Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca6724fa-3d00-3608-8154-e964894a15cf.roa
File:                     ca6724fa-3d00-3608-8154-e964894a15cf.roa (raw, json)
Hash identifier:          N3sv9YS/Te1nMUY3T4YDSPtAYw0ipQy23NMuioaLtJs=
Subject key identifier:   06:CE:14:88:9D:92:8B:3C:36:4C:15:4E:72:79:92:E1:F9:65:C0:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFC17DB6BAEC7D64F0CA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca6724fa-3d00-3608-8154-e964894a15cf.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:c1:7d:b6:ba:ec:7d:64:f0:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=d78305aa-e6dd-419b-b0f5-ef042e03ae01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:f4:c3:87:0f:1a:d1:02:dc:7c:b8:0f:ad:
                    29:3f:b5:e8:8a:f1:1f:82:89:53:39:b7:bd:fb:1a:
                    d5:4a:5c:35:07:5c:28:86:cf:a6:e1:4a:b2:ea:18:
                    0b:d5:5b:4a:04:a6:ee:fe:43:8a:95:38:29:86:95:
                    5a:61:a8:89:4b:0f:af:db:e0:60:e4:21:30:03:66:
                    7b:a7:f8:5c:12:52:d8:8b:fc:77:2d:58:87:93:31:
                    3d:1a:a0:c0:08:26:b4:b3:92:6a:3b:61:e8:69:0d:
                    08:74:df:0f:44:19:53:41:cd:8f:bc:da:52:0e:d7:
                    0e:04:a7:9f:61:00:79:9c:36:14:4f:bf:a8:0e:42:
                    ba:37:79:b8:54:ad:5b:b9:87:fd:41:c7:9b:93:f1:
                    ea:04:2f:71:1a:aa:da:d8:a2:94:51:8b:b0:15:b9:
                    ff:63:04:d6:39:24:66:9d:8c:0c:cf:09:bb:32:94:
                    25:7c:67:17:96:b3:bb:87:6d:ca:ea:69:25:18:79:
                    5d:51:94:cd:5c:dc:5a:30:c0:96:65:80:cb:02:a7:
                    27:20:77:14:d4:26:c8:18:fb:88:3f:5f:9e:58:ef:
                    31:97:8e:d2:f6:bf:51:70:8b:3c:ed:73:10:15:6e:
                    61:04:71:49:14:e0:de:e0:bb:9f:3d:69:7f:d1:c4:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CE:14:88:9D:92:8B:3C:36:4C:15:4E:72:79:92:E1:F9:65:C0:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca6724fa-3d00-3608-8154-e964894a15cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:a1:b1:8c:2a:99:f3:9a:54:f5:36:ee:93:c2:49:97:55:e8:
         96:41:82:37:ee:20:c8:44:fa:4b:ab:c0:5d:6d:20:ee:44:6b:
         bc:73:d2:c4:ef:fb:f0:c6:b5:bf:12:94:23:ce:76:0c:9b:73:
         6b:0c:d0:8a:6d:6b:f8:d1:d4:ca:69:bf:3b:f5:db:ed:50:e1:
         c6:a9:27:70:a0:1c:fc:ef:4b:87:74:33:45:12:01:99:f7:13:
         06:b0:29:c7:d0:2e:cc:44:a9:e4:d3:3b:e4:d8:4d:9d:81:e2:
         15:5e:e5:63:10:5f:55:b6:df:3b:21:f0:7c:58:cf:16:a0:f2:
         13:29:31:63:07:02:e9:d4:b9:a9:43:d6:8b:13:9d:c2:75:17:
         68:ae:00:74:3f:7d:99:67:52:4c:bb:16:74:eb:c8:00:05:ed:
         aa:57:bb:a1:22:ee:cb:b8:35:38:b8:a0:a1:f9:bc:68:97:ef:
         78:72:76:2c:aa:e6:2d:7a:1b:d3:69:22:bf:dc:73:43:10:b2:
         af:5f:58:4f:f4:79:e9:dd:52:f4:7a:f1:24:0b:30:7d:96:ce:
         e2:f1:62:a4:71:fe:de:3d:f5:d8:06:90:d8:39:49:0c:b6:41:
         bc:93:a0:a1:55:51:0f:fd:ac:d3:0b:50:3f:74:a5:3f:23:ca:
         34:d1:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:04:01 2026 by rpki-client