Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffbd227e-3762-311a-99ac-ce76bdaab432.roa
File:                     ffbd227e-3762-311a-99ac-ce76bdaab432.roa (raw, json)
Hash identifier:          WOaLlhmy8uJMmpgQIWD/btKuTJBtgwpje4YhNdlyYwI=
Subject key identifier:   B6:92:1B:A7:04:9E:8D:D2:F9:C2:26:AA:4F:C2:2B:19:63:5B:25:2E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0707B52FD606E82CCA780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffbd227e-3762-311a-99ac-ce76bdaab432.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:70:7b:52:fd:60:6e:82:cc:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=706a172f-ab4b-42cb-a294-1f5cd63840a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:87:9b:bb:3b:b1:71:3f:0f:07:dc:f3:06:
                    fb:72:77:b3:35:2c:3b:9f:48:71:4a:a6:95:11:6c:
                    75:64:37:7c:dc:d8:43:9a:9e:9f:14:e1:fa:a0:f8:
                    db:4e:1f:c4:30:c0:0a:27:bb:99:e2:bd:55:17:56:
                    3f:88:ec:d5:e0:b7:88:42:9f:b6:62:c2:a8:a3:15:
                    0e:ba:6f:37:81:d7:55:03:b2:90:0d:ac:45:a4:9d:
                    a4:45:c3:c1:eb:2f:b0:02:1a:72:e1:35:d5:e9:97:
                    88:13:30:9f:2b:4c:fb:e2:17:8e:93:f0:0e:0b:d4:
                    1e:ce:ce:54:d2:bc:54:5c:0a:47:65:ef:e7:9d:56:
                    dd:62:a9:14:bc:b1:c5:9d:d7:b7:16:f3:79:52:f3:
                    ea:00:24:7e:6a:e3:ae:d4:e2:27:7d:01:b6:7a:8b:
                    50:9f:50:d1:03:04:44:75:1f:f3:0c:91:a8:61:00:
                    4d:aa:be:89:79:b4:c0:75:68:39:f7:d2:a3:d2:05:
                    17:9e:0f:02:30:bf:8e:12:50:35:e8:d4:1c:77:6e:
                    f1:78:dd:74:27:8a:d7:2c:17:b1:0f:aa:3c:0e:63:
                    30:cf:ee:1e:4c:6b:e3:c4:06:bd:73:88:79:f4:98:
                    52:1f:cf:39:c5:68:48:8e:e5:51:ac:99:3a:aa:47:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:92:1B:A7:04:9E:8D:D2:F9:C2:26:AA:4F:C2:2B:19:63:5B:25:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffbd227e-3762-311a-99ac-ce76bdaab432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f6:9c:b6:d0:3e:35:2a:a9:7d:be:b3:c7:5c:57:54:a6:09:
         c8:5f:49:79:50:c6:67:58:33:e4:75:19:91:2e:f3:e6:72:53:
         bb:7c:14:c0:f3:8a:ce:68:35:e2:2b:93:b2:cd:12:c6:92:4d:
         b2:72:0c:ce:6d:f8:3e:ce:7d:ab:42:0f:f4:57:c1:06:c4:cf:
         bb:b6:a2:be:52:f5:88:a8:50:d9:b8:ad:ca:05:16:33:a6:33:
         e2:8c:ec:e3:d7:3b:12:be:90:67:89:e5:28:3e:bd:6c:35:2b:
         cd:c4:2b:bb:53:fa:bb:b8:3c:16:56:90:9a:1e:39:18:d5:58:
         17:f5:35:0e:fd:ff:01:77:c9:e3:43:66:ba:18:0c:d2:1b:14:
         3a:45:1a:b2:74:54:63:45:40:1b:d5:9e:0e:56:04:34:0d:71:
         a8:9d:59:24:34:4e:d9:a2:dc:87:e9:b9:35:3a:53:5d:55:98:
         7e:66:60:c7:96:34:54:36:e6:33:4a:d1:68:ee:44:ae:7a:3b:
         e9:5d:09:4d:ce:22:e5:b5:0b:10:20:65:95:28:87:0c:a3:c3:
         08:48:b5:33:f1:58:68:19:72:84:2d:38:12:3d:05:85:2e:c7:
         3e:ee:fd:36:37:f8:8f:75:18:79:de:00:15:b2:2b:a1:d9:47:
         7e:54:f6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:10 2026 by rpki-client