Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c5a5c8-c7cb-37db-a37c-6265e0acd389.roa
File:                     a8c5a5c8-c7cb-37db-a37c-6265e0acd389.roa (raw, json)
Hash identifier:          zzIcsrwg0zHLs/GjLUX5EmQB/h0oAnAHJvfDS3PlqvM=
Subject key identifier:   13:61:A2:28:4E:AD:70:18:86:D8:B8:92:3C:95:68:DD:B6:D2:63:EC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFC18F97BCECA541DD4100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c5a5c8-c7cb-37db-a37c-6265e0acd389.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:c1:8f:97:bc:ec:a5:41:dd:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=faa09954-1f03-486f-b652-665bcbf43f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:90:2c:9c:0a:7c:86:9b:2c:30:eb:5a:48:
                    5b:7a:70:3b:22:db:3f:72:81:4a:e2:97:24:67:b2:
                    21:6a:99:e4:5f:73:55:e0:36:d8:da:1d:94:8f:ec:
                    d1:2c:29:1a:40:e7:30:a7:a4:1d:df:7c:7e:00:68:
                    06:7f:6c:ff:81:12:f1:ae:21:f9:db:10:34:74:eb:
                    5d:db:df:c0:cf:5b:15:42:a6:cf:4c:00:f6:12:9c:
                    c8:21:7e:2d:d3:e0:25:86:8e:be:25:91:8f:af:68:
                    78:b3:29:ea:58:37:11:39:17:eb:f7:e0:32:9a:46:
                    03:14:40:07:67:6b:d5:13:9b:44:6a:2b:5c:09:67:
                    56:f4:29:9b:34:18:31:86:b2:72:cf:54:29:d9:e5:
                    11:02:1e:d4:8e:8a:ca:fa:d0:0e:ec:e8:a2:8a:9a:
                    2c:cc:f8:04:e1:76:48:8b:db:e7:dc:49:f3:03:e9:
                    ae:64:a5:3a:d0:92:e9:1b:6b:38:63:73:21:fb:65:
                    ef:9e:b5:5c:b3:76:9f:30:34:fa:71:2d:3f:c7:7a:
                    c0:a4:c9:98:39:7d:31:c7:6d:5a:72:de:d9:fe:b5:
                    1c:fb:07:39:b3:07:ec:92:93:f5:19:d3:18:96:8d:
                    21:6e:10:1a:0e:86:21:f1:b1:33:70:a5:2b:59:a6:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:A2:28:4E:AD:70:18:86:D8:B8:92:3C:95:68:DD:B6:D2:63:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8c5a5c8-c7cb-37db-a37c-6265e0acd389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fb:cb:70:9a:d9:e1:ad:dc:25:a7:15:ed:f9:fa:2a:7e:f3:
         6a:81:73:74:c8:58:54:f1:c4:59:1d:94:5e:81:fd:8b:6c:13:
         72:70:19:cf:67:8b:34:72:00:5e:98:b2:fc:60:1e:f4:e4:ed:
         de:8e:c2:d9:3d:b4:5f:f0:95:1b:1b:9d:a8:60:97:08:97:27:
         ef:cf:60:df:15:fe:f3:1c:b6:1c:e9:55:92:24:48:b3:95:bd:
         d3:b9:59:f4:b4:60:17:0d:8d:f6:ab:79:d2:96:8d:4d:70:6b:
         41:b3:da:9d:83:ea:75:5b:c2:e8:93:af:62:14:7d:da:8e:6c:
         db:30:c7:fd:c8:98:67:36:98:7f:ef:ba:04:24:6f:de:1a:d2:
         f4:9a:7c:ad:98:b4:f0:55:a2:13:2c:68:49:6f:17:2c:4e:d0:
         e4:e9:98:53:06:0a:5d:69:03:01:93:bf:a0:fc:62:27:1a:cb:
         e1:a8:ed:bd:0b:11:e0:39:9d:d0:63:4e:82:7c:77:10:04:f7:
         74:fd:04:47:90:ae:ea:71:c9:1d:80:42:d5:7a:84:f4:eb:d6:
         35:f4:f9:b3:7b:3f:6d:b6:7a:09:c1:25:6f:82:d5:b7:cc:17:
         f9:b8:58:b6:32:97:b5:93:44:2c:0e:48:7e:d6:78:b7:b4:39:
         a7:fb:f8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:27 2026 by rpki-client