Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23af937a-f7c2-3a21-8c1d-a3fb4f195732.roa
File:                     23af937a-f7c2-3a21-8c1d-a3fb4f195732.roa (raw, json)
Hash identifier:          D797hvKjIpf/tExqZ04em/eeOUs9WRYEOiGgtrnB6jA=
Subject key identifier:   1B:29:AC:49:4C:D0:9C:44:E1:59:6B:30:F5:0A:B9:85:E6:D5:AB:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B70615AE46B7565FAB7D0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23af937a-f7c2-3a21-8c1d-a3fb4f195732.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.104.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:70:61:5a:e4:6b:75:65:fa:b7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=914fef42-4e06-40f4-b2db-29fd9c809246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:58:b1:78:4c:18:b5:34:28:85:b1:1e:51:
                    1d:80:ca:f4:92:91:11:cb:83:d3:81:f5:b2:8a:52:
                    b2:e0:07:fd:05:ab:12:8f:4e:ba:79:2e:1e:7e:14:
                    3c:65:26:d4:ee:d8:de:6d:c6:68:33:4f:39:92:ba:
                    22:50:57:43:df:5a:1d:e1:6f:ad:28:e7:a4:a8:72:
                    3a:2c:5a:16:c4:16:a2:99:8a:8c:88:df:e4:28:31:
                    3f:18:de:84:65:d6:85:2c:22:ca:ec:6d:6c:55:0b:
                    8e:0e:9c:82:11:38:f9:66:88:61:d0:d6:43:8d:33:
                    5b:26:47:48:78:64:c1:0c:95:11:99:79:bf:88:c6:
                    4f:ae:6c:a2:ab:d5:05:9f:3b:30:08:b3:1c:44:c9:
                    7b:73:d5:dd:7b:14:05:81:07:ea:c9:fa:51:59:70:
                    2b:b9:09:8d:ad:cc:9c:bc:f4:b4:f3:9d:5e:bc:86:
                    dc:32:d3:81:3c:51:50:4c:1c:e6:ee:00:39:7b:ae:
                    83:a3:28:1a:56:43:87:1e:6d:77:25:aa:65:d9:0f:
                    60:93:eb:47:8b:c5:a6:d3:30:f0:60:2f:b7:d0:01:
                    9e:29:ff:8e:aa:03:0b:ab:bd:76:b8:e1:81:c4:d1:
                    75:55:a3:88:c1:d0:51:06:8f:11:9c:d9:70:67:21:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:29:AC:49:4C:D0:9C:44:E1:59:6B:30:F5:0A:B9:85:E6:D5:AB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23af937a-f7c2-3a21-8c1d-a3fb4f195732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:3f:96:4d:7e:85:63:91:54:e2:d9:0c:2a:e2:b2:a6:d4:37:
         f7:2c:59:87:5b:42:9f:f2:46:64:93:5f:ca:26:a1:2f:4d:95:
         5e:aa:b8:33:36:a9:12:1c:b8:fb:1f:78:cb:04:54:a4:0b:b2:
         6e:df:50:8b:93:3d:6c:7a:ab:32:64:38:e0:15:50:65:d0:3e:
         6c:8f:de:33:ce:c4:a2:f9:45:0d:25:69:ca:4b:87:f0:1d:4f:
         33:3c:8d:e0:7c:0c:39:e5:df:b7:f1:04:1f:16:46:df:32:0a:
         d6:9b:e7:56:a7:19:d6:c3:1f:7e:66:1f:3f:87:a4:cd:63:7f:
         a9:45:f2:45:56:47:d2:87:bf:dc:af:98:82:c0:92:f2:df:40:
         22:74:8d:37:19:a1:7a:ca:a5:ad:ce:a7:d7:3a:b7:38:bf:9f:
         77:8b:90:55:ac:32:d0:a2:dd:e3:15:91:0c:89:90:32:50:d5:
         cf:1a:61:eb:5e:f1:b9:1a:6c:90:02:24:bb:91:55:d2:2f:3b:
         91:ad:2a:53:38:fd:37:b7:07:64:d3:c2:58:68:14:d4:ca:e8:
         86:30:4f:bd:95:2f:57:34:8f:53:a3:94:34:4c:86:d5:23:8f:
         b3:87:20:fd:60:34:a6:fa:fe:86:98:f2:66:e2:f2:3f:e5:ad:
         c7:18:8f:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm3BhWuRrdWX6t9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
OTE0ZmVmNDItNGUwNi00MGY0LWIyZGItMjlmZDljODA5MjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwtYsXhMGLU0KIWxHlEdgMr0kpERy4PTgfWy
ilKy4Af9BasSj066eS4efhQ8ZSbU7tjebcZoM085kroiUFdD31od4W+tKOekqHI6
LFoWxBaimYqMiN/kKDE/GN6EZdaFLCLK7G1sVQuODpyCETj5Zohh0NZDjTNbJkdI
eGTBDJURmXm/iMZPrmyiq9UFnzswCLMcRMl7c9XdexQFgQfqyfpRWXAruQmNrcyc
vPS0851evIbcMtOBPFFQTBzm7gA5e66DoygaVkOHHm13Japl2Q9gk+tHi8Wm0zDw
YC+30AGeKf+OqgMLq712uOGBxNF1VaOIwdBRBo8RnNlwZyERmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsprElM0JxE4VlrMPUKuYXm1aucMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjNhZjkzN2EtZjdjMi0z
YTIxLThjMWQtYTNmYjRmMTk1NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2i+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALE/lk1+hWORVOLZDCrisqbUN/csWYdbQp/yRmSTX8omoS9NlV6quDM2
qRIcuPsfeMsEVKQLsm7fUIuTPWx6qzJkOOAVUGXQPmyP3jPOxKL5RQ0lacpLh/Ad
TzM8jeB8DDnl37fxBB8WRt8yCtab51anGdbDH35mHz+HpM1jf6lF8kVWR9KHv9yv
mILAkvLfQCJ0jTcZoXrKpa3Op9c6tzi/n3eLkFWsMtCi3eMVkQyJkDJQ1c8aYete
8bkabJACJLuRVdIvO5GtKlM4/Te3B2TTwlhoFNTK6IYwT72VL1c0j1OjlDRMhtUj
j7OHIP1gNKb6/oaY8mbi8j/lrccYjxU=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:26:37 2026 by rpki-client