Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a919caf-b15a-3e42-ab82-c9edb5f4faff.roa
File:                     4a919caf-b15a-3e42-ab82-c9edb5f4faff.roa (raw, json)
Hash identifier:          XMvLjiLFkuRLRTiD5Ejs9YLxRpyo+AYAPXda7zVDQZ8=
Subject key identifier:   CF:8E:01:1A:04:18:68:26:88:89:10:96:05:49:C4:D1:D1:8F:B7:C3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFDBD45D33D3E149CB6A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a919caf-b15a-3e42-ab82-c9edb5f4faff.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:db:d4:5d:33:d3:e1:49:cb:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=70796ab7-66e8-43a2-a1c7-d42204674b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:3e:bc:51:55:ba:d8:06:85:fc:40:b8:50:
                    e8:05:c5:b6:5d:d8:21:11:52:3a:e5:ed:20:aa:13:
                    ef:05:06:b8:30:04:0d:3d:e7:98:a7:14:ce:70:41:
                    ee:db:4a:f9:1c:67:dc:1c:52:5a:c6:86:84:81:ff:
                    76:48:29:fc:54:70:c9:91:1d:4e:30:7c:42:e0:07:
                    19:f9:10:84:a6:f8:71:cd:4a:89:0e:99:c1:cd:79:
                    01:6f:76:e1:f2:0b:ea:73:56:4b:69:63:de:a2:7b:
                    0f:e9:f9:ff:30:23:b1:f6:ad:db:5f:ee:ae:e2:2a:
                    ae:d9:4b:56:b7:6a:14:16:45:cb:98:9a:ed:c0:3a:
                    5b:6d:7d:a1:12:ce:1b:b3:bb:4b:79:c3:9f:b9:50:
                    96:f5:9f:38:7a:4f:40:f8:1f:da:36:17:7d:6c:e9:
                    fd:f9:aa:79:de:ce:8c:11:77:51:39:19:aa:b2:df:
                    a9:f9:e2:42:9e:e8:71:32:ba:9c:48:6b:db:0e:f4:
                    71:45:52:b2:b5:ae:b0:b8:87:28:93:e2:13:90:cc:
                    82:a3:5a:dd:2d:0c:25:74:3f:86:7c:cf:49:20:59:
                    33:c7:c7:64:63:c4:80:0b:88:a3:16:0e:5b:10:86:
                    2c:74:24:b3:35:1d:d8:5b:56:65:b7:d4:d7:bb:65:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:01:1A:04:18:68:26:88:89:10:96:05:49:C4:D1:D1:8F:B7:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a919caf-b15a-3e42-ab82-c9edb5f4faff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:2c:1b:fe:1e:5e:b0:df:61:13:12:d9:ef:56:3a:1c:ca:
         2d:81:02:f6:73:5e:78:44:25:11:9a:e3:fa:f3:46:2f:64:27:
         5c:da:bd:7a:2c:84:c1:2a:6d:b5:90:34:f4:60:02:0f:8f:66:
         1b:ce:ea:d0:b7:14:0d:44:d3:60:19:c9:f4:f2:d9:b3:c2:e0:
         a7:12:ff:98:69:88:02:33:a5:31:92:96:e1:d3:d9:9b:94:0d:
         92:5d:60:2f:e8:9f:62:83:a8:3b:dc:0f:07:26:97:61:db:41:
         ed:72:5a:6f:21:9b:f4:89:a3:9e:d9:7b:8b:e7:4a:a7:8b:cd:
         c4:0d:a1:11:31:72:01:4f:7f:35:96:db:b3:62:82:05:8e:33:
         02:8c:33:c0:76:d3:84:47:bd:6e:65:4e:a5:2b:83:e4:6a:64:
         8f:75:4f:10:55:60:95:8f:2f:b6:cd:bf:c5:28:79:c7:d7:1c:
         88:0f:aa:7d:28:49:09:ae:b8:da:82:7b:f7:b2:7c:57:85:7a:
         e3:78:32:5f:a3:a0:4a:c6:8d:4b:66:d2:d7:42:4a:ee:99:81:
         a4:cf:39:ca:06:d0:4f:77:74:0d:32:7b:36:d8:6f:b9:93:dc:
         a1:c6:97:ca:39:41:08:5a:d5:f4:6a:73:21:68:c3:3f:3b:8e:
         df:eb:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:41 2026 by rpki-client