Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d73965a-913d-31f4-b2e7-ee9878b04fe0.roa
File:                     1d73965a-913d-31f4-b2e7-ee9878b04fe0.roa (raw, json)
Hash identifier:          6mULMbMostb/9gTrJVZebwx9saSciMN6RqLuO9K1jDs=
Subject key identifier:   60:B2:D7:D3:8C:61:FE:4A:6F:A9:39:A5:FA:05:9A:52:8E:A4:E3:C2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B38506870301E1E180180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d73965a-913d-31f4-b2e7-ee9878b04fe0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.106.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:38:50:68:70:30:1e:1e:18:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fe8c9a9b-7231-4015-bec2-5f1431f5fe23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:00:49:61:11:0e:8e:bc:e2:b7:88:39:c0:
                    f5:5e:d6:c3:83:98:a5:00:d2:fb:b2:fd:c2:60:c9:
                    50:43:c4:39:13:30:c3:81:83:48:d4:98:b9:fc:62:
                    7d:40:63:13:b2:11:ef:92:cd:1d:de:3c:04:10:e7:
                    e1:09:1e:99:be:da:fd:cc:23:34:0e:11:2d:fe:ed:
                    70:90:36:fe:fe:9c:93:a3:0a:9c:c2:6a:4b:b6:bd:
                    c9:10:ae:25:c4:7e:7e:a5:03:47:e4:c2:98:24:3e:
                    27:a5:3f:dc:48:5c:09:cc:9e:11:e2:2c:b9:45:81:
                    eb:70:72:01:6b:6a:2b:bd:16:6f:88:b0:68:e2:66:
                    8e:bf:7c:ed:e9:91:53:9e:b2:c0:ec:38:1a:67:93:
                    24:32:f0:be:27:82:e8:3b:7b:a5:db:8e:26:f1:3a:
                    15:63:cf:98:8a:e6:0c:fb:53:66:a5:1d:f8:c8:1f:
                    5f:c3:b4:23:ac:74:f8:28:a9:db:2c:5f:38:a3:d7:
                    8a:fb:3d:17:fd:b5:ec:b4:4a:be:01:16:8c:f9:76:
                    44:c1:85:fe:15:fa:2f:2c:84:20:38:34:a9:d5:35:
                    d8:7c:5e:6c:81:0a:85:15:78:bb:d0:da:87:1c:ad:
                    a3:88:ab:c8:13:bb:0f:01:a8:6a:b2:cd:ce:ab:35:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:D7:D3:8C:61:FE:4A:6F:A9:39:A5:FA:05:9A:52:8E:A4:E3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d73965a-913d-31f4-b2e7-ee9878b04fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:41:fe:37:6e:ca:ec:48:67:b5:a3:bb:72:c0:cd:e2:99:e0:
         12:9e:a1:82:b1:ae:ff:60:ae:e8:b4:f4:dc:06:c4:fc:7f:64:
         be:c9:50:f4:31:85:02:85:83:bd:2c:74:63:ec:04:b1:3d:fd:
         08:b7:5d:75:5d:7a:3c:f7:bf:90:6f:98:91:17:83:a1:88:7d:
         44:77:e1:e6:27:a5:1f:7c:02:1f:c4:02:e5:48:ba:ec:d1:64:
         69:df:d9:24:8b:90:41:d8:3c:a0:1b:e3:52:d9:1e:42:72:b7:
         6d:92:38:cd:87:da:34:b5:aa:e2:0d:b0:18:e9:9b:b5:19:8c:
         65:4b:d0:3a:10:e1:35:16:0e:ce:a8:6d:e0:3c:78:7e:2b:0e:
         74:4a:1d:11:22:48:41:6a:70:47:05:bf:16:c1:65:ee:22:e7:
         e5:ae:c6:e3:7c:fc:39:fd:7c:18:c5:13:6f:92:ed:46:df:3f:
         2f:0f:9a:3d:f8:e0:23:f8:a4:ea:33:58:5a:b6:1d:58:3d:24:
         5a:5f:d7:3b:51:f5:c2:24:d0:f3:dc:05:61:b9:35:e5:c0:0d:
         ae:ee:d2:fe:fd:e0:be:e4:99:27:d7:3b:1c:af:70:b2:72:1f:
         71:29:5b:73:ff:28:35:83:a4:93:64:a7:95:39:c3:68:f5:9f:
         51:12:f1:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JezhQaHAwHh4YAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmU4YzlhOWItNzIzMS00MDE1LWJlYzItNWYxNDMxZjVmZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfsASWERDo684reIOcD1XtbDg5ilANL7sv3C
YMlQQ8Q5EzDDgYNI1Ji5/GJ9QGMTshHvks0d3jwEEOfhCR6Zvtr9zCM0DhEt/u1w
kDb+/pyTowqcwmpLtr3JEK4lxH5+pQNH5MKYJD4npT/cSFwJzJ4R4iy5RYHrcHIB
a2orvRZviLBo4maOv3zt6ZFTnrLA7DgaZ5MkMvC+J4LoO3ul244m8ToVY8+YiuYM
+1NmpR34yB9fw7QjrHT4KKnbLF84o9eK+z0X/bXstEq+ARaM+XZEwYX+FfovLIQg
ODSp1TXYfF5sgQqFFXi70NqHHK2jiKvIE7sPAahqss3OqzVjsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCy19OMYf5Kb6k5pfoFmlKOpOPCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWQ3Mzk2NWEtOTEzZC0z
MWY0LWIyZTctZWU5ODc4YjA0ZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2o0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9B/jduyuxIZ7Wju3LAzeKZ4BKeoYKxrv9grui09NwGxPx/ZL7JUPQx
hQKFg70sdGPsBLE9/Qi3XXVdejz3v5BvmJEXg6GIfUR34eYnpR98Ah/EAuVIuuzR
ZGnf2SSLkEHYPKAb41LZHkJyt22SOM2H2jS1quINsBjpm7UZjGVL0DoQ4TUWDs6o
beA8eH4rDnRKHREiSEFqcEcFvxbBZe4i5+WuxuN8/Dn9fBjFE2+S7UbfPy8Pmj34
4CP4pOozWFq2HVg9JFpf1ztR9cIk0PPcBWG5NeXADa7u0v794L7kmSfXOxyvcLJy
H3EpW3P/KDWDpJNkp5U5w2j1n1ES8bM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:14:39 2026 by rpki-client