b6:5c:39:2d:d6:f4:e6:aa:fb:a5:23:4a:94:bb:dd:
         60:ba:b3:ff:2c:67:79:58:d4:e3:20:99:aa:e0:45:51:3b:54:
         3c:6d:4b:af:72:34:e8:62:57:8e:bb:96:69:f0:35:1f:73:8b:
         0a:bd:7b:b3:cc:c7:d2:72:bb:e3:84:96:4c:45:31:49:68:de:
         a0:98:3e:99:ea:6c:16:d9:c8:a5:d0:9e:30:12:c0:c4:ca:e6:
         f4:66:c8:ff:3a:4c:cc:af:24:1a:a8:b1:d4:5a:d3:fa:57:de:
         ba:2d:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:48:12 2026 by rpki-client