Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a85e61d-9718-3184-9abb-b4c011d189de.roa
File:                     2a85e61d-9718-3184-9abb-b4c011d189de.roa (raw, json)
Hash identifier:          DYn6slIFTB1OLEPFacc0jIS5AADn869nYGwLmzVwYR4=
Subject key identifier:   33:86:29:3D:2F:97:CC:66:EA:07:A6:00:09:43:90:52:25:2A:60:96
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BF0D5C04AABE75DCC9DB0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a85e61d-9718-3184-9abb-b4c011d189de.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.105.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:f0:d5:c0:4a:ab:e7:5d:cc:9d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f3bbe377-df46-4f52-bbbf-2d9525f57782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:13:bb:36:19:77:d6:d5:e0:7b:9a:8b:43:
                    0c:f4:51:d9:14:ee:40:8f:c5:fd:0a:47:f2:7b:82:
                    03:d2:60:3a:40:6b:bc:4b:bd:2d:ef:5f:83:06:d3:
                    d8:1a:43:74:dc:f4:66:87:19:cf:19:a6:68:a3:4b:
                    8b:13:a7:7b:a6:88:e4:07:b9:67:50:76:e3:77:85:
                    74:25:15:96:ac:da:f2:bb:bb:a8:35:10:d0:9e:e3:
                    f0:87:06:5a:0e:20:f4:d1:3a:b1:bb:de:bf:c0:6d:
                    26:ce:06:7a:69:4f:93:7c:ef:87:d9:57:75:6a:24:
                    36:b4:ad:35:4b:24:8f:bc:17:ba:6b:70:9e:f4:cf:
                    dc:fc:d6:b2:73:08:c8:e8:96:bf:9e:5c:0e:80:41:
                    25:ca:92:c3:34:86:a7:a5:0c:8d:a4:48:e6:e7:c9:
                    ba:a6:f2:40:e6:ea:4a:bc:02:31:79:16:25:aa:b3:
                    70:ab:69:47:b2:62:91:3f:96:55:00:55:7d:ec:fb:
                    0f:9f:1d:8a:37:3f:a6:79:11:e7:62:a6:21:55:e5:
                    c5:70:72:49:f0:c8:f5:4e:fd:54:83:34:b1:6b:a1:
                    d1:ff:6f:45:44:5c:b4:9a:bf:ee:bb:21:cf:11:4d:
                    94:af:7e:9d:cb:ac:7f:20:f0:2d:e9:1d:ea:bc:7a:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:29:3D:2F:97:CC:66:EA:07:A6:00:09:43:90:52:25:2A:60:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a85e61d-9718-3184-9abb-b4c011d189de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5f:7d:36:f6:d1:2a:71:65:fc:92:aa:c9:b8:22:05:9c:1d:
         86:66:af:0d:e1:fd:ac:1a:59:7c:97:34:ec:8c:9e:de:ff:af:
         33:8e:7e:e1:04:3a:a8:26:45:e3:38:71:c1:50:80:87:28:ab:
         b2:47:f5:ce:0f:1d:da:16:88:22:f1:54:7b:56:21:dc:1c:ba:
         89:a6:38:c2:20:42:a0:46:b8:62:91:07:e0:f5:62:c1:fb:c5:
         20:47:31:04:02:20:b5:eb:fb:7f:57:32:52:ee:17:8d:16:97:
         7e:29:3b:d5:a3:b9:02:79:19:5e:b9:9f:11:60:3f:1c:7d:f5:
         ff:54:ff:7f:98:7d:01:b8:aa:bd:c4:83:a1:ea:43:de:7b:6f:
         6d:b9:f1:4f:9a:27:65:e9:9e:c6:d4:7f:ce:56:eb:c1:21:b8:
         2f:5a:9d:ee:29:fe:be:95:54:9b:18:93:47:84:00:53:78:de:
         6c:fc:70:b0:a4:a9:0c:72:3e:a3:b7:f8:c5:bf:79:19:e5:2b:
         62:fc:b9:a0:ef:08:37:93:d0:c6:14:53:67:3e:ee:8c:4c:dc:
         1c:4e:ed:54:ef:3e:f3:cb:ef:88:36:1d:f1:d7:68:39:41:a1:
         d6:0f:64:28:ee:63:51:66:e1:10:86:91:20:c0:56:cd:7b:96:
         a3:08:63:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:32 2026 by rpki-client