Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22425460-f371-3c34-9cc1-4b48a22816aa.roa
File:                     22425460-f371-3c34-9cc1-4b48a22816aa.roa (raw, json)
Hash identifier:          M5+JzMr9Z3K5jetWcQtQpTwWRxjrBzXoLoO0R1E/igo=
Subject key identifier:   EF:33:5C:67:C4:8D:21:E6:7D:A0:49:A7:05:3D:1B:F3:E1:03:24:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFC061A76090EDB3D03080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22425460-f371-3c34-9cc1-4b48a22816aa.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:c0:61:a7:60:90:ed:b3:d0:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=873d629a-8949-4c25-beda-2b08d89999b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:e4:3e:81:2f:c2:48:b1:d6:cf:d9:5b:8f:
                    ca:23:76:fc:b3:99:34:fb:08:95:64:9b:e0:8a:0f:
                    22:06:94:30:0e:3e:6d:bc:f9:3b:f4:f7:ba:b3:46:
                    23:fd:0a:a1:8d:b5:a5:51:b3:25:d3:a9:c3:f8:6c:
                    3d:a5:b2:3c:dc:bc:64:8f:80:ec:13:7f:a3:ce:24:
                    29:20:ad:87:46:37:06:e6:71:61:25:31:d4:5f:b7:
                    6e:bf:93:32:a9:16:86:72:c4:da:75:54:88:3c:a7:
                    e0:73:6e:51:26:c4:8a:83:7a:23:20:b6:fa:e7:53:
                    b7:c6:8c:4f:4c:f4:ea:04:1e:b0:b4:6c:cc:2d:24:
                    8d:2e:e0:b1:47:1d:f1:b1:29:49:27:80:1f:f8:9d:
                    d1:79:fe:db:e1:ce:e8:5e:e3:ee:21:01:66:d4:ce:
                    eb:07:98:b1:5a:9f:30:1f:d6:a5:99:b1:4a:63:f7:
                    82:29:c9:76:43:37:b3:7b:c5:2b:64:e6:6b:b7:f0:
                    4c:cd:dd:b2:da:72:75:69:10:a8:d3:3c:ae:61:d5:
                    c9:d9:6b:6e:af:65:30:17:f3:f0:04:f9:15:61:ed:
                    59:6d:1e:7d:7d:a8:8d:02:59:5a:cc:d5:2d:aa:15:
                    c7:19:ed:6a:93:dc:da:86:a7:10:c1:94:24:67:f2:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:33:5C:67:C4:8D:21:E6:7D:A0:49:A7:05:3D:1B:F3:E1:03:24:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22425460-f371-3c34-9cc1-4b48a22816aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:1e:9a:88:0f:ad:87:f9:b4:98:3e:b6:ca:67:23:5f:64:4a:
         61:d0:70:de:d5:13:56:44:1c:2d:4e:41:a8:e5:13:fc:7e:c9:
         f2:48:30:3e:1b:f8:e1:1d:f8:7b:13:d4:a4:00:60:de:4c:2d:
         61:93:8e:20:fc:c3:cf:2c:c9:b4:a7:bf:c3:3c:13:24:31:e0:
         3e:e8:54:21:9a:3c:89:a9:91:14:97:8a:c4:ac:0e:68:ee:24:
         7c:b5:ad:70:44:1d:11:24:d4:53:15:94:ba:91:24:66:96:f6:
         b0:db:bf:92:0b:13:58:3a:28:ff:73:8b:62:69:f3:6d:88:69:
         c0:97:8b:ed:5f:de:bb:02:59:62:16:c9:b2:0a:c1:b8:d1:55:
         73:e8:2b:39:e2:34:9a:ea:e9:3a:2c:b4:a2:59:66:2b:f8:f3:
         a6:5c:a9:39:4e:7f:9c:73:34:e0:95:3d:5b:df:d8:af:83:24:
         f7:63:f1:01:ad:3e:e3:17:b5:cb:3e:00:aa:3a:42:da:a2:22:
         bc:4a:ec:25:bc:6c:ca:d2:5b:64:7e:47:28:b8:bb:c3:62:6e:
         07:7e:91:f3:9e:60:73:51:3b:75:10:7b:2e:83:7f:4e:f4:cf:
         1b:3f:a1:91:e7:fe:79:2d:2c:9f:23:5d:bd:5f:5e:6e:17:a7:
         22:d1:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:32 2026 by rpki-client