Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa
File:                     f4915199-1761-3ed4-9601-4c4aa26b25da.roa (raw, json)
Hash identifier:          heiChcA1ElLwJU4ptPpAtBnqNeeUAQHof3i+UggF6JA=
Subject key identifier:   10:22:86:68:DA:B4:EA:60:00:83:63:1E:6B:88:99:2D:34:C1:D5:B0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B361C99692AA9A171A4C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.106.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:36:1c:99:69:2a:a9:a1:71:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9b657792-cae0-433c-a80c-f48e3c90e26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:07:c3:fb:ca:5e:59:26:b9:c1:26:f7:30:
                    38:37:5e:96:88:7b:36:a9:14:ed:dd:6a:34:7c:af:
                    38:b3:85:7c:4f:8e:77:6e:73:16:3a:0f:d1:f0:03:
                    21:1a:43:5e:36:02:51:f3:5d:77:6d:ed:00:79:2d:
                    c2:70:37:4f:00:45:ac:bf:3a:20:4b:cb:89:19:43:
                    9b:0e:c2:4c:c3:f7:02:cc:28:ba:be:7a:0e:d2:82:
                    ce:26:2c:6e:3f:e6:71:d8:4c:86:0a:f1:0c:71:20:
                    1a:80:3f:d0:8b:56:ae:67:c0:8d:1d:fd:99:23:d5:
                    5e:a2:5d:8c:62:66:00:86:12:10:a1:07:1c:14:5d:
                    0e:0e:d1:f6:e4:30:86:9f:bf:0a:c2:b5:7c:fd:e5:
                    a3:14:0a:4b:de:f6:7a:88:3b:d0:06:09:62:26:f1:
                    3e:4d:66:6b:75:5e:8a:de:f3:59:f4:5a:b8:05:07:
                    21:9e:95:02:38:31:4c:73:a2:9d:b2:73:bb:8a:2e:
                    b0:48:8f:ee:e7:fd:69:3a:22:03:3a:b9:1e:c6:5f:
                    89:b8:b7:1f:20:6e:32:cc:d6:2e:ca:b9:d0:76:79:
                    6e:fd:b1:f3:d7:47:f2:82:e7:ec:d7:25:5c:09:ff:
                    f8:af:01:72:7d:97:cd:d9:91:72:9b:48:e7:c1:0d:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:22:86:68:DA:B4:EA:60:00:83:63:1E:6B:88:99:2D:34:C1:D5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4915199-1761-3ed4-9601-4c4aa26b25da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:0a:61:34:be:2c:76:7b:67:f4:c5:60:b5:ff:8f:4e:62:
         e0:3d:1e:d4:92:1d:20:0f:85:f7:09:f1:8f:bb:4d:6b:8c:6b:
         ca:03:2b:2b:2c:57:3f:49:21:d9:ce:d4:95:0b:47:b6:ac:85:
         75:b9:ce:08:5d:76:7f:40:ac:39:f6:da:34:7e:f0:c0:bb:fb:
         0a:17:72:93:23:4f:b9:68:09:44:b7:bd:1c:93:a1:81:22:31:
         17:46:95:64:88:3e:26:e4:30:c3:42:c4:a7:f5:fb:c4:a4:df:
         06:a7:90:4b:ff:20:f6:87:ad:73:5a:22:ee:55:06:a8:f5:4a:
         14:d9:db:45:7a:0c:f5:55:19:a9:2e:e9:62:83:aa:21:3f:a6:
         21:31:b2:12:53:e4:41:b2:63:15:76:6a:dc:c1:c3:0c:f0:85:
         cf:1b:93:e3:01:5a:60:97:e8:73:71:8b:67:55:bb:9e:31:cd:
         3f:eb:10:96:ac:98:23:74:58:a7:28:64:c9:36:cd:30:c3:56:
         10:f8:cd:47:22:18:8e:2c:59:47:b1:91:26:8e:f7:af:e7:d2:
         3d:96:72:25:d4:5b:ff:c0:c1:c7:29:ff:bc:0f:3f:18:eb:8c:
         eb:99:a3:0f:3d:15:86:88:30:5f:4e:bb:48:83:70:2a:14:8a:
         fa:24:f2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:04:37 2026 by rpki-client