Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7c5e332-6197-338c-b5ea-174982e3ffff.roa
File:                     a7c5e332-6197-338c-b5ea-174982e3ffff.roa (raw, json)
Hash identifier:          /5XnWVE9RAhhp/VYwRhrKXijgxKv3d2A0PrxFuY0Q8o=
Subject key identifier:   35:4B:4E:0F:12:7E:82:A6:12:E9:CB:A6:EC:36:AF:F5:DF:A1:B5:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F498347ECF0FF734B19204B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7c5e332-6197-338c-b5ea-174982e3ffff.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.104.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:47:ec:f0:ff:73:4b:19:20:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1b0a6b2a-9f54-45b6-be22-34835377ba99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:77:51:1b:3d:c5:b4:9d:ac:2f:00:9b:0c:
                    f3:85:e3:92:b6:bf:e2:8d:f5:4b:ba:96:fd:99:90:
                    66:93:45:ac:02:30:7a:eb:e3:7e:57:42:5e:53:4d:
                    ba:30:c3:6c:dd:bb:a8:bf:fd:bb:16:37:57:5a:15:
                    20:7b:3f:ec:6f:72:6f:d7:cc:9c:da:93:eb:0e:55:
                    7d:f2:9b:aa:a0:15:56:aa:96:16:b0:38:f2:a0:00:
                    c8:9e:7e:a4:bb:20:6e:69:c5:64:f6:cf:56:cf:82:
                    0a:b1:a9:45:b6:04:7c:9f:16:a0:75:e2:d7:66:38:
                    ef:03:a8:d5:57:05:a3:1d:66:b7:8b:fa:4a:7e:38:
                    c9:ca:4f:03:be:ee:c4:88:08:50:d4:2c:90:d3:5b:
                    83:90:c6:bb:55:38:a3:6f:cb:08:9b:6c:76:59:f0:
                    a6:80:1e:1b:3e:60:c6:b1:2d:cd:85:5a:13:c6:04:
                    6d:13:1c:55:73:a6:3f:67:f4:91:cf:68:37:65:05:
                    e9:60:53:53:f9:2e:20:73:68:bb:bd:63:b9:2c:aa:
                    54:79:b8:c5:85:ed:47:e6:25:d3:9e:c2:31:d2:a5:
                    cc:f1:a0:fa:58:b9:55:f3:ed:62:35:e1:d8:c5:49:
                    e1:1e:95:31:7b:a3:45:80:58:56:b9:71:4e:f3:05:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:4E:0F:12:7E:82:A6:12:E9:CB:A6:EC:36:AF:F5:DF:A1:B5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7c5e332-6197-338c-b5ea-174982e3ffff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:10:27:b5:e2:f1:4a:42:e9:c7:f9:f6:7e:8c:b3:25:64:e6:
         ed:da:63:c2:54:ee:00:6b:6c:db:22:f3:a0:9b:4f:85:b6:01:
         50:0e:54:23:a4:45:f8:62:f8:a5:be:1d:43:01:7e:83:ad:fa:
         2d:52:29:ba:e9:9d:27:9c:88:52:75:68:a2:4b:3b:78:56:e7:
         3a:78:e5:93:b6:20:ca:1a:b2:0e:8d:59:19:3a:a9:8b:ab:a5:
         84:81:8c:6a:23:b7:03:dd:a1:4a:f8:fd:c4:92:76:b3:3f:06:
         a2:cf:04:6e:18:d2:de:4c:6d:94:0d:e8:e9:4b:69:43:55:13:
         5f:83:b8:8d:9e:3a:cb:2d:fc:0d:ea:db:93:98:49:b6:98:71:
         bf:12:aa:24:ca:d2:92:92:7e:05:68:36:79:fa:4e:cb:85:62:
         01:c7:22:b5:1b:cb:61:c9:1d:56:b3:ea:e2:c0:d5:4d:27:03:
         98:17:95:70:fd:97:0f:6a:86:bd:8b:68:08:2b:81:bc:fa:12:
         fa:90:a1:26:34:70:30:d0:82:15:99:39:18:96:6d:a9:05:1a:
         3c:13:a8:5e:56:29:e3:63:50:49:cf:95:5a:a4:b0:ee:e3:35:
         40:1f:ff:89:5e:9e:f9:b2:ee:a3:69:d5:22:dd:0d:2e:a7:05:
         44:3f:21:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:57:08 2026 by rpki-client