Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71d71be6-4808-31fe-9384-dcd70a786388.roa
File:                     71d71be6-4808-31fe-9384-dcd70a786388.roa (raw, json)
Hash identifier:          wcILFnNg88G5dzZf0DMdZIVrGR9WLwIm+F2pmGnYAnA=
Subject key identifier:   0D:28:EB:EA:AC:46:07:7C:71:6C:1F:62:C4:29:C5:F5:AB:DF:06:A6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D962A787A32CB40B4ACC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71d71be6-4808-31fe-9384-dcd70a786388.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.104.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:96:2a:78:7a:32:cb:40:b4:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a105c357-3dd7-450c-a521-432ea510040e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:4a:7d:93:98:de:eb:06:74:b2:bc:df:fa:
                    77:e6:bb:92:56:ef:bf:af:de:f0:11:10:45:41:dc:
                    d4:09:4b:0c:aa:cf:fc:44:13:ce:51:43:8d:9a:71:
                    2f:1c:54:9f:c7:65:04:0c:9a:f8:05:a2:22:51:83:
                    60:28:7b:ae:b9:0f:ed:c5:28:75:9e:b8:2a:9f:52:
                    08:06:af:ff:45:cf:fd:4b:f1:50:60:c1:90:3e:f3:
                    05:ab:65:7c:b8:f0:ae:54:be:39:66:63:dd:15:49:
                    7c:a3:ba:83:7d:5b:59:5a:c4:38:48:4b:ac:38:59:
                    68:ab:5e:45:97:42:f8:fe:2c:87:0b:07:37:63:c9:
                    10:5c:8a:6e:03:17:0f:b3:5f:79:cc:c7:c5:d9:ac:
                    86:60:0e:91:5c:a5:c5:cc:6f:29:c8:be:68:61:91:
                    74:02:65:85:5f:90:06:68:82:d4:56:43:89:35:cf:
                    14:13:ba:d3:33:2c:a4:4f:7a:09:71:bb:dd:26:02:
                    73:ca:ac:18:a4:0e:4c:d2:ac:25:d6:b7:c6:15:c1:
                    1b:ff:9e:a0:68:a8:f6:a4:aa:e3:54:3c:6d:6e:68:
                    2b:be:ea:c3:d6:31:37:16:38:d5:3d:e7:42:25:d9:
                    5e:24:11:47:fd:7e:cc:28:4d:38:17:9e:75:3f:3d:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:28:EB:EA:AC:46:07:7C:71:6C:1F:62:C4:29:C5:F5:AB:DF:06:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71d71be6-4808-31fe-9384-dcd70a786388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:04:75:7f:ad:78:00:17:b4:ec:c8:1c:cc:6d:ce:c5:5a:fc:
         cb:a0:5f:d6:4c:04:26:45:24:ae:dd:2d:ac:8f:bc:6a:8a:d4:
         2d:5b:63:54:f7:98:63:9b:99:94:9f:5b:bd:be:81:8f:f0:f3:
         7f:a8:bc:bd:aa:89:62:7a:f2:5d:05:39:1a:a7:49:53:67:56:
         83:cd:4f:fc:dd:43:08:f2:6b:fa:e4:25:d6:c6:25:50:23:2e:
         00:6a:ac:e7:92:8c:7c:2c:ac:00:6b:dd:9f:24:0a:8c:c4:e5:
         9f:60:d9:c2:cc:0e:70:f6:60:8b:51:69:6e:0f:79:09:c4:85:
         ae:59:dc:9a:9d:f4:52:60:1b:be:03:aa:0a:01:86:9b:19:0e:
         09:a1:22:eb:d7:3a:a7:bf:c8:eb:58:54:0a:3d:90:f5:da:1e:
         9a:5f:ff:56:c7:e3:c3:2a:47:7a:7f:ac:fe:55:8a:fe:fc:4a:
         cf:f5:ec:75:c4:ce:41:72:9d:5c:45:0b:4b:99:df:b9:53:ab:
         1b:72:80:1b:56:18:6f:a8:e3:72:5a:44:b7:f0:1d:09:c8:18:
         97:67:a8:cc:f2:54:30:8e:ba:14:a4:6b:93:66:a7:d8:2b:7b:
         e2:83:7e:d1:18:16:7d:e0:9c:0b:d4:44:25:c8:7b:d8:14:5f:
         15:4a:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:16:56 2026 by rpki-client