Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9d0c080-b122-3d46-a314-e1ef08012888.roa
File:                     d9d0c080-b122-3d46-a314-e1ef08012888.roa (raw, json)
Hash identifier:          advRYNn3244B7h3lxsLaxyLV5ohNJhI03LX4LkrCEHg=
Subject key identifier:   F3:9D:D0:FC:0F:E6:F7:C5:DA:89:6A:3B:E8:DC:02:D9:42:1A:D7:D6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49836769FBB2E14F147B9640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9d0c080-b122-3d46-a314-e1ef08012888.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.106.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:67:69:fb:b2:e1:4f:14:7b:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d70abc44-efbb-4b51-a17e-14dbed4133f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a4:47:46:3d:f2:bf:9f:88:3e:1e:6e:c0:ef:
                    65:26:dc:68:d0:ed:e9:9d:f2:69:a8:2e:cb:2b:1f:
                    f2:f9:67:d9:5f:b0:0e:79:8e:f3:eb:ff:0d:42:1b:
                    b9:7b:78:d4:26:35:47:ce:9f:3c:f0:6b:52:7a:c3:
                    b8:40:0c:fd:c1:50:d1:87:e6:dc:eb:6d:46:93:9c:
                    09:c6:94:3d:da:22:77:d2:b9:af:10:e6:c5:5e:9e:
                    9f:74:6b:99:c7:24:79:5a:42:43:48:4b:64:23:25:
                    0b:99:c4:27:b0:1a:e7:8b:b0:f6:cb:7a:b6:19:25:
                    f2:97:42:67:2c:a1:93:61:f1:be:e1:8b:94:db:fa:
                    ab:38:f7:fa:23:60:b2:64:e6:a7:ae:42:ea:62:65:
                    74:d0:79:66:86:ef:4a:15:58:83:46:71:ab:e1:bd:
                    de:1b:4d:34:9a:f2:29:77:25:c4:11:d2:58:f2:e9:
                    da:f3:71:41:51:5f:4a:94:e0:35:7e:89:4e:23:ab:
                    51:d4:73:05:0b:08:15:96:80:85:f0:9e:fa:f6:c0:
                    2a:dc:31:dc:db:16:f4:92:26:f3:ac:ab:95:62:e7:
                    ae:a3:51:16:8c:10:d2:7f:7b:d9:07:6c:c5:34:57:
                    c0:c7:ca:c0:5d:31:39:a6:7d:5b:4f:c8:f9:c3:f8:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9D:D0:FC:0F:E6:F7:C5:DA:89:6A:3B:E8:DC:02:D9:42:1A:D7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9d0c080-b122-3d46-a314-e1ef08012888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:c7:ce:ce:18:91:71:14:79:97:1b:30:a2:f0:eb:d2:45:
         d7:d5:bb:76:fa:77:27:70:5f:3e:4f:5b:61:3b:63:bd:6d:80:
         c3:7e:6d:fb:fa:a8:c0:7f:6b:f9:79:3b:1a:a8:55:4f:ac:23:
         64:4f:08:d6:f9:2c:99:7e:a4:85:57:51:90:64:b9:43:33:4e:
         e0:d4:96:ea:c7:72:2a:60:79:33:e9:a7:5c:07:0f:97:aa:c4:
         60:33:0a:bd:1e:f9:b8:e8:2e:60:da:37:8c:3d:5d:94:02:0c:
         46:8c:90:34:b0:28:e3:d2:44:0f:8d:15:69:37:89:07:8f:24:
         ac:12:a2:df:32:be:4a:8f:77:6d:53:40:3d:df:ba:72:5c:ac:
         4b:f6:31:f9:43:84:b1:f3:bd:34:a1:9e:90:27:43:2e:e7:84:
         ea:f4:bd:ca:6b:11:2b:b3:70:4c:f9:1d:d8:91:21:d3:7d:0e:
         65:13:5a:3c:54:a7:4a:69:e5:a7:a2:5f:3d:80:3b:6d:b7:56:
         22:55:a4:f6:b4:9e:3e:b7:d7:03:63:84:09:52:a4:e9:7d:06:
         39:e8:8c:9a:d1:7c:ae:d8:08:a1:01:15:8a:f7:39:e3:49:1c:
         33:7d:26:6b:f9:c2:2f:07:cd:2e:a9:b9:dd:ae:53:c2:1c:01:
         f0:10:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:16:55 2026 by rpki-client