Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa
File:                     06765d03-abf5-30c6-b110-2caa00fd6a3c.roa (raw, json)
Hash identifier:          QNvyil6dhvsqGiO3AKPszBJHmUOP53JI+/ZP7bLISXc=
Subject key identifier:   A3:E7:18:93:33:06:DF:60:94:75:85:79:63:50:21:05:3B:96:A8:98
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584CD40773CF68A4E6AE1BD42F00
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     393653
IP address blocks:        104.128.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:73:cf:68:a4:e6:ae:1b:d4:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=cc78711d-aef3-4984-a11d-b045a582f5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:97:08:99:51:8f:72:20:c3:d4:4a:24:b2:
                    32:a3:e9:53:e7:f0:57:29:97:15:a7:d2:45:dd:16:
                    c7:f2:0e:c6:fe:02:fd:f1:b3:0e:af:25:de:fc:05:
                    7f:97:e9:c5:6e:50:c4:e7:d1:d7:21:f7:4a:e6:5b:
                    6e:59:69:e1:9e:bb:b1:cd:8f:0b:be:bf:ec:6c:10:
                    1d:e4:ed:57:24:74:3a:a4:db:dc:f7:40:26:71:e6:
                    d6:1a:0e:e3:87:d1:41:33:18:90:1f:0a:2a:18:d4:
                    87:45:ac:dd:b5:78:a9:c3:52:33:f5:3e:a2:75:6a:
                    eb:66:21:96:9c:a7:75:54:43:cd:de:00:92:62:1e:
                    13:7c:44:67:8e:9e:37:c9:a2:75:03:b8:ba:c3:0a:
                    9b:3b:15:f1:59:33:ec:03:28:1b:6b:c8:7b:23:2a:
                    6e:c9:a2:70:4f:17:e7:1d:f3:5a:ee:fa:d9:76:dd:
                    84:ba:b3:5c:bd:66:7d:23:42:f4:cb:d3:33:5a:c4:
                    e8:fb:92:66:d9:1c:19:f1:e7:b0:20:50:b5:e8:09:
                    d5:00:b0:c0:d7:e3:f9:e5:3f:cb:69:ec:26:65:90:
                    86:77:19:61:a8:38:5a:d2:ef:8d:43:2f:9d:8f:6f:
                    e6:46:25:0c:ed:87:6e:d9:6d:fa:e5:78:53:7f:c8:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:18:93:33:06:DF:60:94:75:85:79:63:50:21:05:3B:96:A8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:24:94:a6:5d:fb:a9:4f:7d:30:3e:0e:4a:94:26:46:b1:79:
         c3:2d:88:3c:0e:53:82:1c:b2:02:60:a9:2d:e3:21:87:81:c5:
         9b:dd:f8:5d:d7:e1:38:b3:02:93:cf:03:54:05:02:1e:6c:ca:
         ea:cd:87:aa:61:1a:d1:ee:1c:34:78:58:55:8e:24:ff:30:ab:
         da:0d:7a:64:98:1d:63:86:96:ac:05:da:66:21:15:84:8f:90:
         c2:6f:34:a4:87:a1:c4:6d:4e:f6:30:21:cf:a0:75:c9:4e:94:
         ea:3a:0a:a1:9a:f6:c1:86:19:27:9f:69:f9:e0:e0:59:b6:6f:
         08:5e:8b:14:15:d3:b2:f8:30:9b:14:cf:c9:0c:da:a9:32:87:
         92:37:bd:77:79:94:03:a2:10:69:94:6d:91:0f:e9:76:77:ec:
         0d:04:5c:96:5e:fc:d2:db:98:26:62:88:9d:6e:5f:94:a8:02:
         c8:22:b1:6b:b2:e5:b5:e8:dd:b2:87:70:dc:ac:2b:35:c5:d0:
         40:98:1e:64:8a:53:0d:a7:31:19:50:2f:cc:66:98:80:d9:96:
         4e:96:e9:91:78:f1:11:01:aa:65:d4:0f:e4:61:3e:b5:1a:23:
         cc:b6:cc:dc:93:42:f8:35:da:64:f3:eb:bc:e1:1b:93:12:c8:
         56:c0:84:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:22 2026 by rpki-client