Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70828d30-bb32-3c8c-9072-45b82e313bf6.roa
File:                     70828d30-bb32-3c8c-9072-45b82e313bf6.roa (raw, json)
Hash identifier:          dGEkfqiOMLhyp3oooL4xsXKurIkzahmbIUqkxFjwOgY=
Subject key identifier:   22:B6:DB:0E:F8:73:8D:75:6A:BE:AB:B9:6F:9C:BD:49:66:BD:C8:B4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B21124A9DEDAA050BCE40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70828d30-bb32-3c8c-9072-45b82e313bf6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.104.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:21:12:4a:9d:ed:aa:05:0b:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fa027562-b712-4bee-8e86-bd8d7fc5f6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:84:2f:eb:14:a6:81:e9:61:6b:93:42:31:
                    75:2d:bc:12:87:e2:77:c4:a2:c7:bb:78:fd:bb:4f:
                    52:19:ac:a2:20:aa:96:ee:5c:78:48:a0:68:f0:51:
                    5c:c8:eb:ab:e1:9f:74:5b:cf:e5:6e:1c:84:1b:e8:
                    e8:37:2f:e0:14:06:67:b1:be:92:61:32:03:b9:39:
                    83:16:d1:19:9e:0c:c5:c7:d5:2f:d3:53:bf:f8:03:
                    0e:f3:d9:d6:e4:9f:97:f7:70:e8:d7:ac:70:46:ac:
                    7d:95:3f:f4:71:d6:6f:86:cd:e3:ea:00:72:b6:b9:
                    39:79:00:51:b6:43:9c:bd:b4:4c:56:b7:55:6f:d0:
                    85:36:c7:2d:88:e7:ad:7a:73:32:06:6e:08:c1:33:
                    67:85:f2:94:fd:fc:11:63:56:14:b3:85:f5:be:d5:
                    b8:e6:08:3b:dd:7e:2d:17:e4:0c:93:34:b9:24:01:
                    41:63:ab:b8:72:c2:27:54:05:f6:af:31:f3:46:ef:
                    e1:27:40:7b:ee:93:38:e8:d2:9c:46:92:44:2a:6b:
                    90:e4:71:c0:80:4d:2d:72:93:c4:f2:d5:5b:8d:19:
                    f3:ab:9c:d3:ec:ff:71:5c:5f:b9:ad:d3:28:fe:0d:
                    1d:f0:02:bc:df:58:9a:c9:ba:0e:b8:6a:33:c2:c2:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B6:DB:0E:F8:73:8D:75:6A:BE:AB:B9:6F:9C:BD:49:66:BD:C8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70828d30-bb32-3c8c-9072-45b82e313bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:00:1d:30:66:7b:28:0d:83:f7:33:29:6e:19:c7:64:00:96:
         05:67:ea:06:9d:14:2f:79:a0:03:c2:09:66:ac:10:b9:8e:73:
         ea:24:5e:72:b9:a8:0c:38:3f:18:b0:5f:e3:05:dd:99:1b:64:
         84:db:f9:13:c4:4e:ab:73:0c:6b:a9:91:e3:09:51:68:f0:32:
         8a:36:96:50:9c:30:d8:8d:8a:fd:09:83:dc:72:29:be:c1:d3:
         9f:0e:70:28:7f:be:f8:a0:4b:a8:4b:fd:f3:80:e8:98:a1:a9:
         1e:bc:6d:ee:7e:7e:98:ca:70:f0:b0:0d:c5:2b:66:a4:e1:8d:
         5f:e8:43:9b:03:f1:6b:24:3b:71:48:8e:86:1e:1a:b4:13:5c:
         c3:50:07:77:77:14:a6:9f:a0:06:c9:db:1f:50:31:f1:af:e5:
         03:5b:ee:da:ba:c7:47:f7:a9:cd:83:ac:1a:6b:f4:60:20:56:
         35:e7:14:17:cb:68:c1:84:d8:bc:41:2a:62:95:27:da:76:31:
         8b:62:e0:72:c6:ca:15:4e:56:60:0e:78:07:e7:ff:b1:e0:1a:
         ce:5b:73:c2:47:94:7b:17:b5:cb:0f:77:7a:d8:25:4c:1e:d2:
         1d:d6:fc:48:54:ff:b4:09:1c:a0:8e:af:c5:d9:13:68:b8:8b:
         73:ef:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:47:22 2026 by rpki-client