Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1bac3da-880b-34ff-b1c8-bcdf5472ae7a.roa
File:                     b1bac3da-880b-34ff-b1c8-bcdf5472ae7a.roa (raw, json)
Hash identifier:          Q7J9vDX1LKXAr1eRc/wHNfBOBi8WwMvVLHJge+IfY38=
Subject key identifier:   9D:DB:A1:39:9F:D2:57:42:70:2E:93:E3:CA:34:E0:B8:22:EC:41:20
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49833508E1695D93949E9F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1bac3da-880b-34ff-b1c8-bcdf5472ae7a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.104.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:35:08:e1:69:5d:93:94:9e:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=35c4ce61-aea3-424c-8759-152f5de7f8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:12:13:ed:7c:0e:05:18:13:15:47:60:9e:
                    bc:a6:7b:b3:6d:1b:fd:37:45:42:14:5a:95:e6:9b:
                    03:cb:53:56:d0:78:11:b8:12:23:fd:3b:4f:9f:5b:
                    bf:8a:d5:8b:cd:cf:ca:d5:3c:8b:df:95:31:06:d2:
                    6b:1c:c7:51:ff:0a:63:66:e0:b5:fe:29:1f:0a:17:
                    aa:e2:8a:73:5f:3d:95:23:45:03:17:b9:08:53:e3:
                    0c:40:11:48:0b:82:5a:40:7e:38:74:9f:9e:04:50:
                    81:0f:9e:0a:af:f2:33:a4:64:ec:6a:ca:c5:21:27:
                    48:38:c9:66:49:dc:c0:7f:ac:2f:ba:d6:0f:c1:f5:
                    21:83:29:28:d5:8d:ec:68:81:34:47:fb:b2:95:a4:
                    bc:bb:e8:ef:6e:8d:64:9e:f1:9e:b9:e7:85:6f:68:
                    cd:29:af:42:84:6b:99:bc:9a:cb:8e:28:6b:98:35:
                    67:b3:e5:49:55:59:fc:20:21:e4:1a:95:b7:b4:ed:
                    c4:c9:85:b6:3f:b1:23:18:06:f1:51:1a:3a:ed:cf:
                    e5:ca:04:60:00:fe:2f:68:46:d9:8c:ca:a9:f8:67:
                    f5:4a:74:3a:95:58:9d:06:b4:19:76:bc:48:4f:46:
                    22:93:ab:ab:23:e7:98:fa:88:6d:22:07:54:27:a8:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DB:A1:39:9F:D2:57:42:70:2E:93:E3:CA:34:E0:B8:22:EC:41:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1bac3da-880b-34ff-b1c8-bcdf5472ae7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:28:5b:3d:41:14:a7:0d:15:18:56:9a:cd:35:47:af:bb:43:
         44:47:7f:71:cc:7e:61:fa:2a:e1:30:d8:32:56:c8:60:ad:e7:
         56:a8:68:aa:76:a5:00:14:d6:10:a7:cc:11:fb:65:d8:14:1b:
         05:7a:75:be:ee:25:3d:99:4c:9f:5d:92:2f:06:36:b9:d8:b7:
         20:02:a3:8b:86:dd:ff:79:91:70:7e:b4:63:80:3e:dc:b3:f0:
         54:23:f3:f8:f7:66:60:c7:e0:b6:14:62:c9:b4:aa:cc:00:d6:
         57:48:6b:9e:32:99:87:8c:89:12:85:f6:53:e4:b8:a8:52:47:
         cd:ea:cf:7d:6c:87:70:3d:15:bc:40:ae:e6:d8:a6:19:90:50:
         96:b3:00:c3:75:b4:ba:74:1c:e1:50:6c:de:de:78:0d:e0:94:
         c9:dc:57:25:bb:f8:5e:82:59:8b:3e:5c:68:34:e3:9c:2d:92:
         6b:e9:26:b6:67:c5:ef:44:3a:a5:c7:b4:e7:c8:40:0d:72:ed:
         22:9b:37:bf:68:58:87:93:47:25:52:10:64:d3:68:17:d6:6d:
         e0:1a:70:0d:2b:36:94:38:f6:88:e0:43:c7:08:9d:d1:e2:8b:
         04:16:b2:52:52:6f:f3:69:5b:88:3f:c2:2c:a8:3d:b4:ce:5c:
         bc:2d:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:49:47 2026 by rpki-client