Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a089faa-cf2b-3ce9-8fe5-4255615d3296.roa
File:                     8a089faa-cf2b-3ce9-8fe5-4255615d3296.roa (raw, json)
Hash identifier:          wLk4XVRFoSWceAB9f+m+dRkGYVZ4NonU4vpQH0pJMTw=
Subject key identifier:   A2:10:69:BD:4A:11:D4:FB:A9:D0:42:19:E2:84:CF:78:20:32:BB:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B2776E2F34011E6203200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a089faa-cf2b-3ce9-8fe5-4255615d3296.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.105.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:27:76:e2:f3:40:11:e6:20:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8bfaca2f-d05d-4adb-87e6-b52076f0637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:29:89:49:cf:cc:f6:9f:29:08:b3:4a:53:
                    f3:fa:37:45:58:2c:69:d1:93:ba:3e:88:ab:ef:4c:
                    d9:13:f2:15:86:55:a1:45:13:aa:72:44:0a:2b:5b:
                    5c:2a:61:d9:66:88:58:35:0c:62:68:e5:2c:c2:20:
                    08:fd:ca:9c:a4:48:2c:ef:1a:0b:21:02:e1:dc:c3:
                    ec:cd:f0:45:68:f4:d8:a2:3a:79:f1:c2:07:7a:f9:
                    16:33:db:ef:16:9c:ef:05:b8:14:b6:2f:3d:da:44:
                    60:8c:5a:f9:69:9e:8e:80:d1:3c:67:9b:c7:fd:89:
                    da:e8:10:ae:fd:b7:74:df:3e:ae:1d:ab:e6:e5:3e:
                    7a:d3:c4:47:f1:28:c2:35:80:a9:04:7a:87:c0:5d:
                    25:14:e8:d7:91:71:5f:56:d8:a1:cb:a5:ac:e8:6b:
                    ed:11:75:09:1f:a7:df:19:d2:ac:ef:49:7a:ee:05:
                    b3:8b:f5:1a:7b:4a:4f:a5:6f:45:6a:72:c0:36:a6:
                    a9:cc:2a:24:6b:48:bb:31:01:15:89:9e:cf:36:2d:
                    60:3e:ff:0c:54:ac:7e:06:8e:b4:7e:cc:6a:dc:db:
                    a9:89:e3:d2:89:96:2d:4d:29:00:a1:55:7a:97:1a:
                    56:a5:db:a8:ec:59:8b:d2:0c:cf:44:03:76:bb:3f:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:10:69:BD:4A:11:D4:FB:A9:D0:42:19:E2:84:CF:78:20:32:BB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a089faa-cf2b-3ce9-8fe5-4255615d3296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f8:37:c2:09:13:93:72:ef:68:2c:15:c7:15:5f:79:65:18:
         f4:d9:76:df:bd:25:fd:2e:91:da:b2:fd:0b:09:45:45:bf:13:
         a0:ec:5e:8b:3b:48:20:7c:74:9e:b5:92:d9:95:82:05:58:93:
         6a:30:d4:cb:12:1c:c8:48:1b:a3:e2:f2:10:45:71:27:7c:e8:
         e0:b3:42:1f:97:27:51:ac:ca:d2:66:0f:39:3e:71:1b:8b:be:
         8a:27:df:31:c2:b5:71:a6:f7:54:7a:d8:e2:8d:d6:a0:b3:f6:
         fe:0b:a4:3e:b1:95:fa:36:d5:db:3b:7e:46:9f:c8:74:33:27:
         22:cf:47:1a:12:e2:42:40:04:af:1c:0e:c2:47:27:45:10:18:
         00:64:96:49:2e:6c:cc:0d:ca:f7:ef:8b:a5:8b:b1:c6:ed:85:
         f7:24:76:da:05:57:25:09:40:6c:d2:13:bb:c0:43:a6:d9:5d:
         ef:0b:78:22:77:a7:ee:7f:58:de:d8:33:d3:a1:c5:df:0a:ee:
         22:cb:63:93:0d:39:7b:a5:45:dc:83:66:ad:16:8b:7b:a6:47:
         0d:01:ae:2e:df:ee:dc:03:a8:59:fb:fb:16:b9:40:d6:84:b0:
         51:00:c2:1f:2c:92:31:3e:0b:8d:31:25:82:f3:23:e6:b4:d3:
         36:47:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:41:45 2026 by rpki-client