Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba5ade9c-45bc-37c0-835a-01cba1be5aac.roa
File:                     ba5ade9c-45bc-37c0-835a-01cba1be5aac.roa (raw, json)
Hash identifier:          NnCI86ef14hPMxQEXeDG3L+w7cbWP7ioMw25nCDUxSs=
Subject key identifier:   BE:9B:71:D2:97:47:38:B1:BA:65:09:E0:72:F8:27:2E:43:A9:21:40
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFC493885ECDC20A578600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba5ade9c-45bc-37c0-835a-01cba1be5aac.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:c4:93:88:5e:cd:c2:0a:57:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=4b86ec95-de2c-4a97-a112-a11efbd807d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:66:b1:91:70:da:e2:47:94:94:a3:21:e0:e2:
                    dc:1d:41:7e:5c:98:af:cb:74:49:07:27:49:05:b0:
                    e3:d9:00:82:07:95:d3:79:a2:83:0f:7c:49:de:8b:
                    20:76:79:60:dc:87:03:11:8c:8c:22:79:86:bf:be:
                    e3:75:5e:fb:77:c4:93:c3:c7:69:38:64:41:9e:45:
                    cb:1e:6b:63:b3:11:98:57:0f:f7:2c:45:c2:4c:17:
                    f9:5e:d7:74:f4:0d:91:b8:91:99:71:c4:6c:df:e2:
                    bd:13:17:b5:03:bd:9f:27:b2:c8:13:ae:eb:f4:28:
                    3d:4d:0e:9d:04:fd:fa:32:bb:8c:20:0d:a1:21:8d:
                    b8:e3:73:db:83:dd:b5:11:8c:3f:06:36:2d:e7:bd:
                    76:32:93:33:81:15:d6:73:16:f5:e0:0c:9d:6b:3f:
                    6a:79:8b:2d:e8:9b:55:6c:d4:5d:22:31:53:7f:db:
                    a4:70:ae:49:9f:8f:9d:69:82:2b:06:75:93:53:b9:
                    79:18:48:40:9e:33:7d:a5:48:6c:2c:e8:44:65:3b:
                    f8:e8:f2:e5:34:90:64:87:68:55:d7:db:41:ac:e6:
                    09:ce:e7:cd:ab:1b:54:4f:26:e6:43:47:2c:52:01:
                    72:b6:d0:d2:91:8e:17:41:14:ba:fe:8a:ee:28:d4:
                    0d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9B:71:D2:97:47:38:B1:BA:65:09:E0:72:F8:27:2E:43:A9:21:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba5ade9c-45bc-37c0-835a-01cba1be5aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:3b:4d:d2:91:41:c6:cd:95:92:9b:90:77:64:75:b8:5a:
         8f:3a:8e:af:3e:7b:83:ff:8d:c3:e0:19:70:cf:97:b4:59:bf:
         da:59:72:90:1c:ab:73:e4:4a:08:7c:54:bf:81:13:29:29:c2:
         dc:3a:cb:21:f3:d4:ea:45:63:99:66:eb:e5:65:77:2d:0d:17:
         f6:9a:f1:bb:60:bc:19:6e:f7:ce:1b:c6:90:be:10:3e:bd:7b:
         d3:59:26:f2:a7:03:5f:0d:36:79:4c:08:14:e2:d3:f1:ad:7a:
         5a:80:54:1d:a8:20:2a:ad:9e:be:9c:46:2b:3e:6e:43:20:e4:
         38:d5:55:63:50:2b:44:f1:a6:d3:84:66:19:8c:e6:2a:2f:38:
         64:c8:cb:da:7f:96:17:d5:37:88:56:f9:c2:1b:ed:5b:23:a4:
         c8:b6:dc:73:18:fe:01:26:c9:1a:80:94:9a:c0:c6:4b:23:fe:
         30:46:f7:de:dd:fb:44:cf:5c:d1:69:3d:83:69:08:9b:85:1d:
         9f:80:a6:dc:d6:88:88:bf:a9:be:3b:01:22:c0:7c:e0:30:ac:
         23:20:c5:16:0d:ed:4b:fe:73:76:c2:ea:88:f4:62:2c:02:79:
         5b:91:cc:0d:7c:62:81:8c:af:e5:61:92:fe:52:55:79:02:55:
         92:96:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:41 2026 by rpki-client