Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c7d96a2-4b5a-399e-8354-6371120c1b0c.roa
File:                     4c7d96a2-4b5a-399e-8354-6371120c1b0c.roa (raw, json)
Hash identifier:          bQXdYySP9Vf/Z1t7xGFdgH+TNdp3WKrDqUGmeAZ5FE0=
Subject key identifier:   A5:78:56:E2:56:ED:B3:95:AA:B4:BF:EB:49:C3:19:EA:74:DC:3A:72
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFC32965BAB572FC7CBD40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c7d96a2-4b5a-399e-8354-6371120c1b0c.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.104.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:c3:29:65:ba:b5:72:fc:7c:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=45349984-3b30-4242-a6e6-3d537a8faf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:e7:3c:f2:f1:73:63:a6:1d:d6:56:fb:01:
                    fd:68:2d:c4:4e:e5:fe:30:49:46:bd:25:3c:77:d6:
                    d7:a0:ce:e4:97:a9:71:f6:40:75:c4:c9:7f:55:f4:
                    cf:18:18:c5:68:72:9c:41:13:2c:8c:42:36:d6:0d:
                    ad:1d:68:72:37:97:48:38:9c:cc:cf:7e:89:7e:1b:
                    0a:e3:d6:63:49:28:db:cd:2a:bd:ac:31:e4:b0:57:
                    2a:94:61:65:6c:90:76:9f:22:cb:18:e8:03:c7:9a:
                    33:c4:dc:40:8a:29:4c:57:11:db:97:2f:aa:1e:29:
                    f2:e6:5b:cc:83:ea:fb:fa:4b:cd:12:ed:24:35:66:
                    e7:d8:91:ef:d0:29:2d:45:06:ee:cf:57:86:ff:51:
                    ea:c9:52:31:e3:c6:5d:8a:01:4f:4d:e5:13:fc:63:
                    ba:fe:5d:4b:62:1b:cc:1d:83:65:09:1b:5a:b8:89:
                    3d:cd:54:0b:53:5c:31:ea:32:48:0d:2c:47:3e:fa:
                    c3:f7:37:aa:8d:a2:51:11:13:0e:4d:e8:72:6f:05:
                    da:80:76:96:eb:d8:f7:1a:f9:ed:7d:27:2e:a3:16:
                    c6:57:70:42:52:ee:cb:ae:c4:90:3f:b1:ad:6d:8f:
                    7e:aa:8f:03:5d:06:13:20:81:d8:c8:a8:87:38:30:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:78:56:E2:56:ED:B3:95:AA:B4:BF:EB:49:C3:19:EA:74:DC:3A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c7d96a2-4b5a-399e-8354-6371120c1b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:f8:bc:ce:02:cb:67:31:ea:da:51:9e:52:f8:84:7d:37:
         20:9e:dc:6c:25:3b:99:12:db:1a:2e:4c:7a:68:9a:99:6b:a0:
         8e:b7:7d:5b:78:25:14:ed:0a:0a:06:37:99:6b:44:54:9c:05:
         2e:c0:21:fb:f9:77:e5:6a:a7:cb:97:4b:e9:b4:da:7c:5c:f9:
         82:ae:17:da:3f:5d:8c:1d:4d:cb:eb:0e:11:be:3c:06:13:78:
         21:7c:7d:d9:d9:72:7b:ca:cb:8d:4e:ab:71:28:ac:b2:cf:62:
         72:9b:b8:4b:7d:98:08:90:95:17:17:b2:97:fe:cc:32:81:63:
         bc:c0:8f:0f:a2:70:21:77:ce:1d:47:aa:66:a3:43:6e:51:d6:
         d4:c5:3d:83:9f:05:23:49:32:42:dc:90:f0:58:c5:6c:9b:89:
         2c:53:f3:f1:59:98:03:00:fd:ca:0a:19:8d:45:d8:7a:e9:ad:
         a6:c3:35:94:4b:1c:a8:d8:15:39:81:4b:d5:e5:83:14:c5:65:
         3a:05:b8:5d:2c:47:f8:cf:e6:05:88:1a:c0:3c:40:05:8e:0b:
         46:62:e3:44:79:c6:db:0f:07:94:83:f1:0b:1c:f4:72:8b:7c:
         cd:ad:ff:f3:29:ea:02:07:4c:79:16:ab:f8:c5:a1:28:2d:19:
         be:4d:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:16:52 2026 by rpki-client