Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b8d58a0-6edf-3a4b-b4f4-a526ae465bb0.roa
File:                     0b8d58a0-6edf-3a4b-b4f4-a526ae465bb0.roa (raw, json)
Hash identifier:          4yxiaNq76k54h5Bc0lL8WCh5fYBxnv2z75UgN9m3ZtQ=
Subject key identifier:   F0:52:14:22:5E:48:94:02:85:88:A0:4B:06:AD:60:8F:34:40:14:31
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFD8F1FC6E10A9898D5D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b8d58a0-6edf-3a4b-b4f4-a526ae465bb0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:d8:f1:fc:6e:10:a9:89:8d:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=0973f60f-6384-4f16-965a-0cc5d9877187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:d7:78:c7:10:d4:2f:6f:d0:04:e2:23:25:
                    8d:0c:52:94:37:37:56:d2:81:39:e9:29:81:e6:99:
                    8a:b2:69:3c:22:25:e7:51:42:68:4e:a3:1d:1c:d5:
                    24:c6:2c:f2:be:de:7d:09:43:ea:3b:44:24:8d:29:
                    c2:0f:b1:88:16:f4:fc:6e:45:26:46:ac:d4:bc:ee:
                    a3:aa:9c:bc:de:c0:23:c8:83:a4:97:77:45:bf:4c:
                    60:52:11:ca:5c:ad:a9:e2:e4:b7:c7:31:eb:f7:07:
                    88:4b:61:c1:a0:bf:ba:a3:59:b8:4d:66:1d:61:e8:
                    31:c6:34:7c:37:9e:a0:34:77:56:01:d7:5c:8c:17:
                    62:96:b5:2e:7a:aa:34:d5:3c:2e:9e:97:23:8e:3c:
                    59:cf:4f:de:46:db:4f:96:0e:cf:d2:80:ed:21:52:
                    43:fe:39:18:34:d5:fb:28:2d:4f:2e:45:95:f9:cd:
                    60:ae:11:ea:07:3e:c6:ad:27:16:1f:d6:82:0b:6b:
                    78:e4:17:cf:79:d7:19:c4:50:5d:e3:4c:92:37:df:
                    67:b7:84:19:a6:cb:53:ef:e8:65:7f:98:5a:3b:91:
                    f5:73:33:f1:d1:37:c3:1e:8e:e4:9b:8a:b0:ba:13:
                    5d:ae:f9:a4:b4:1a:60:7a:72:97:55:ba:54:9e:ea:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:52:14:22:5E:48:94:02:85:88:A0:4B:06:AD:60:8F:34:40:14:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b8d58a0-6edf-3a4b-b4f4-a526ae465bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:f2:30:78:12:fc:b8:be:1b:90:16:61:57:ab:94:94:cc:f5:
         00:57:ec:a5:35:f7:80:b1:d4:e8:77:85:3e:60:3b:60:b5:7f:
         d9:19:9c:93:c9:54:f1:2e:8a:9b:de:fe:b2:16:b0:74:f5:91:
         b8:2a:1b:aa:39:6c:dd:0f:c5:16:40:06:2f:c3:6e:c8:c5:44:
         54:1c:d5:1c:c7:a0:25:78:f3:8a:1d:fe:e3:f1:d5:b6:ba:eb:
         0e:77:4c:81:27:82:81:d9:aa:f4:aa:3b:bb:ed:eb:a9:94:a4:
         0c:7b:ba:4d:88:70:af:fd:ed:74:7e:10:5a:32:54:a1:e9:a4:
         23:c2:9b:50:61:ae:f3:a2:b2:9e:70:2b:36:88:3e:17:99:32:
         fb:a2:de:eb:ea:6e:7d:30:c9:5a:57:90:4d:da:83:90:49:ed:
         1e:10:47:9d:eb:36:ff:b5:26:f4:9c:58:c7:48:36:08:1b:4d:
         65:3f:d6:63:44:ff:1b:17:1e:ed:9a:c9:0d:bd:92:34:3a:90:
         1d:76:5b:7f:2e:fa:a9:6b:c4:6f:e7:d7:65:33:bc:d2:48:59:
         13:34:a3:27:b3:cd:cd:f9:64:ed:9a:ad:e3:33:78:7f:45:f4:
         94:3f:42:51:ce:1a:b9:3f:70:49:d0:f0:e6:e3:1a:31:d9:b8:
         fb:0b:0c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:13:07 2026 by rpki-client