Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcee66ba-3d43-33e1-aac2-dbea49a449bd.roa
File:                     fcee66ba-3d43-33e1-aac2-dbea49a449bd.roa (raw, json)
Hash identifier:          XfJuWc7EsjVm7pv0QQEPvuCdUMEuJ1aez55pMsS0um4=
Subject key identifier:   42:E1:53:64:87:DE:E2:64:87:AD:0A:31:C4:28:F1:F7:1B:7F:91:02
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BEB1BF4259A550FE89380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcee66ba-3d43-33e1-aac2-dbea49a449bd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.104.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:eb:1b:f4:25:9a:55:0f:e8:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=526e0d9a-07aa-4e40-81f3-b469c03ec60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:ab:0f:54:07:8b:88:05:22:cb:77:6f:44:
                    df:ff:27:63:8c:02:a6:9d:33:d4:3c:d6:e7:91:c9:
                    b8:3e:8b:9a:54:8c:4c:59:50:0a:54:e1:6b:a8:5d:
                    40:0a:bc:a4:ad:3c:fc:43:25:22:44:4f:47:d6:0e:
                    9c:af:69:80:8b:79:f5:ea:1d:d9:0c:d0:9b:34:7d:
                    16:63:1d:6b:70:d7:2b:47:ee:2c:13:68:cc:59:e8:
                    19:a7:c8:4a:0a:bf:0f:b0:0c:51:e0:ca:10:f8:f6:
                    51:b0:fd:04:f8:55:65:f0:3d:c5:59:cf:ce:5e:dd:
                    52:f9:d7:61:dc:5d:cf:ea:e0:bd:9a:20:36:00:18:
                    d3:dc:a2:12:51:46:e3:a7:7f:ff:7d:46:34:49:ae:
                    43:70:56:e8:74:39:90:8c:dc:29:b5:f1:3e:74:68:
                    96:e5:6d:22:54:8a:50:03:90:20:46:3e:91:61:7a:
                    aa:d9:f2:9b:fc:db:36:06:92:18:48:d2:2e:7e:3a:
                    b3:06:2b:20:96:ba:85:33:67:95:78:7a:57:c4:fc:
                    0a:09:4a:0b:e2:3f:b4:f1:8b:cd:e1:91:87:7c:3a:
                    64:ad:05:f9:8b:75:86:57:59:65:4a:93:4e:a1:19:
                    fe:af:10:52:3d:13:6b:11:38:98:0f:15:ac:60:e2:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E1:53:64:87:DE:E2:64:87:AD:0A:31:C4:28:F1:F7:1B:7F:91:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcee66ba-3d43-33e1-aac2-dbea49a449bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:d2:f2:12:8e:30:3e:ac:11:c3:5e:a2:44:94:83:8c:71:db:
         e8:fe:e0:5b:b7:46:ad:b2:9d:2e:e8:29:d8:93:06:49:ca:a3:
         51:82:a0:ca:44:a8:d4:81:72:de:b4:a3:14:b6:c7:33:f8:5c:
         fc:14:45:34:58:76:3c:54:5d:77:61:8a:46:5c:74:be:38:37:
         65:7d:03:92:3c:9f:95:a7:2d:f4:80:49:88:4e:c6:52:5b:31:
         99:ab:cb:e5:18:90:29:3d:f0:6b:0b:27:22:82:54:b8:a9:ab:
         53:72:fc:b4:f9:54:03:9b:16:19:24:37:58:5b:ae:a9:1b:ab:
         72:22:58:c9:bf:b9:e3:2b:5f:8e:3c:2a:74:c8:65:62:17:b4:
         a3:a0:49:19:69:7a:9d:ea:7d:93:5e:57:40:e9:93:58:8b:4a:
         00:1c:41:46:4d:9c:b0:9d:9f:7f:29:d4:ff:d0:84:6e:0b:b5:
         3a:87:ac:ac:8c:93:85:cb:e2:61:6b:65:24:78:0f:5d:ab:95:
         ab:c8:47:9a:8d:2e:51:4b:ff:3e:c3:74:86:b1:ed:13:fb:8a:
         b7:d5:c2:55:54:bc:a8:c7:12:1b:56:5e:06:4c:fa:1b:98:39:
         79:98:41:cd:6c:ea:34:af:c4:3c:cb:c6:21:09:40:4d:da:f0:
         d7:85:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:56 2026 by rpki-client