Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecd51dba-c0ae-3b9d-ba96-7507829bbdd9.roa
File:                     ecd51dba-c0ae-3b9d-ba96-7507829bbdd9.roa (raw, json)
Hash identifier:          ZXJKIXaOHAbkvtG/UrJv4EHu32yworwmCO15ay0GuNw=
Subject key identifier:   66:46:A5:6D:CC:25:39:A2:44:69:00:D1:BB:B6:24:14:78:95:C4:A4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E070B77550F864144755E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecd51dba-c0ae-3b9d-ba96-7507829bbdd9.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:70:b7:75:50:f8:64:14:47:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=9e83f712-6fc2-48d6-82a7-1b138a14b625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:e9:39:36:c8:ca:5b:b5:08:11:6a:a6:9e:
                    b9:69:76:ca:96:e9:14:22:c6:41:c2:dc:20:53:c3:
                    6d:9b:26:0b:78:d6:ac:2e:c5:e2:7e:2c:02:94:77:
                    66:88:70:b4:c1:1f:c2:85:7e:c2:0d:b7:10:1b:78:
                    1c:75:b2:01:6a:39:e2:8d:b8:38:bb:99:bc:7a:d0:
                    84:82:ca:c4:1a:d8:52:7c:1d:62:e0:ff:7e:85:33:
                    98:f5:bb:99:77:ff:c5:4d:0a:4a:47:2a:a1:cd:86:
                    94:e4:94:3f:39:dc:64:0d:ac:ec:8b:90:d4:f4:24:
                    e3:51:26:f4:6b:4e:f0:3b:d9:d9:11:da:58:ae:df:
                    98:27:26:9c:58:58:70:e3:96:61:c5:4c:5c:dc:fc:
                    eb:73:11:59:d5:41:96:e5:d3:d0:26:1a:ce:73:0e:
                    9f:26:34:72:db:2e:f2:73:dd:e3:af:3b:36:57:9b:
                    3b:60:92:e0:94:65:72:5a:bc:23:5a:f1:c0:39:c1:
                    1c:b8:12:86:81:2a:09:69:f1:04:03:45:6f:3f:3a:
                    b9:f3:2d:66:3b:f2:85:e5:c5:25:ab:33:83:e2:5d:
                    ac:62:6a:ad:c5:aa:0b:6d:84:4f:ce:3c:89:5b:d8:
                    3b:28:6c:76:16:a1:a4:04:14:69:36:eb:4d:d9:5c:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:46:A5:6D:CC:25:39:A2:44:69:00:D1:BB:B6:24:14:78:95:C4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecd51dba-c0ae-3b9d-ba96-7507829bbdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:86:73:47:82:60:e7:69:8b:cc:27:c4:6d:ba:ff:a1:c7:28:
         6c:39:f9:24:d6:c5:6f:13:61:69:4a:6b:8b:8f:11:e3:fe:29:
         7c:12:45:29:7d:86:85:41:b0:69:d9:e0:8f:c0:ad:30:57:ff:
         de:1e:4e:80:d8:11:0c:c1:12:07:0b:fd:5f:9d:7b:f3:ee:fc:
         13:7a:c3:91:d4:3b:5a:64:4f:ef:b9:b4:1e:ed:7d:9e:ab:2a:
         9a:f3:ff:f2:ac:d4:ae:05:c4:21:62:a3:e3:a1:f1:09:e5:f5:
         e7:3f:7b:36:9e:c2:18:83:27:77:36:fc:da:86:0b:bd:ed:9c:
         fb:b5:7e:45:75:fa:c1:24:eb:a4:13:f7:47:f2:0d:07:b8:66:
         a4:ee:b5:10:d6:9d:be:12:04:4c:a9:b2:ec:4b:82:11:7e:6b:
         03:ed:4c:a8:4b:c5:6e:d7:6a:9c:06:01:bd:38:f1:e6:28:06:
         6e:c0:0b:ed:67:22:a9:d6:4a:91:24:96:70:74:ca:1d:4e:51:
         a0:50:ca:4e:50:fd:10:41:75:f1:ab:79:d1:6e:3e:ee:ec:41:
         9c:ab:96:8a:b6:ce:84:c9:b9:32:b9:7a:ad:89:69:9c:92:f8:
         83:8d:20:66:3a:e4:3f:5c:07:7c:d3:5f:3d:ca:10:01:38:62:
         f0:ad:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:54 2026 by rpki-client