Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae840eaa-eebf-3466-8870-19e8c5b6f4b6.roa
File:                     ae840eaa-eebf-3466-8870-19e8c5b6f4b6.roa (raw, json)
Hash identifier:          /nwbD/N/77+Yt+3WqWIAyAS5ujQjyKJjk6m//4tR5oQ=
Subject key identifier:   58:E7:75:D8:92:20:BB:F3:5E:A5:E8:EE:2D:A1:72:2B:C4:C2:85:49
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49833562532611A259395E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae840eaa-eebf-3466-8870-19e8c5b6f4b6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.104.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:35:62:53:26:11:a2:59:39:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=26095269-04c7-4119-b339-c8f21242a86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:88:43:27:81:68:a7:2e:a0:2f:64:b5:6d:
                    0c:90:2e:3b:45:25:70:7a:23:32:f2:69:43:be:9c:
                    0d:c0:1b:eb:9c:e6:8a:f1:66:2e:04:c3:2d:d3:ad:
                    52:c6:95:85:0b:e9:2d:55:29:f1:b2:3c:16:53:38:
                    87:8c:0c:a8:1a:c9:f8:1e:fb:11:a0:88:24:1f:1c:
                    ef:60:3a:2b:2f:7a:81:2a:b4:22:7c:c0:0e:11:9b:
                    5d:c1:9e:f8:0a:84:5e:fb:6d:a3:46:16:c6:cb:8b:
                    fb:b4:45:c7:bd:5b:eb:d5:78:35:b9:3a:26:63:aa:
                    82:25:63:46:29:1b:ae:91:45:65:1a:61:ce:4d:5c:
                    28:fc:af:b0:c8:87:a8:bc:eb:e0:00:53:6b:6e:ae:
                    5f:4a:84:07:f0:93:7b:ff:b0:6f:48:6b:a9:4f:97:
                    4d:1e:c3:2f:35:a8:42:b4:13:8c:92:b0:58:82:dd:
                    14:da:87:6b:10:cc:1f:4d:1d:29:74:54:c8:59:c9:
                    88:ee:8e:22:da:b3:5f:94:43:82:38:20:c0:be:c0:
                    2b:df:09:23:10:e4:0e:63:a0:a3:4f:ec:70:19:cf:
                    14:49:aa:1e:88:0e:3e:bb:aa:66:fe:05:89:3f:8c:
                    68:ac:73:37:05:f6:89:a0:53:f8:8c:4e:58:45:0c:
                    f7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E7:75:D8:92:20:BB:F3:5E:A5:E8:EE:2D:A1:72:2B:C4:C2:85:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae840eaa-eebf-3466-8870-19e8c5b6f4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:95:12:9a:a3:75:06:7d:cb:b2:a3:be:e5:77:d0:22:87:
         ec:17:0e:b8:69:12:19:9f:3b:13:19:fd:a6:7b:57:e0:91:38:
         6c:73:6d:36:ed:d4:f6:59:a6:d7:c0:3b:fd:90:34:58:d1:75:
         07:c8:1a:0a:e0:3e:2a:72:53:22:66:b4:8f:3d:3f:bb:ce:ec:
         91:08:db:09:dc:52:a6:a8:db:09:57:4e:aa:6b:e2:f7:86:ce:
         94:87:2b:a1:74:e8:f0:40:fe:eb:59:2b:d4:c8:a8:61:5c:33:
         43:8a:11:04:c6:8b:b1:da:ac:8b:f2:35:3a:5d:4a:36:5d:9b:
         e4:6b:66:08:7d:32:1f:70:89:8e:e7:be:45:74:5f:ed:31:e8:
         a7:50:8c:01:90:69:8a:c6:72:2b:43:44:84:6e:24:66:c7:fe:
         ab:68:5f:72:74:25:7e:5a:1b:a2:e5:f5:88:a7:77:59:ca:56:
         30:dd:9d:7d:18:94:69:77:b8:56:b6:a8:40:0d:df:af:b9:69:
         06:d4:51:55:9d:66:f1:e3:6e:40:7a:dc:2d:03:54:63:57:8d:
         3f:36:fb:21:9e:a3:83:d5:7e:8a:20:86:03:75:88:6f:2e:41:
         c4:90:2f:cf:33:ea:d4:69:8a:36:40:88:84:1a:0c:ec:90:a1:
         72:b1:9d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:39:34 2026 by rpki-client