Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/200fd10c-7c60-3304-b439-da44504d729a.roa
File:                     200fd10c-7c60-3304-b439-da44504d729a.roa (raw, json)
Hash identifier:          0pGcxh8c6igif5/GFHbY8XdKIDgWAojEPyCFJkIZlVc=
Subject key identifier:   CC:F8:FD:B6:72:63:82:DC:0C:E8:BC:B8:0D:50:86:93:02:1E:58:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0878FB0189220506F7600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/200fd10c-7c60-3304-b439-da44504d729a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:87:8f:b0:18:92:20:50:6f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=3ac06233-1a19-4bed-aca8-0081ab20deee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:a1:a9:06:a6:ab:73:c7:64:46:ed:bd:1c:
                    30:7e:6a:a6:2c:af:ef:7f:05:d7:23:e7:6c:5f:db:
                    4f:38:10:19:a0:ee:d3:9d:94:b3:b6:1d:f9:7b:36:
                    20:09:9d:04:a3:6f:5d:d6:79:f0:b6:2e:72:3c:da:
                    5f:ae:61:c4:58:03:73:45:77:b2:dc:8b:b7:77:98:
                    33:79:ef:72:71:97:07:77:1c:2f:a6:ce:16:2f:1c:
                    f1:28:a4:64:37:48:07:39:48:3d:7d:3d:86:b1:d3:
                    4d:78:23:9d:fc:cc:b6:73:ea:cd:62:1c:1f:42:b6:
                    16:f0:c8:2f:e9:cd:a3:bf:c4:df:8c:f0:f7:a5:ab:
                    10:9a:3b:b3:2f:52:8f:e8:af:82:ff:92:1f:c6:c9:
                    34:65:9f:13:49:ce:0c:be:c3:b2:45:de:00:a1:f1:
                    46:0c:d6:0e:58:11:0f:37:4d:55:3a:0d:c9:40:90:
                    d6:db:59:b8:2e:13:a0:d5:0b:43:dd:f7:a7:68:80:
                    6e:31:46:0c:31:41:ad:04:73:1c:da:49:85:48:b5:
                    a0:7b:a5:c9:d2:59:1a:e0:fc:c1:7a:36:77:de:57:
                    2b:3b:8e:52:aa:e0:95:63:7c:cc:d4:69:b3:fe:a4:
                    a4:05:0b:60:c3:42:55:8b:59:18:04:b0:6a:e6:27:
                    61:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F8:FD:B6:72:63:82:DC:0C:E8:BC:B8:0D:50:86:93:02:1E:58:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/200fd10c-7c60-3304-b439-da44504d729a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:d9:1c:e2:5f:a7:22:96:8a:82:7a:c9:91:62:ba:e0:cd:
         2d:ff:bf:34:ed:fd:ef:9c:bf:b5:5d:c3:f5:5b:28:9a:f6:0b:
         5c:07:da:d8:fa:11:57:45:97:e7:4d:11:0b:b7:9d:19:43:88:
         9a:48:0f:30:9e:bd:e9:33:92:7e:8e:53:81:c9:9c:ab:ee:b7:
         f1:00:c9:de:b2:47:f5:68:3f:c8:aa:41:7f:b8:c5:dd:13:af:
         1b:8a:2d:b4:1c:46:9e:ae:67:18:68:ac:81:d0:3a:3d:78:74:
         bb:25:8c:80:57:ab:14:43:0b:dc:8b:a3:35:06:86:41:00:8e:
         17:ac:a7:37:69:84:2e:c0:d8:be:53:16:23:c0:b9:6a:41:0e:
         f4:99:fb:45:7c:5a:cd:0b:0f:a3:22:1f:78:71:1e:12:33:bf:
         64:0a:6e:bc:b2:f5:b2:b6:15:4b:ac:f8:79:f9:ea:25:ae:de:
         e4:9f:30:19:7a:63:30:71:4e:34:70:97:c1:5b:e2:c2:f4:72:
         ba:19:fd:f7:29:ab:dd:bb:f8:fb:25:cc:3e:49:85:e6:19:b8:
         56:8f:2b:76:7d:01:e6:de:90:20:0d:a3:67:2e:76:02:ff:e2:
         c1:6d:08:5c:f4:91:27:2f:3f:2b:ec:cb:b8:1e:d7:58:87:e6:
         c1:6d:43:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:50 2026 by rpki-client