Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96745a9f-50c1-3a00-854b-7942831512da.roa
File:                     96745a9f-50c1-3a00-854b-7942831512da.roa (raw, json)
Hash identifier:          hh6nEruuCCsDfvq6TwktFFn3ePPvYu43fTn/MzxBgyg=
Subject key identifier:   84:C9:ED:A3:14:F1:89:B4:C6:8F:C6:8F:51:FE:E4:D8:D1:14:FE:3B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BE820A7C2827F8D694B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96745a9f-50c1-3a00-854b-7942831512da.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.104.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:e8:20:a7:c2:82:7f:8d:69:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=51a52fc6-8a93-4266-8157-b4fb0f507809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:cf:d4:f9:3c:8c:11:2d:96:17:d8:34:b7:
                    d9:9d:a7:4c:92:0e:7a:07:f3:f0:d4:1e:99:1e:eb:
                    bf:4b:c7:b8:0e:38:0b:2a:77:36:07:86:df:d3:0c:
                    a9:2d:2b:59:51:71:b3:39:73:af:43:01:8e:33:61:
                    98:23:cc:8c:ef:94:a1:ab:a0:2b:c4:f8:7b:f8:17:
                    4c:3d:1a:a3:42:d9:e2:58:0a:ad:90:67:a9:ef:ac:
                    a0:ae:38:15:f0:64:99:75:f5:7c:c8:2a:96:e8:01:
                    be:ce:62:75:23:3e:53:ea:91:e9:c8:a8:86:91:6f:
                    88:da:2b:c0:cb:b0:d5:1c:95:51:60:1c:d3:0b:ed:
                    f9:0f:b8:eb:4d:e2:ff:ac:c6:44:20:5a:64:d6:7d:
                    d6:44:94:19:46:34:af:18:60:6c:c0:5c:1b:07:a9:
                    9a:ad:f9:df:87:7e:94:0e:4a:9d:74:58:dd:e8:c9:
                    7c:28:9a:a1:82:e7:cb:be:9e:60:2b:51:7d:9b:ce:
                    80:bd:8b:a8:a1:76:e9:94:90:92:41:8d:14:8a:54:
                    b2:4d:f9:b7:95:1e:b6:59:70:ef:6c:55:ff:5c:26:
                    f9:79:0f:01:a1:20:fd:3b:63:8e:02:f4:6b:78:34:
                    aa:1f:be:8b:dc:40:d4:88:a8:9f:63:5d:47:8b:2a:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C9:ED:A3:14:F1:89:B4:C6:8F:C6:8F:51:FE:E4:D8:D1:14:FE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96745a9f-50c1-3a00-854b-7942831512da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:65:32:11:76:2b:f0:bc:af:9d:4e:d6:ef:e8:d7:be:6a:
         0e:dc:0e:1c:2a:24:65:78:d3:19:30:da:c9:db:92:64:e7:06:
         5e:d7:e4:46:8b:4d:4f:82:97:fe:e4:9b:f3:22:26:b5:74:e4:
         e6:7f:48:22:b0:02:0c:f4:fd:1c:be:67:12:fd:0a:fa:c0:80:
         c9:b4:4d:aa:8d:39:90:e6:96:52:a0:a6:0d:5c:91:6e:b9:b0:
         b1:e9:d6:30:27:19:46:4f:5f:f7:6c:5c:5c:1f:f8:4f:e2:46:
         68:d0:91:c2:12:1f:1e:a0:19:51:95:31:8c:f4:84:c1:7c:8a:
         18:aa:03:67:8a:c4:fb:72:72:df:67:8b:4b:3e:e0:b0:bc:a0:
         6b:e4:aa:e5:80:79:5b:4c:7a:92:08:cf:5a:eb:15:58:d4:dd:
         7b:2e:98:08:78:3c:3a:d7:3e:15:84:8b:fb:cf:40:46:d4:83:
         45:e2:0b:fb:5e:6c:d5:ed:72:31:bf:44:87:78:37:7a:cb:8c:
         31:2c:34:9d:85:4e:5d:4a:63:21:2c:44:cc:3d:89:a8:0d:fd:
         fa:08:a9:61:a8:87:52:f2:09:8c:69:ee:8e:ec:3f:2b:3d:4f:
         7a:cc:bc:b6:5d:d3:9f:28:c6:db:e1:b2:ad:57:b7:d3:5b:50:
         d9:d9:54:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+ggp8KCf41pS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
NTFhNTJmYzYtOGE5My00MjY2LTgxNTctYjRmYjBmNTA3ODA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuPP1Pk8jBEtlhfYNLfZnadMkg56B/Pw1B6Z
Huu/S8e4DjgLKnc2B4bf0wypLStZUXGzOXOvQwGOM2GYI8yM75Shq6ArxPh7+BdM
PRqjQtniWAqtkGep76ygrjgV8GSZdfV8yCqW6AG+zmJ1Iz5T6pHpyKiGkW+I2ivA
y7DVHJVRYBzTC+35D7jrTeL/rMZEIFpk1n3WRJQZRjSvGGBswFwbB6marfnfh36U
DkqddFjd6Ml8KJqhgufLvp5gK1F9m86AvYuooXbplJCSQY0UilSyTfm3lR62WXDv
bFX/XCb5eQ8BoSD9O2OOAvRreDSqH76L3EDUiKifY11HiyoTYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITJ7aMU8Ym0xo/Gj1H+5NjRFP47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTY3NDVhOWYtNTBjMS0z
YTAwLTg1NGItNzk0MjgzMTUxMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2gIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADK5ZTIRdivwvK+dTtbv6Ne+ag7cDhwqJGV40xkw2snbkmTnBl7X5EaL
TU+Cl/7km/MiJrV05OZ/SCKwAgz0/Ry+ZxL9CvrAgMm0TaqNOZDmllKgpg1ckW65
sLHp1jAnGUZPX/dsXFwf+E/iRmjQkcISHx6gGVGVMYz0hMF8ihiqA2eKxPtyct9n
i0s+4LC8oGvkquWAeVtMepIIz1rrFVjU3XsumAh4PDrXPhWEi/vPQEbUg0XiC/te
bNXtcjG/RId4N3rLjDEsNJ2FTl1KYyEsRMw9iagN/foIqWGoh1LyCYxp7o7sPys9
T3rMvLZd058oxtvhsq1Xt9NbUNnZVMo=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:16 2026 by rpki-client