Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89624bb-8125-325f-b4fa-68d9e79d91bd.roa
File:                     c89624bb-8125-325f-b4fa-68d9e79d91bd.roa (raw, json)
Hash identifier:          Og5ei1+17vQzI6SMefe+q7SjfJdeMOMyp5tAnKxbK0Q=
Subject key identifier:   FE:5E:6F:C5:2B:29:41:42:C5:C5:8B:12:71:7F:B9:12:80:A5:BD:0B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D5D1B938AA69884021B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89624bb-8125-325f-b4fa-68d9e79d91bd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16491
IP address blocks:        75.104.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:5d:1b:93:8a:a6:98:84:02:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e7d85f8e-e68c-4b4c-9e50-3a599047e009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:f0:bc:cf:03:95:83:5a:96:ec:63:55:55:
                    39:f1:9d:9a:6b:e9:33:8a:94:ab:a4:af:c9:6c:5f:
                    e3:be:4d:af:17:c2:9f:ea:2b:53:c4:b6:f1:e6:d1:
                    64:33:dc:e3:53:e6:ec:9a:27:b8:39:1f:23:b5:48:
                    80:9e:d1:84:e4:37:67:59:ec:d5:86:6c:e0:42:64:
                    e5:3d:7f:bf:94:3a:dc:a0:c1:dc:65:31:00:e5:b7:
                    62:38:fd:df:22:28:74:54:f4:14:79:98:f6:14:4b:
                    32:82:41:36:a7:37:0f:58:c0:60:f9:b6:fa:16:12:
                    eb:25:d6:92:64:5a:cd:14:58:e5:c9:0a:34:85:6f:
                    ba:b2:90:5c:5f:25:13:33:84:4d:2b:4b:03:37:e6:
                    d3:8d:f2:ab:dc:da:ea:2b:dd:a8:eb:ba:8d:4f:f6:
                    03:f6:29:70:93:e1:87:6b:03:b4:f6:0c:df:fe:66:
                    9d:10:ac:64:ff:8d:a4:58:37:c0:57:ce:d0:fc:ac:
                    ca:20:92:70:ec:d1:c4:2e:f4:fe:b2:36:e3:9e:29:
                    83:1d:90:ed:cd:5b:0b:7f:64:9f:e2:00:78:66:12:
                    03:34:44:7c:f3:0a:8b:1e:e0:c9:4d:9f:0d:08:e3:
                    4c:b5:3b:1f:41:ff:fc:b3:23:16:ee:73:d3:20:32:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5E:6F:C5:2B:29:41:42:C5:C5:8B:12:71:7F:B9:12:80:A5:BD:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89624bb-8125-325f-b4fa-68d9e79d91bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:be:83:46:44:4c:11:8b:58:d8:f9:ac:61:59:bb:a6:bc:
         a3:c6:68:14:13:5d:74:ec:0a:f9:35:a7:ed:7c:5f:de:9a:af:
         ec:48:42:eb:57:17:86:f1:cc:40:e6:ed:2a:91:b0:6e:09:53:
         1f:22:5a:16:d0:0c:61:8b:43:fb:b3:5d:82:02:50:e9:aa:64:
         6d:ad:1d:c8:e3:b4:31:a3:02:08:0a:e4:c2:53:3b:26:ce:09:
         9e:95:d2:f5:d9:0c:a3:ec:65:69:af:c0:77:ba:7e:c7:95:3e:
         3b:03:ad:1c:49:87:d8:a8:17:a6:46:7b:e5:b5:b3:7a:d2:cd:
         0b:08:6f:0f:38:7f:29:8f:08:bc:54:05:21:67:0a:45:00:b8:
         96:c5:66:6a:c2:7a:35:b4:ee:d1:70:08:2e:87:7e:50:b9:f7:
         f8:41:6d:e6:b1:c3:08:ad:f4:f2:dc:68:d9:79:74:2e:20:3f:
         1f:40:53:9f:f0:06:05:40:8e:2c:f5:c5:07:d1:b1:43:40:6d:
         ce:81:38:43:db:55:ff:46:82:68:a9:d5:eb:2d:1d:1e:61:cd:
         33:c6:2a:58:66:ca:8a:3a:3c:37:33:d2:06:05:73:58:e6:5d:
         82:60:76:dc:9e:e2:6c:a4:1d:1f:62:0e:c5:50:82:b3:01:d7:
         f2:9e:2f:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnV0bk4qmmIQCG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTdkODVmOGUtZTY4Yy00YjRjLTllNTAtM2E1OTkwNDdlMDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth3wvM8DlYNaluxjVVU58Z2aa+kzipSrpK/J
bF/jvk2vF8Kf6itTxLbx5tFkM9zjU+bsmie4OR8jtUiAntGE5DdnWezVhmzgQmTl
PX+/lDrcoMHcZTEA5bdiOP3fIih0VPQUeZj2FEsygkE2pzcPWMBg+bb6FhLrJdaS
ZFrNFFjlyQo0hW+6spBcXyUTM4RNK0sDN+bTjfKr3NrqK92o67qNT/YD9ilwk+GH
awO09gzf/madEKxk/42kWDfAV87Q/KzKIJJw7NHELvT+sjbjnimDHZDtzVsLf2Sf
4gB4ZhIDNER88wqLHuDJTZ8NCONMtTsfQf/8syMW7nPTIDKUIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5eb8UrKUFCxcWLEnF/uRKApb0LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg5NjI0YmItODEyNS0z
MjVmLWI0ZmEtNjhkOWU3OWQ5MWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS2joMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuwvoNGREwRi1jY+axhWbumvKPGaBQTXXTsCvk1p+18X96ar+xIQutX
F4bxzEDm7SqRsG4JUx8iWhbQDGGLQ/uzXYICUOmqZG2tHcjjtDGjAggK5MJTOybO
CZ6V0vXZDKPsZWmvwHe6fseVPjsDrRxJh9ioF6ZGe+W1s3rSzQsIbw84fymPCLxU
BSFnCkUAuJbFZmrCejW07tFwCC6HflC59/hBbeaxwwit9PLcaNl5dC4gPx9AU5/w
BgVAjiz1xQfRsUNAbc6BOEPbVf9Ggmip1estHR5hzTPGKlhmyoo6PDcz0gYFc1jm
XYJgdtye4mykHR9iDsVQgrMB1/KeL9U=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:51 2026 by rpki-client