Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6e698cc3-8ee3-302f-95e3-62caba3a0127.roa
File:                     6e698cc3-8ee3-302f-95e3-62caba3a0127.roa (raw, json)
Hash identifier:          AzwU2TjPvkcNtrL4nh+eM2kYWFNAtQSkG+S+7UY53ho=
Subject key identifier:   EB:C9:45:41:D1:CE:C1:E5:23:39:5B:C7:19:2C:08:37:35:DD:88:04
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584CD40773E267247994F4C54680
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6e698cc3-8ee3-302f-95e3-62caba3a0127.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     393653
IP address blocks:        104.128.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:73:e2:67:24:79:94:f4:c5:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=9301fb0a-ea96-4ba3-a66d-6317ca234093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:8c:86:2d:85:cf:98:19:2c:b5:68:b1:0a:
                    f2:0f:70:7f:4f:f8:57:42:85:2f:58:a8:d5:34:2e:
                    0b:24:5b:7d:ba:14:7a:ec:77:b4:74:70:44:4b:7a:
                    ba:7d:94:6a:09:b5:48:c7:7c:02:fb:a8:4c:03:9a:
                    bd:9f:f8:75:94:92:2d:ae:c3:d2:a1:51:c9:17:01:
                    77:4d:c7:b6:96:55:5c:56:75:58:3e:7c:b9:0e:61:
                    7f:ea:10:8b:c4:f8:71:c7:b7:19:43:3a:70:56:29:
                    af:2c:c4:13:fc:28:7b:f8:d5:44:00:59:62:23:4a:
                    e7:fb:da:ec:83:ff:cc:7f:dc:17:28:77:18:f2:e6:
                    b1:74:37:33:a3:bc:e0:cd:fc:76:79:23:1c:ff:af:
                    b6:31:11:b4:4f:1c:ba:ff:03:09:58:d7:94:04:f5:
                    01:5c:88:90:c2:d5:67:9a:45:ca:93:1d:58:43:3c:
                    11:f3:d7:cd:75:2e:05:32:45:a5:f7:ad:8f:d9:ef:
                    2a:a1:60:3e:52:83:b6:98:60:9b:14:9a:32:44:16:
                    5e:15:d1:c1:25:16:38:35:43:46:1f:db:99:c7:20:
                    1f:fc:c6:03:6c:3d:a1:51:55:bd:10:e5:04:d1:95:
                    8a:30:90:a3:a0:ac:2f:23:9e:af:43:b5:49:2e:1b:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:45:41:D1:CE:C1:E5:23:39:5B:C7:19:2C:08:37:35:DD:88:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6e698cc3-8ee3-302f-95e3-62caba3a0127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:7d:f6:d0:3a:e8:f6:4b:05:09:15:26:d3:88:4e:1f:16:
         1d:31:bc:4b:7d:06:53:c8:8a:07:f6:13:ea:b2:dd:df:d0:7d:
         14:b6:71:4a:84:b9:07:5b:c7:54:af:d1:29:e6:de:f3:86:79:
         b4:a5:93:ab:34:b4:50:79:a9:be:ec:9d:90:45:8e:cc:f0:72:
         55:54:3a:48:5c:e4:16:ed:5d:e9:2f:89:30:f2:1f:c3:3a:dd:
         77:c6:e7:a0:88:6e:28:01:ef:2a:41:72:4d:96:74:c7:39:41:
         ad:52:96:21:6a:8e:50:ab:11:26:55:54:04:3b:50:82:8d:96:
         df:d8:87:54:db:ea:dc:3b:5d:68:20:7e:18:df:68:50:48:b7:
         48:ca:a9:e2:ad:ad:80:d2:5e:09:00:16:73:b3:fe:c4:a8:95:
         e8:e3:2c:d7:1d:37:38:7d:b2:c4:e2:c3:b9:6e:f0:46:4b:21:
         e2:cb:fc:4c:a9:90:25:b4:db:01:4f:7a:04:d8:2e:ed:08:c5:
         e5:95:71:c8:67:8a:6c:73:f1:d9:08:1c:92:8f:0c:9d:0b:1d:
         fa:54:98:ef:ff:32:00:d0:9a:aa:55:50:6f:f4:6d:37:ba:bb:
         b1:8d:ca:2c:b2:f8:09:95:f7:26:77:d4:19:ae:4d:fd:b7:fb:
         45:8c:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:38 2026 by rpki-client