Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78b1b69d-a977-34cb-b4e6-cb9cf9cca525.roa
File:                     78b1b69d-a977-34cb-b4e6-cb9cf9cca525.roa (raw, json)
Hash identifier:          VYa9Zddr/C6TW9LXqUOodtU1ZyOUIQvBIbZM3rWFv8Q=
Subject key identifier:   7D:E5:1B:DB:D7:D6:DE:25:05:EC:0C:A3:C5:37:00:A9:50:6F:D3:B0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983409AE889A262A0595000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78b1b69d-a977-34cb-b4e6-cb9cf9cca525.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.104.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:40:9a:e8:89:a2:62:a0:59:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=db463f3f-e8bf-40af-adf0-e465c0fe1718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:f7:97:ef:07:eb:48:29:d5:3a:94:61:c9:
                    2f:68:33:fd:de:b6:3a:47:7b:8b:bd:91:0d:2a:ad:
                    26:75:dc:5b:81:71:06:7e:5a:94:8f:d5:8c:a0:09:
                    24:57:81:d6:86:24:b8:82:e9:a5:ab:aa:69:b1:87:
                    ea:90:ed:27:e7:27:4f:db:79:8f:4f:8b:f9:3e:43:
                    62:70:68:36:fe:31:da:93:56:37:4c:eb:97:1c:79:
                    f2:90:3e:72:c1:78:84:3a:fb:ee:f7:1b:26:9e:bd:
                    04:e2:a0:51:64:b3:fe:ed:60:f9:dc:8a:fd:92:c1:
                    7a:da:d3:20:4b:06:ac:64:d6:dd:eb:ee:e1:18:59:
                    9c:3e:b3:38:01:87:7c:be:32:6f:bc:23:ad:01:ed:
                    bd:c4:ab:c6:eb:8c:a6:8e:10:c6:c0:66:08:97:4e:
                    68:2f:bb:dd:44:46:1f:d8:b3:71:38:9e:b6:b5:57:
                    c3:c1:92:7f:18:0b:66:c2:ee:7d:77:f6:6a:ca:f2:
                    5f:3c:fd:b8:1e:d5:74:99:21:29:31:53:b5:b0:11:
                    22:11:33:06:34:1e:8d:5a:ed:5e:27:b8:f6:01:1d:
                    0b:b0:86:84:ef:e6:20:f1:75:11:1f:52:cd:04:47:
                    e6:7e:1d:6c:91:1a:47:ef:e9:0f:dd:46:d6:9c:7f:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E5:1B:DB:D7:D6:DE:25:05:EC:0C:A3:C5:37:00:A9:50:6F:D3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78b1b69d-a977-34cb-b4e6-cb9cf9cca525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b4:62:85:c1:61:2d:ea:a2:a6:cb:c6:a4:0e:74:88:94:53:
         ba:cc:b4:ca:f3:95:cf:15:91:53:b2:b9:55:06:81:a8:e4:c1:
         d7:f1:78:b8:c3:46:54:06:cc:31:d8:7f:0c:d3:37:0f:65:2a:
         4b:f2:e4:e5:88:c5:42:f5:f2:5a:38:a5:8f:a6:a0:4d:8e:6e:
         5e:19:45:76:7f:af:57:3d:74:37:0b:58:67:10:9e:c6:de:4e:
         97:42:77:b0:06:fa:2f:ab:84:af:55:4f:27:98:2e:12:a1:5b:
         51:ff:01:05:26:58:56:45:44:72:f9:aa:e9:b2:9f:91:ff:4d:
         8b:2b:4a:3b:98:b6:a1:ee:f5:5f:2d:4b:bf:f7:de:f3:4f:11:
         2a:d5:da:a4:8b:02:a6:22:2e:02:2d:e0:3f:0f:7e:c4:37:ca:
         09:3b:d6:e6:05:a5:89:cf:37:0c:98:35:e5:da:41:0e:68:19:
         cc:2e:4e:e1:00:40:ca:19:c6:b2:45:de:5f:5b:de:4e:bd:33:
         cb:a3:a9:59:b0:56:c1:68:d0:cf:86:c2:47:91:b5:7b:2a:41:
         84:7a:80:14:63:0d:42:5c:e7:7e:9d:26:7a:0c:40:7e:ae:98:
         e9:e7:43:36:f2:96:43:2e:1e:ab:cc:73:9d:4a:ba:12:8a:4c:
         f1:bf:55:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg0Ca6ImiYqBZUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGI0NjNmM2YtZThiZi00MGFmLWFkZjAtZTQ2NWMwZmUxNzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjL3l+8H60gp1TqUYckvaDP93rY6R3uLvZEN
Kq0mddxbgXEGflqUj9WMoAkkV4HWhiS4gumlq6ppsYfqkO0n5ydP23mPT4v5PkNi
cGg2/jHak1Y3TOuXHHnykD5ywXiEOvvu9xsmnr0E4qBRZLP+7WD53Ir9ksF62tMg
SwasZNbd6+7hGFmcPrM4AYd8vjJvvCOtAe29xKvG64ymjhDGwGYIl05oL7vdREYf
2LNxOJ62tVfDwZJ/GAtmwu59d/ZqyvJfPP24HtV0mSEpMVO1sBEiETMGNB6NWu1e
J7j2AR0LsIaE7+Yg8XURH1LNBEfmfh1skRpH7+kP3UbWnH8J9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH3lG9vX1t4lBewMo8U3AKlQb9OwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzhiMWI2OWQtYTk3Ny0z
NGNiLWI0ZTYtY2I5Y2Y5Y2NhNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2h5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKq0YoXBYS3qoqbLxqQOdIiUU7rMtMrzlc8VkVOyuVUGgajkwdfxeLjD
RlQGzDHYfwzTNw9lKkvy5OWIxUL18lo4pY+moE2Obl4ZRXZ/r1c9dDcLWGcQnsbe
TpdCd7AG+i+rhK9VTyeYLhKhW1H/AQUmWFZFRHL5qumyn5H/TYsrSjuYtqHu9V8t
S7/33vNPESrV2qSLAqYiLgIt4D8PfsQ3ygk71uYFpYnPNwyYNeXaQQ5oGcwuTuEA
QMoZxrJF3l9b3k69M8ujqVmwVsFo0M+GwkeRtXsqQYR6gBRjDUJc536dJnoMQH6u
mOnnQzbylkMuHqvMc51KuhKKTPG/VYM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:04:26 2026 by rpki-client