Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a85e61d-9718-3184-9abb-b4c011d189de.roa
File:                     2a85e61d-9718-3184-9abb-b4c011d189de.roa (raw, json)
Hash identifier:          gy9XGcg5ih86Wjpp5FNPHRTspNU1iUOK0UvxbJDEVHg=
Subject key identifier:   4A:71:AE:75:CD:A3:C8:58:EF:A1:43:D6:DB:9B:C6:C6:43:6B:5B:42
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F3DEFBCDDA04FBF409C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a85e61d-9718-3184-9abb-b4c011d189de.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.105.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:3d:ef:bc:dd:a0:4f:bf:40:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=65620bf5-5457-4daf-8311-a7f55c3d7de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:74:5d:ba:89:ba:5e:5c:26:9d:c2:7c:73:
                    73:1c:4d:48:41:c5:c5:96:e0:ae:35:32:aa:68:4f:
                    9e:fd:22:1d:18:4e:92:96:d5:b9:e8:c2:37:c3:e3:
                    9a:92:39:6c:c8:6a:89:73:2b:b1:75:c9:e2:da:a2:
                    85:ea:28:89:c0:c5:11:3f:06:6e:93:c9:b1:ea:c7:
                    b7:c8:3e:bf:11:c4:a6:1f:20:64:a3:13:fe:64:f9:
                    0e:b5:d7:ee:a3:7a:52:9d:2a:9d:78:f6:6a:23:df:
                    be:8d:c1:56:9d:9f:93:c1:73:3f:17:a7:d5:51:4d:
                    62:fe:f9:dd:a9:0b:b0:fd:c8:3a:85:99:37:2e:19:
                    2c:7b:b6:15:a0:67:1b:32:ad:51:cf:bf:b8:e7:96:
                    69:32:e5:a8:69:c7:bd:3c:61:85:86:79:19:2a:99:
                    3e:ff:df:eb:0b:93:93:37:e4:af:6e:8e:2d:88:af:
                    31:a1:34:84:a0:b9:8d:92:c4:36:17:13:1d:8d:64:
                    7b:8b:79:46:df:c9:be:a2:fb:bd:35:92:0f:59:c3:
                    dd:17:51:17:9f:05:e0:30:9f:5b:84:ee:a4:be:8b:
                    75:77:eb:20:dc:07:93:ec:23:a0:df:0c:42:23:42:
                    51:d3:1f:42:4c:90:52:7a:78:38:8b:f2:37:f3:d3:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:71:AE:75:CD:A3:C8:58:EF:A1:43:D6:DB:9B:C6:C6:43:6B:5B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a85e61d-9718-3184-9abb-b4c011d189de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:2c:19:0d:dd:d2:e3:97:c9:d1:ff:fb:bb:99:a7:4d:d6:a7:
         33:ed:b3:e8:95:39:aa:58:fe:3f:14:02:fc:6e:db:36:98:98:
         9f:0d:8a:1a:a2:df:d2:49:ac:87:93:9d:c3:db:eb:5d:d8:63:
         4e:fd:1b:41:d8:c6:a6:54:74:4b:b7:e1:89:04:63:1c:f5:46:
         96:d6:8b:1f:f9:49:e8:a2:5c:42:00:48:ae:e7:70:f1:5a:f9:
         a7:4c:2c:e5:2d:df:1c:33:43:95:b6:50:f4:13:67:b3:89:5c:
         5e:6f:84:2f:e2:67:56:f6:6e:bb:5e:e0:cb:56:75:ff:11:d3:
         91:a2:09:16:bb:cd:37:13:31:e4:42:2b:a0:72:40:3e:0a:ed:
         87:29:76:6d:1d:fe:85:6a:28:fb:0c:9f:03:85:24:e0:a3:9e:
         0b:bb:69:64:11:0a:c6:38:51:27:bb:5e:b2:4b:a7:85:6b:80:
         be:df:a4:41:71:5f:4b:83:50:aa:4f:f7:23:79:85:dc:e8:74:
         6d:98:9c:38:aa:bf:39:bc:40:2d:44:8e:d2:d7:55:14:83:f9:
         11:8b:ae:cc:cf:9f:5b:c9:9f:5b:c8:67:2f:16:13:7f:cf:d3:
         14:08:34:b4:9e:70:5d:b3:4d:d1:88:e6:d0:12:ba:47:74:16:
         43:5f:1d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:33:00 2026 by rpki-client