Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61da68af-72b7-38b8-b2fd-899b36a0e29b.roa
File:                     61da68af-72b7-38b8-b2fd-899b36a0e29b.roa (raw, json)
Hash identifier:          tBPRWMWY0ocx2da9Z2g0mQdEQ18JMl5eTCXPovyVtC4=
Subject key identifier:   63:BE:9C:6D:E6:B4:88:77:69:5A:CE:30:BA:01:4E:AC:F7:E4:D5:8D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79DAD514494B88033294CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61da68af-72b7-38b8-b2fd-899b36a0e29b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.105.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:ad:51:44:94:b8:80:33:29:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=04ebb3d1-4690-4e16-bc4e-2bfa6ef63852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:82:01:2e:a7:e2:56:ad:c3:b7:63:32:f8:
                    aa:8d:29:41:67:40:23:df:46:c8:e4:90:42:04:50:
                    de:97:15:8a:95:8b:6e:2e:cb:1b:31:f2:62:56:65:
                    db:cb:34:23:89:a8:8c:16:cb:e4:ab:48:c2:9f:9b:
                    d4:43:fb:e4:f0:83:56:64:d5:4b:ba:bc:79:90:0e:
                    b6:89:26:a0:13:cd:57:aa:ed:94:53:f9:09:62:6c:
                    51:7f:dc:a5:61:52:15:54:67:bc:4e:c5:b4:44:e6:
                    5a:b6:b2:b0:dd:d0:02:6c:7a:ad:95:b9:7c:8a:68:
                    d0:55:8f:cf:84:a6:6a:44:94:52:f8:78:53:4e:a8:
                    4f:d2:25:f5:2e:83:eb:4d:14:cf:6f:9e:30:5e:fd:
                    27:f4:77:40:15:fd:57:2f:ad:32:b8:24:d1:2a:b0:
                    d1:cd:78:34:b0:23:f6:e4:7b:a3:94:dd:79:1a:1a:
                    10:17:4c:4e:c4:1d:68:b0:f8:ab:45:ea:cc:89:b5:
                    3f:94:e5:b2:9e:b1:52:af:6d:c9:68:b1:25:44:47:
                    a2:59:c8:71:6a:35:5e:62:69:df:d6:6b:16:80:40:
                    95:fa:72:7a:64:f1:39:1c:b0:db:dd:de:19:5c:54:
                    14:f6:46:42:41:ce:26:e5:f6:4c:d3:68:e5:d7:f5:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BE:9C:6D:E6:B4:88:77:69:5A:CE:30:BA:01:4E:AC:F7:E4:D5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61da68af-72b7-38b8-b2fd-899b36a0e29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:73:c3:4c:58:e7:b5:33:1a:1d:ac:41:c4:8e:5c:dc:36:a0:
         28:da:85:0b:36:6a:5c:26:43:c1:d2:1b:cf:a2:e3:b4:47:f4:
         23:08:4b:d8:c6:a5:db:8a:cc:e0:6d:8d:ed:19:74:49:c1:77:
         a8:33:28:eb:d5:64:5c:3c:05:57:79:99:0a:0a:ab:c2:c3:3b:
         10:e8:ab:08:b9:37:48:9c:7e:8d:28:15:b6:db:1b:73:a8:62:
         e4:c2:72:4d:bd:f5:8d:17:08:3e:4b:2a:26:14:54:5a:72:6c:
         98:2d:cc:79:c1:34:be:cf:f2:c1:56:8e:93:42:11:4f:e9:1a:
         42:c0:46:98:0a:2a:4e:05:f6:89:e3:df:6d:c0:c3:c7:0d:62:
         58:65:51:b2:21:6e:40:b0:55:cc:91:3b:ea:69:7a:0f:1f:75:
         5f:28:db:4d:27:27:67:f1:3e:df:14:0c:64:13:38:7a:05:d0:
         d6:d0:c9:29:9b:a2:cc:7e:9a:78:90:b2:b5:08:88:2e:21:ca:
         1b:1d:3b:2b:6f:52:77:db:b1:eb:9c:5c:10:7c:87:97:e3:e6:
         fc:3a:d3:8e:fe:43:2f:2c:31:f1:2a:a6:84:49:1b:79:97:19:
         59:56:07:1a:a9:45:ca:e6:3f:72:a1:d1:f8:0b:87:41:eb:06:
         4f:00:cd:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nna1RRJS4gDMpTMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDRlYmIzZDEtNDY5MC00ZTE2LWJjNGUtMmJmYTZlZjYzODUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGqCAS6n4latw7djMviqjSlBZ0Aj30bI5JBC
BFDelxWKlYtuLssbMfJiVmXbyzQjiaiMFsvkq0jCn5vUQ/vk8INWZNVLurx5kA62
iSagE81Xqu2UU/kJYmxRf9ylYVIVVGe8TsW0ROZatrKw3dACbHqtlbl8imjQVY/P
hKZqRJRS+HhTTqhP0iX1LoPrTRTPb54wXv0n9HdAFf1XL60yuCTRKrDRzXg0sCP2
5HujlN15GhoQF0xOxB1osPirRerMibU/lOWynrFSr23JaLElREeiWchxajVeYmnf
1msWgECV+nJ6ZPE5HLDb3d4ZXFQU9kZCQc4m5fZM02jl1/XCawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGO+nG3mtIh3aVrOMLoBTqz35NWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjFkYTY4YWYtNzJiNy0z
OGI4LWIyZmQtODk5YjM2YTBlMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2mLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxzw0xY57UzGh2sQcSOXNw2oCjahQs2alwmQ8HSG8+i47RH9CMIS9jG
pduKzOBtje0ZdEnBd6gzKOvVZFw8BVd5mQoKq8LDOxDoqwi5N0icfo0oFbbbG3Oo
YuTCck299Y0XCD5LKiYUVFpybJgtzHnBNL7P8sFWjpNCEU/pGkLARpgKKk4F9onj
323Aw8cNYlhlUbIhbkCwVcyRO+ppeg8fdV8o200nJ2fxPt8UDGQTOHoF0NbQySmb
osx+mniQsrUIiC4hyhsdOytvUnfbseucXBB8h5fj5vw6047+Qy8sMfEqpoRJG3mX
GVlWBxqpRcrmP3Kh0fgLh0HrBk8AzS8=
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:01:08 2026 by rpki-client