Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d05ad7c-53c4-362f-a22f-1eb78dacd122.roa
File:                     1d05ad7c-53c4-362f-a22f-1eb78dacd122.roa (raw, json)
Hash identifier:          JwUyiTFvq7JAMa4fIBIiwa17RoGs11uP86wABEiluuk=
Subject key identifier:   73:DE:B1:77:7F:E7:AF:52:29:13:1B:00:1A:74:83:33:49:75:9F:1E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D9D524485893D13666C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d05ad7c-53c4-362f-a22f-1eb78dacd122.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.104.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:9d:52:44:85:89:3d:13:66:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c077ed64-5951-4c50-8d6e-29f3ee18b300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:82:63:a8:1a:55:2a:e9:39:fc:db:fc:69:
                    c5:d6:ea:98:ca:f8:3c:d8:4e:8a:df:88:3c:88:c7:
                    76:b6:10:9d:cb:62:08:fc:20:e6:00:9f:76:33:8b:
                    8e:de:55:ec:7b:9c:67:d6:89:52:4e:16:c3:a3:59:
                    a2:23:b5:c4:1e:45:9d:ce:05:01:07:14:39:33:6b:
                    e6:d0:f3:48:b3:b3:af:6c:b7:05:25:cc:be:d7:2a:
                    3f:a4:1d:97:90:c6:ad:74:5e:d4:08:fd:1c:ce:29:
                    b3:ba:fb:14:f2:de:96:2f:07:bf:27:05:a0:8a:54:
                    02:77:05:5e:a5:fc:e6:a3:df:0a:37:b4:63:e7:84:
                    0a:57:f2:94:16:d4:83:c4:6f:64:3f:20:7e:45:ae:
                    ab:f7:b2:5b:f8:65:98:6e:cd:a1:95:41:46:4c:74:
                    fb:71:49:14:b7:6a:e6:b3:70:3f:72:ff:cf:85:1e:
                    fc:76:a5:52:48:ff:20:17:a0:11:31:84:0f:69:5a:
                    79:77:7d:f5:ef:15:45:f5:af:13:34:87:28:0c:46:
                    bf:06:e5:84:8d:ed:36:b7:4d:c8:02:c2:52:6b:4f:
                    78:4d:f0:04:b7:aa:44:94:c7:f1:f1:50:6c:05:69:
                    5a:c0:db:50:98:8a:ad:c8:ab:e9:9c:d0:f3:a3:b9:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DE:B1:77:7F:E7:AF:52:29:13:1B:00:1A:74:83:33:49:75:9F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d05ad7c-53c4-362f-a22f-1eb78dacd122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:c0:d6:94:df:36:08:f8:37:52:1b:16:bc:3b:b7:15:c3:
         f6:b9:cd:8c:55:e0:03:8f:94:2b:b3:29:47:dc:51:9c:fd:be:
         2a:1b:03:f8:cf:ba:eb:b5:21:ac:ff:ac:04:7f:43:b0:30:50:
         ad:dd:0a:6a:f3:06:0f:c3:e1:2d:a4:03:cd:33:c5:b7:14:8d:
         f9:aa:ba:58:3c:e3:a8:5e:b9:19:a6:5f:66:a3:32:a9:0f:1f:
         0a:34:0f:63:e5:2f:fe:16:8b:d2:16:5d:ec:e3:b1:63:81:8a:
         33:93:43:99:03:91:92:a9:eb:0e:52:6e:8a:62:f4:8f:f7:0a:
         92:df:aa:9b:d3:c5:86:fd:61:66:45:3b:45:1c:e9:40:1f:bb:
         a9:3f:3d:89:46:c3:aa:e1:30:af:2e:7c:c0:f9:09:3c:91:f1:
         67:1f:a8:4a:64:36:b1:44:1f:cf:43:1b:41:80:08:e2:b0:73:
         f3:1a:d0:f7:4b:c0:9c:36:35:89:9b:ec:1a:33:8c:99:62:b3:
         7a:02:ab:0b:b9:06:05:e5:83:07:ea:f6:2b:83:90:0c:f7:6a:
         16:c9:bb:58:20:fd:25:d4:77:74:0c:be:1f:6f:4e:24:17:69:
         89:46:d6:b7:ed:de:53:58:36:14:5a:c8:db:75:24:1d:b8:1f:
         8f:34:fd:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnZ1SRIWJPRNmbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzA3N2VkNjQtNTk1MS00YzUwLThkNmUtMjlmM2VlMThiMzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUWCY6gaVSrpOfzb/GnF1uqYyvg82E6K34g8
iMd2thCdy2II/CDmAJ92M4uO3lXse5xn1olSThbDo1miI7XEHkWdzgUBBxQ5M2vm
0PNIs7OvbLcFJcy+1yo/pB2XkMatdF7UCP0czimzuvsU8t6WLwe/JwWgilQCdwVe
pfzmo98KN7Rj54QKV/KUFtSDxG9kPyB+Ra6r97Jb+GWYbs2hlUFGTHT7cUkUt2rm
s3A/cv/PhR78dqVSSP8gF6ARMYQPaVp5d3317xVF9a8TNIcoDEa/BuWEje02t03I
AsJSa094TfAEt6pElMfx8VBsBWlawNtQmIqtyKvpnNDzo7kcdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPesXd/569SKRMbABp0gzNJdZ8eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWQwNWFkN2MtNTNjNC0z
NjJmLWEyMmYtMWViNzhkYWNkMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIzUwNaU3zYI+DdSGxa8O7cVw/a5zYxV4AOPlCuzKUfcUZz9viobA/jP
uuu1Iaz/rAR/Q7AwUK3dCmrzBg/D4S2kA80zxbcUjfmqulg846heuRmmX2ajMqkP
Hwo0D2PlL/4Wi9IWXezjsWOBijOTQ5kDkZKp6w5Sbopi9I/3CpLfqpvTxYb9YWZF
O0Uc6UAfu6k/PYlGw6rhMK8ufMD5CTyR8WcfqEpkNrFEH89DG0GACOKwc/Ma0PdL
wJw2NYmb7BozjJlis3oCqwu5BgXlgwfq9iuDkAz3ahbJu1gg/SXUd3QMvh9vTiQX
aYlG1rft3lNYNhRayNt1JB24H480/XY=
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:31:21 2026 by rpki-client