Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6e41da6-4ba4-3acb-a5cd-e481384d9dcc.roa
File:                     e6e41da6-4ba4-3acb-a5cd-e481384d9dcc.roa (raw, json)
Hash identifier:          G9BH0jKPTSt2n6ZHhJiQLRVfawxFa2KdxiTCetA8DoA=
Subject key identifier:   7B:05:5F:00:5B:D6:EC:0F:D8:81:5B:AD:70:77:45:72:6C:69:67:39
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E06DC3CF2C97C3FFFC0C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6e41da6-4ba4-3acb-a5cd-e481384d9dcc.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:6d:c3:cf:2c:97:c3:ff:fc:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=dece38ef-3409-4858-9efb-88bf8caa6787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:fc:ea:67:c1:e1:38:49:53:93:eb:b9:41:
                    0d:ec:60:be:79:d7:b3:c3:37:37:a2:f8:8c:7e:c7:
                    15:6c:82:1b:97:9b:21:b6:2e:e3:02:83:8f:12:f2:
                    75:15:e5:a0:da:e9:6b:4f:29:59:58:a1:da:0c:c1:
                    3a:3d:19:66:36:5f:04:04:e0:3d:b2:a0:1d:86:30:
                    ac:2e:fb:34:44:b8:b2:5d:80:5a:bb:54:92:fb:a5:
                    c8:f9:20:5a:33:f5:97:e9:55:ee:6e:3d:a8:8f:ac:
                    f1:c0:a5:90:da:f6:09:60:62:8b:97:fe:df:e8:2d:
                    f8:8a:db:1c:a1:6d:cc:3a:e1:62:59:4d:d7:0e:d3:
                    da:d9:6f:e6:f6:76:5c:0a:39:4e:2c:f8:02:66:90:
                    8e:f3:3c:42:48:9e:d1:af:86:53:71:49:8c:36:76:
                    80:3e:af:59:16:4b:16:e5:d5:ab:8d:3e:ff:00:7c:
                    b4:34:da:a0:22:8b:7f:80:31:11:9c:c4:e6:1b:13:
                    f5:7c:1d:cf:29:65:e1:b6:16:7f:94:4a:28:6a:62:
                    c1:9e:b1:0a:f5:49:f3:d8:86:76:5d:43:74:8f:fb:
                    33:86:99:e4:33:92:d0:d0:41:3e:39:55:ef:18:46:
                    04:6c:1b:6b:3c:7f:34:ae:be:5f:c2:c8:14:dd:b2:
                    08:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:05:5F:00:5B:D6:EC:0F:D8:81:5B:AD:70:77:45:72:6C:69:67:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6e41da6-4ba4-3acb-a5cd-e481384d9dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:e3:75:8d:50:88:06:30:cb:80:78:f7:0c:b3:24:06:26:ec:
         a8:d7:8e:2b:62:84:cd:42:c5:30:ec:c7:b1:ec:ad:8a:4e:4d:
         d0:58:c6:e6:19:ac:0c:21:6c:ba:a5:3e:24:64:35:fb:a0:bc:
         c7:3c:99:b6:32:02:bd:51:41:f1:c2:2e:60:7e:ae:e6:b2:22:
         4c:61:62:02:25:6d:7d:c0:c9:c2:49:61:7f:c1:76:67:11:96:
         ae:89:ee:07:40:7c:1e:23:b4:7d:fc:5d:72:df:89:4e:9d:65:
         de:da:e3:c0:72:01:b2:53:eb:80:90:de:c8:17:ed:7e:3e:12:
         f9:0d:b3:1c:f5:a4:d3:a6:81:15:8e:c3:ce:79:7c:48:ca:74:
         fd:17:f2:58:c1:62:e4:e2:ca:0c:f5:4a:9a:df:60:e1:6b:9c:
         3c:3b:0a:ac:7a:3e:0a:c1:38:6f:db:55:0d:5f:90:b0:d1:0e:
         02:70:c7:e3:a4:b7:47:ea:f1:18:16:b2:82:cb:ad:e8:f5:15:
         1e:b8:d7:38:91:e4:f9:53:3d:f6:c6:bc:56:58:b9:70:21:de:
         a1:9f:ba:ff:93:9c:c6:3c:8d:fb:8b:08:ab:22:80:c6:b7:80:
         4a:15:2c:22:a0:2b:a7:75:c0:21:49:20:a3:c3:84:61:8c:b5:
         62:2e:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:19 2026 by rpki-client