Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a78e8d35-04a6-3a78-85cc-09f7a30426ee.roa
File:                     a78e8d35-04a6-3a78-85cc-09f7a30426ee.roa (raw, json)
Hash identifier:          tFYgL+FmhCe0JOeY9asppvQPb5ZZ764PoxX0YPcuS5A=
Subject key identifier:   A9:4E:D4:66:BE:2A:BC:F7:DF:97:07:83:04:15:68:F7:61:83:AD:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79EEFFA4730065729A0A6C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a78e8d35-04a6-3a78-85cc-09f7a30426ee.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40306
IP address blocks:        75.104.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:ef:fa:47:30:06:57:29:a0:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6d04be3d-5bc6-4b0e-888b-1087377455a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:54:8c:81:4e:66:b1:fd:cd:3a:23:a2:a1:
                    36:6c:cb:c8:1e:0b:d9:9a:eb:92:4f:4a:c4:7e:61:
                    21:d5:9e:39:70:4f:1c:1f:25:30:d4:c8:e0:b5:e5:
                    2a:1c:4b:19:b2:ba:4a:dc:c3:4b:90:e0:16:01:3d:
                    77:28:c9:55:09:99:97:51:18:f4:42:8c:b7:75:65:
                    b2:65:9b:60:23:68:2d:94:2d:63:59:6c:09:04:77:
                    58:e7:f5:66:49:23:90:c4:66:04:0d:63:d2:cb:91:
                    1f:3c:64:ac:e8:87:99:1f:d7:57:b6:4f:fa:ef:02:
                    c6:04:10:d7:4a:95:72:36:9c:ef:f5:21:98:68:c3:
                    44:5e:fc:ea:80:d1:3c:06:b3:1e:da:1a:e3:23:f3:
                    66:bd:8e:15:30:32:ab:79:48:3a:25:35:86:a4:c0:
                    dc:a1:ed:e4:e5:09:47:85:b7:66:e6:e3:dc:91:37:
                    59:57:af:c7:60:ac:df:6a:b5:9a:54:61:5c:ba:0c:
                    c1:1a:91:45:aa:7e:cd:6e:f5:39:e3:ce:27:80:24:
                    59:2e:b8:2e:0a:d6:c2:ed:c7:14:35:40:13:46:6e:
                    e5:15:2b:64:d7:02:b6:67:0b:21:f8:2e:6b:33:e4:
                    34:ed:cc:cd:87:f0:4f:cc:0a:ed:02:80:b4:3c:43:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4E:D4:66:BE:2A:BC:F7:DF:97:07:83:04:15:68:F7:61:83:AD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a78e8d35-04a6-3a78-85cc-09f7a30426ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:e9:39:fd:65:96:7c:5e:fe:72:d3:26:22:8c:25:8f:55:
         70:5c:67:4e:20:73:1b:57:fe:df:f2:fc:4b:f1:7a:0d:e9:f8:
         21:3d:a4:63:00:1b:9b:23:04:62:fd:31:04:1e:63:ab:79:c0:
         b4:21:26:52:10:8b:fd:36:eb:51:54:7b:05:05:ae:aa:d7:c6:
         6e:eb:6b:55:32:07:00:4a:19:c5:64:0a:9b:d1:b9:1b:ad:dd:
         2f:95:6d:32:56:74:42:4d:f4:9d:f2:c2:f6:f1:b3:e5:23:3b:
         07:ca:af:b9:f9:6b:c8:e9:b1:2d:5a:bc:07:e9:c1:90:cc:2e:
         72:f6:e7:02:ac:ba:0a:b8:bf:4b:d4:96:2d:55:2b:37:8c:0f:
         e4:ae:7e:06:bd:00:68:7c:ec:f2:79:fd:3f:f1:4a:ec:d9:45:
         8d:f4:29:81:cb:6e:0a:9c:ee:07:a8:23:24:ee:af:79:6d:a4:
         f6:a9:52:7c:f5:0d:d1:84:35:17:4f:a6:f6:2b:b1:2f:61:47:
         e6:cb:c9:38:8a:99:9a:7e:20:3b:81:88:8c:f7:74:78:14:c7:
         f4:83:01:cb:0c:76:67:b7:9b:0a:7c:32:c0:04:61:e4:3b:a7:
         2d:ff:a9:ae:3e:e7:3d:4f:ac:2b:78:18:7a:a4:ff:45:cd:fd:
         44:a3:6d:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnu/6RzAGVymgpsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmQwNGJlM2QtNWJjNi00YjBlLTg4OGItMTA4NzM3NzQ1NWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0tUjIFOZrH9zTojoqE2bMvIHgvZmuuST0rE
fmEh1Z45cE8cHyUw1MjgteUqHEsZsrpK3MNLkOAWAT13KMlVCZmXURj0Qoy3dWWy
ZZtgI2gtlC1jWWwJBHdY5/VmSSOQxGYEDWPSy5EfPGSs6IeZH9dXtk/67wLGBBDX
SpVyNpzv9SGYaMNEXvzqgNE8BrMe2hrjI/NmvY4VMDKreUg6JTWGpMDcoe3k5QlH
hbdm5uPckTdZV6/HYKzfarWaVGFcugzBGpFFqn7NbvU5484ngCRZLrguCtbC7ccU
NUATRm7lFStk1wK2Zwsh+C5rM+Q07czNh/BPzArtAoC0PENbQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlO1Ga+Krz335cHgwQVaPdhg60AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTc4ZThkMzUtMDRhNi0z
YTc4LTg1Y2MtMDlmN2EzMDQyNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES2hQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKT36Tn9ZZZ8Xv5y0yYijCWPVXBcZ04gcxtX/t/y/Evxeg3p+CE9pGMA
G5sjBGL9MQQeY6t5wLQhJlIQi/0261FUewUFrqrXxm7ra1UyBwBKGcVkCpvRuRut
3S+VbTJWdEJN9J3ywvbxs+UjOwfKr7n5a8jpsS1avAfpwZDMLnL25wKsugq4v0vU
li1VKzeMD+Sufga9AGh87PJ5/T/xSuzZRY30KYHLbgqc7geoIyTur3ltpPapUnz1
DdGENRdPpvYrsS9hR+bLyTiKmZp+IDuBiIz3dHgUx/SDAcsMdme3mwp8MsAEYeQ7
py3/qa4+5z1PrCt4GHqk/0XN/USjbVY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:36 2026 by rpki-client