Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/beb6d33d-00f9-3b2b-beaa-c2466cdf6ce0.roa
File:                     beb6d33d-00f9-3b2b-beaa-c2466cdf6ce0.roa (raw, json)
Hash identifier:          oN5LctYGoX60jltLzmrhHnls2brYFsR5M8rCAKbQ9rc=
Subject key identifier:   80:E0:08:50:A9:7E:8A:9A:38:77:C7:34:2B:6F:E4:88:7F:F4:55:D4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E074B66AD3448BA8303140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/beb6d33d-00f9-3b2b-beaa-c2466cdf6ce0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:74:b6:6a:d3:44:8b:a8:30:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=c52af166-252a-4fd1-b796-094b983e3d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:74:e3:69:27:54:50:de:bd:04:67:c8:b3:
                    a7:a9:1f:15:79:2b:a4:f8:59:9d:92:7a:82:6a:fb:
                    92:e1:63:d5:e3:88:a3:ba:0f:33:21:73:93:77:6d:
                    9a:c8:df:3d:ad:e0:f5:dd:9c:e1:b5:bf:2c:06:40:
                    9e:28:73:51:a2:e2:6b:81:ea:79:cd:a6:81:15:04:
                    90:f9:30:b9:01:e5:d9:e9:bd:0f:0b:1b:4b:eb:58:
                    53:98:88:77:79:46:cf:00:6e:55:a2:3c:92:4b:06:
                    39:22:ec:dc:3a:0c:2f:c8:09:be:a8:fa:94:9f:f6:
                    13:a7:78:f2:56:46:85:18:77:a9:8c:60:e0:d5:71:
                    e5:5a:d2:27:fe:a5:92:59:bb:b8:c5:65:f3:b7:45:
                    3d:8b:de:d9:d0:35:4a:e5:6f:14:d6:69:c8:8c:02:
                    10:e8:05:81:f3:61:41:3a:04:a0:ea:d6:6a:53:98:
                    92:c7:07:cb:4f:a8:43:79:28:fd:26:4d:ed:fe:d7:
                    f7:0b:c7:79:fd:24:78:65:2f:0f:e5:0a:a8:7c:79:
                    78:66:1b:9b:bb:be:09:02:26:f2:81:65:ee:e5:02:
                    c0:ed:46:a6:f9:39:e2:73:60:86:dc:53:36:2b:89:
                    52:dc:49:74:0f:dc:29:20:dc:43:31:bc:9f:5f:d7:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E0:08:50:A9:7E:8A:9A:38:77:C7:34:2B:6F:E4:88:7F:F4:55:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/beb6d33d-00f9-3b2b-beaa-c2466cdf6ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:53:90:a4:e5:7a:74:fb:2a:94:0e:0e:75:7b:07:73:85:
         ba:db:f2:cc:fd:40:5b:16:8b:5c:b5:1b:f9:8b:8d:cb:4f:ea:
         7c:76:a9:54:95:db:ad:20:16:c9:9d:08:db:1d:83:c2:72:53:
         fc:3d:ae:98:81:d2:8a:97:76:4e:51:b8:f1:c3:c1:df:3b:3c:
         d2:bf:02:2c:76:94:9c:20:03:e4:81:0e:46:8b:47:0d:32:a6:
         63:e2:49:a0:1b:6e:d2:35:7f:d1:2e:1a:7a:82:d9:86:94:0a:
         b4:6a:43:76:17:6c:86:a5:c3:28:60:2f:8f:7f:49:f3:18:39:
         11:0e:c2:0a:32:5e:d1:90:c3:fe:97:fa:ff:db:a9:07:e7:38:
         a2:c9:63:d1:d7:0e:90:34:e6:4d:42:b4:50:47:b9:02:51:f6:
         29:9c:20:75:04:3a:6c:95:fe:83:0c:c2:4f:86:15:b5:f4:ab:
         8e:11:39:ae:f3:5d:11:f1:cd:92:a7:4e:1f:1c:68:75:d3:ef:
         37:28:8a:83:f4:8a:c3:65:90:cc:90:18:94:cd:f0:c9:ea:d3:
         fe:9d:2d:20:07:96:27:2e:30:5b:6f:44:1e:c9:24:aa:19:04:
         d1:c3:9e:a1:b6:f9:f3:6e:d9:28:b4:17:b0:20:52:7d:0d:33:
         ff:5d:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:34 2026 by rpki-client