Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa
File:                     bfb1447f-fcd2-3a38-8239-151dd80283b9.roa (raw, json)
Hash identifier:          Q1S7KBJtzE+WT8Igbut8rBW1Mw45e9KclzJ5Y4kWZ8c=
Subject key identifier:   3F:DA:9A:F8:A6:8C:3F:EA:C0:8B:4F:AC:50:15:BF:DA:23:B0:F9:D6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F35B74BD5B0C1D3C62FA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.104.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:35:b7:4b:d5:b0:c1:d3:c6:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1fc1de9b-0945-4f12-967d-434ec2449291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:ea:15:d6:6d:7d:36:b1:4f:c1:89:18:ca:
                    22:41:b2:30:b4:66:0a:a4:e9:3f:13:ad:55:1e:6d:
                    14:f6:c4:9a:b5:6c:50:ac:8c:f0:0a:3e:57:c9:ef:
                    a9:e3:af:29:fa:5a:d7:af:b6:ba:42:38:c9:51:0e:
                    8b:34:aa:fb:4c:1d:5a:28:c6:2d:f3:64:ae:09:b8:
                    3b:05:7b:c0:bf:bb:04:98:12:92:d3:14:e9:80:c8:
                    fd:14:09:66:0c:a3:7c:aa:88:c6:45:be:21:d1:33:
                    30:36:67:4d:4d:09:f2:36:4f:85:06:30:e8:26:39:
                    d4:3d:41:dc:e4:f1:b9:a9:a1:cf:5a:8d:e6:aa:0d:
                    36:cd:3e:ef:81:1e:f8:38:62:32:91:e8:4d:ad:bb:
                    27:51:7d:df:08:2d:83:61:6d:e8:1a:11:40:0d:9c:
                    65:93:e3:15:5a:7f:16:1c:d6:57:3b:3a:b3:76:84:
                    b8:6e:18:31:86:e7:ad:f9:9b:92:a6:82:49:3c:79:
                    5d:f1:fd:c4:70:a0:51:c9:c3:5a:f1:dd:70:c5:e4:
                    96:27:4c:fb:18:ba:b4:02:7b:fe:dd:2e:8d:9c:26:
                    2c:b2:86:2c:d8:da:2d:bf:ef:20:6f:84:6b:84:78:
                    14:fc:de:e8:f5:30:4d:8d:ed:c0:25:3e:3c:c2:f3:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DA:9A:F8:A6:8C:3F:EA:C0:8B:4F:AC:50:15:BF:DA:23:B0:F9:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb1447f-fcd2-3a38-8239-151dd80283b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:7b:fe:ef:e1:f1:d0:54:a2:15:c6:59:07:03:1d:6c:07:
         62:c8:e5:05:05:a1:62:b6:9e:12:a0:4d:0f:c6:3e:60:65:2b:
         59:21:25:4d:c0:fd:52:5c:ad:1a:1f:c9:d8:1c:36:ac:a9:d7:
         10:4c:f9:3f:2b:07:c1:8b:5a:c0:89:d1:6c:f0:f8:89:ea:1c:
         e7:8a:90:bf:ee:05:3e:b4:d6:11:b3:0c:1b:ec:1f:14:2f:f3:
         95:59:54:26:c3:ad:6f:f8:4e:1e:48:e6:62:0e:09:a9:ce:a1:
         1c:41:6c:17:91:30:ba:25:e4:75:c8:b7:6c:bb:76:65:a5:bf:
         e0:9e:b4:bc:77:ae:67:df:28:ae:f8:66:43:ec:c9:68:2d:3e:
         fe:59:43:e3:02:87:de:78:2b:5a:50:1d:52:94:35:4b:ca:75:
         cd:fe:12:66:42:4c:ac:0a:f9:d8:ec:4e:11:b6:ac:c4:0e:02:
         94:48:d7:01:05:b1:e6:66:5a:90:d1:43:d0:be:93:9b:66:d3:
         29:94:19:ed:59:c8:c5:df:3f:c3:f7:6b:cf:6b:30:47:d4:a5:
         6f:d8:20:7f:1f:d1:51:ad:27:86:80:a5:62:cc:08:bf:1f:56:
         30:d9:10:b3:3c:67:9a:f9:09:bc:fc:32:37:47:99:ee:6f:3d:
         e0:b3:97:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnzW3S9WwwdPGL6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWZjMWRlOWItMDk0NS00ZjEyLTk2N2QtNDM0ZWMyNDQ5MjkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2zqFdZtfTaxT8GJGMoiQbIwtGYKpOk/E61V
Hm0U9sSatWxQrIzwCj5Xye+p468p+lrXr7a6QjjJUQ6LNKr7TB1aKMYt82SuCbg7
BXvAv7sEmBKS0xTpgMj9FAlmDKN8qojGRb4h0TMwNmdNTQnyNk+FBjDoJjnUPUHc
5PG5qaHPWo3mqg02zT7vgR74OGIykehNrbsnUX3fCC2DYW3oGhFADZxlk+MVWn8W
HNZXOzqzdoS4bhgxhuet+ZuSpoJJPHld8f3EcKBRycNa8d1wxeSWJ0z7GLq0Anv+
3S6NnCYssoYs2Notv+8gb4RrhHgU/N7o9TBNje3AJT48wvPGqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/amvimjD/qwItPrFAVv9ojsPnWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZiMTQ0N2YtZmNkMi0z
YTM4LTgyMzktMTUxZGQ4MDI4M2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2jOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmge/7v4fHQVKIVxlkHAx1sB2LI5QUFoWK2nhKgTQ/GPmBlK1khJU3A
/VJcrRofydgcNqyp1xBM+T8rB8GLWsCJ0Wzw+InqHOeKkL/uBT601hGzDBvsHxQv
85VZVCbDrW/4Th5I5mIOCanOoRxBbBeRMLol5HXIt2y7dmWlv+CetLx3rmffKK74
ZkPsyWgtPv5ZQ+MCh954K1pQHVKUNUvKdc3+EmZCTKwK+djsThG2rMQOApRI1wEF
seZmWpDRQ9C+k5tm0ymUGe1ZyMXfP8P3a89rMEfUpW/YIH8f0VGtJ4aApWLMCL8f
VjDZELM8Z5r5Cbz8MjdHme5vPeCzl3E=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:34:04 2026 by rpki-client