Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd52771c-f0a1-330d-b59c-e2a98a612653.roa
File:                     bd52771c-f0a1-330d-b59c-e2a98a612653.roa (raw, json)
Hash identifier:          xnsRLEifOZbH0FDS5T9KwyENg/SaqkLDFxm5+8ecP4w=
Subject key identifier:   86:A4:1C:74:3E:51:0E:F9:A3:94:A7:D5:B4:7B:65:6E:31:FD:3C:4C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BEFBE06D5C9B5A7A14910
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd52771c-f0a1-330d-b59c-e2a98a612653.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.105.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:ef:be:06:d5:c9:b5:a7:a1:49:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7ed1365a-03f8-423f-9e80-d64c2672141a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:7c:ce:5b:c1:0e:18:ac:06:94:6d:76:b2:
                    84:eb:8b:33:82:b3:e5:f4:1d:fd:e7:0c:f4:bd:51:
                    02:0a:ec:68:c0:c7:67:9a:2e:e4:52:ad:30:06:11:
                    a6:d8:6d:bd:64:ea:f1:a7:32:93:03:ff:21:e7:f6:
                    9c:a9:dc:dd:da:44:eb:2b:9b:90:6e:2e:45:4d:28:
                    0a:c8:87:95:cd:e9:b5:8c:a8:29:2c:9c:1d:be:95:
                    07:dd:b9:c0:76:0d:6e:35:ac:6f:1c:82:98:92:bc:
                    5a:e3:64:8f:ec:64:47:3c:81:6c:e9:a5:24:19:07:
                    f9:9c:5c:2a:d1:30:93:dd:fe:26:b1:06:90:3f:b8:
                    3b:73:8b:f8:7e:39:98:0f:71:9a:a1:79:f5:f0:c5:
                    41:66:4c:1d:af:5d:f7:83:56:8d:7c:2f:5a:37:24:
                    fa:dd:27:9b:04:47:3c:4e:65:61:d6:e2:01:88:18:
                    7a:7e:7d:d0:d8:73:b8:36:a9:53:98:3a:10:c5:8d:
                    ae:b1:77:c6:0a:08:ad:5f:2e:0b:cb:d7:2e:72:22:
                    19:4b:2b:bb:c4:10:be:f5:f3:c5:e6:1e:52:e8:d1:
                    e2:49:1c:dc:2b:57:f8:fe:23:51:bc:96:9c:4e:20:
                    fa:5e:5b:16:ea:c5:ce:5e:6b:93:f1:b2:17:11:51:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A4:1C:74:3E:51:0E:F9:A3:94:A7:D5:B4:7B:65:6E:31:FD:3C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bd52771c-f0a1-330d-b59c-e2a98a612653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:86:41:b5:59:c8:20:27:dd:23:26:40:d1:fc:49:80:06:2d:
         55:33:d3:c3:c4:22:15:24:38:a4:0f:10:5d:8c:17:e4:33:5a:
         13:2e:2f:fa:cf:d2:0d:b8:c0:9b:e9:62:96:b2:e8:35:0e:7d:
         86:6a:a5:95:be:26:52:d4:e2:18:18:63:f4:47:32:18:11:57:
         e6:99:b7:6b:ea:ea:6f:a8:4c:fc:60:95:0e:2e:ea:e4:ea:d8:
         60:41:25:09:28:68:2f:50:b6:b9:f6:09:87:8e:94:37:ef:b6:
         29:0c:66:d7:02:4f:33:02:65:ec:7a:21:ae:82:fc:bd:56:65:
         3c:97:ce:b4:0f:af:fe:f0:23:d2:d6:e0:a3:6c:f1:1a:18:66:
         4a:63:33:a0:ac:33:db:61:5d:bb:5c:88:7d:9b:4d:71:73:1c:
         67:69:68:57:84:fd:c2:5e:37:c3:45:d6:31:73:89:c9:30:39:
         b3:0e:92:f0:15:e5:03:cd:e1:2c:79:ef:58:fe:13:45:e1:85:
         61:b9:8c:e2:8f:99:4a:48:f4:8b:64:bd:12:88:d1:ea:40:0e:
         9c:3c:49:fa:1f:15:73:7c:e9:4e:9e:96:08:08:2e:7a:28:b7:
         ba:63:5b:b2:b2:dd:02:e0:81:dd:4e:ab:7f:dd:76:dc:df:41:
         b8:95:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:32 2026 by rpki-client