Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0ad85c43-5e07-36a9-b2e2-e982f3d6de65.roa
File:                     0ad85c43-5e07-36a9-b2e2-e982f3d6de65.roa (raw, json)
Hash identifier:          4KiOtkkk8e6nR+uYgabIgwh32h+vMkgXYbDlyN7ruP0=
Subject key identifier:   06:66:38:0C:93:A4:BF:96:5D:D7:2C:A5:FA:9F:01:0C:C0:5E:BB:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB0B91052191020177F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0ad85c43-5e07-36a9-b2e2-e982f3d6de65.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.107.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b0:b9:10:52:19:10:20:17:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9ede1e0d-10d6-4aee-965a-a99a4a663d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:13:15:e2:90:7e:a6:bb:96:8b:81:7c:0c:
                    5b:83:be:45:8b:36:74:e2:c3:90:04:40:e5:cf:3b:
                    0b:66:88:c0:7a:e7:b1:d0:d9:66:bb:71:f0:39:db:
                    6a:da:c4:82:17:8a:a1:65:db:87:e5:3f:7a:60:c0:
                    f3:4f:88:02:6c:1c:3e:b9:75:38:cc:d7:1d:cc:bd:
                    2e:52:d0:35:f1:c9:cc:f9:4b:13:82:39:e7:24:9c:
                    29:93:b1:77:93:82:94:0f:3b:df:d8:0f:70:4d:e0:
                    c7:54:91:9e:7a:62:0b:5c:dd:f7:b9:40:f8:c4:2c:
                    66:86:57:46:c4:26:0b:95:b1:04:44:2a:c6:df:9d:
                    1e:7a:2c:bb:b4:76:d1:a2:0c:b1:ac:2a:35:32:34:
                    c6:ba:d3:8a:33:ce:1e:e5:d7:4c:a3:2f:89:96:c0:
                    21:c3:0a:4a:08:5a:4a:86:91:7f:0f:95:6e:f3:e7:
                    f2:c1:1b:38:57:2d:60:6f:6b:64:3c:1f:5a:f9:6b:
                    b0:eb:4f:05:9b:8d:3f:28:bb:01:19:32:40:6e:5e:
                    d5:87:54:1c:05:8a:cb:6f:e7:0b:e6:ba:43:2a:7c:
                    74:5f:41:bb:0d:10:84:76:f8:b3:55:f8:da:a0:17:
                    b1:c2:99:8d:d8:92:51:95:41:1c:62:5e:d6:a7:c8:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:66:38:0C:93:A4:BF:96:5D:D7:2C:A5:FA:9F:01:0C:C0:5E:BB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0ad85c43-5e07-36a9-b2e2-e982f3d6de65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:b0:36:71:9a:c7:f4:85:11:0d:fa:d7:56:1d:b6:b1:f1:c6:
         56:4b:f8:83:a8:2f:3a:1e:8e:82:14:33:b8:92:a7:cd:32:20:
         f4:c8:70:51:80:1e:d6:f3:ca:84:48:23:ec:e4:d4:7d:0a:4c:
         da:be:e2:2d:9c:d9:ae:6d:87:4c:da:76:e5:5d:dd:3a:f8:c9:
         38:10:f0:8b:2f:e7:a6:10:94:7a:3e:bc:7a:f4:40:6e:18:f0:
         8e:8c:d6:c3:8a:4a:db:a2:ff:38:2c:a0:5f:a0:a7:0c:db:7f:
         63:1b:ab:f9:f6:02:b2:f1:3b:93:36:93:00:1c:96:29:cd:cc:
         71:49:19:6f:cd:ab:02:84:ab:b9:71:26:d8:0d:ea:e9:50:c7:
         97:be:22:54:c1:a8:ff:66:2b:ee:1e:c6:5a:31:e3:f3:36:f3:
         83:d8:27:fc:a7:c8:e6:56:1a:bf:6c:82:68:cc:67:81:b9:e8:
         a3:30:22:73:2d:f4:57:89:ec:41:a0:90:e2:78:92:00:1e:44:
         e1:66:6e:18:c2:e5:2f:b1:cf:15:a0:28:82:50:f0:16:8d:e9:
         db:be:05:ff:f9:50:69:ab:4e:e3:bf:38:92:d6:3a:91:0e:46:
         12:5e:18:8d:2a:aa:a6:35:24:5b:df:62:57:da:5e:8f:07:dc:
         85:06:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:11 2025 by rpki-client