Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab2ce77c-efbf-3967-a298-ae76b1f55eed.roa
File:                     ab2ce77c-efbf-3967-a298-ae76b1f55eed.roa (raw, json)
Hash identifier:          +SFYiSDGXhjjnxNltDckEp6K2t2wQHCQhwHtF0DRBrk=
Subject key identifier:   10:46:E9:B8:50:BA:58:C2:82:8F:F3:34:29:87:1B:C1:B1:63:48:D4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E056EDC2DD50CF19CFAE40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab2ce77c-efbf-3967-a298-ae76b1f55eed.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     40306
IP address blocks:        75.104.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:56:ed:c2:dd:50:cf:19:cf:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=77e08f17-b34b-4e5f-89de-deef545c39cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:5b:65:08:1c:a4:d8:15:e3:ee:96:3b:e3:
                    ce:3d:9c:db:10:9d:79:df:3c:d7:38:64:4b:4a:c8:
                    3d:63:f9:4c:65:53:a5:4b:50:b0:f0:85:f9:3a:0f:
                    d1:b2:55:27:33:62:b8:e2:14:49:07:79:0c:15:c6:
                    7c:4b:0f:c0:2c:17:20:08:1f:aa:e8:44:5f:c0:e6:
                    ec:6f:69:49:1e:05:01:34:12:a3:b9:0d:39:40:5c:
                    bb:f1:f9:0e:96:f6:c0:78:6e:8d:7d:7e:ad:d3:a3:
                    25:f7:ec:46:23:f5:4e:0e:7b:7c:a7:59:f6:87:a6:
                    83:4d:2f:75:8a:57:22:14:24:4e:0f:21:d0:3d:a9:
                    d7:6c:23:86:3a:5c:b6:83:23:f3:02:cf:ca:15:7f:
                    40:65:b6:ca:19:b7:f0:0b:0e:64:fb:31:a0:8e:c3:
                    23:5e:d2:57:f4:fb:82:69:40:56:1a:64:28:74:ab:
                    31:63:ad:8e:ec:a1:0f:3b:82:e7:8b:39:3c:1a:65:
                    4e:a2:47:8e:d9:27:f8:84:19:7b:5f:72:2b:c5:c1:
                    03:8b:41:60:9c:d3:b6:c7:09:b7:22:fd:db:a8:ea:
                    ba:31:04:e3:3f:ac:06:c1:cd:e7:d1:5c:a2:5a:56:
                    fe:30:9e:e7:20:a9:38:a2:7d:63:a7:9b:27:15:3f:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:46:E9:B8:50:BA:58:C2:82:8F:F3:34:29:87:1B:C1:B1:63:48:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab2ce77c-efbf-3967-a298-ae76b1f55eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:73:fb:4f:f3:c1:13:45:b5:f9:da:00:a1:a0:e4:52:c5:
         72:4c:de:5c:5e:d9:a2:c5:8e:9b:53:16:37:07:a4:79:08:2a:
         cb:e9:b0:db:28:62:a6:e1:4e:10:ca:af:c7:cc:e6:fc:56:e2:
         80:ae:35:3d:2e:76:f7:30:a4:74:41:a6:fa:cf:58:bc:15:10:
         98:90:03:77:6c:34:d4:91:1e:af:5e:6b:1e:bc:2e:34:3f:4e:
         4f:3d:e7:d2:b7:a5:22:0c:fd:d4:09:c4:ea:22:15:a4:c6:8b:
         91:2c:b8:f2:4f:70:cc:f3:68:74:c6:de:72:81:b1:19:08:53:
         95:1a:16:3d:4d:97:27:22:d5:90:81:35:eb:67:a2:7f:4e:d2:
         de:26:a3:96:e9:d6:f3:2d:bb:58:0d:61:60:c4:72:a3:aa:c6:
         38:08:1b:01:b9:52:f7:dc:ff:1b:cb:da:28:ce:19:ea:cd:37:
         64:cb:9e:64:9b:cc:8e:d6:df:d0:9a:d2:e9:21:8a:16:07:75:
         ca:21:d7:d8:a0:50:3e:e1:5a:3a:cd:39:9a:13:05:82:86:96:
         23:91:95:ca:73:66:cd:74:18:91:9f:b1:a7:09:e4:dd:b5:81:
         49:65:0b:17:d1:00:a9:c3:e2:fb:b8:8f:d1:bc:cb:02:fe:34:
         da:96:49:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:55 2026 by rpki-client