Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2798fcad-1027-3e7b-a5bd-66c09fc35285.roa
File:                     2798fcad-1027-3e7b-a5bd-66c09fc35285.roa (raw, json)
Hash identifier:          HDfCIIgwEeWoLzoamvf0MSJ3I96WHpidCm9teeTWbig=
Subject key identifier:   21:6E:8A:00:09:0E:AC:98:97:DB:5C:39:3B:7C:61:7A:F9:67:E6:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49834DA38BAFA19AD6CE9900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2798fcad-1027-3e7b-a5bd-66c09fc35285.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.105.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:4d:a3:8b:af:a1:9a:d6:ce:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0f5c530d-f5bc-45b4-98d3-05b804eafa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:85:c1:ea:dc:53:23:50:24:f0:9c:f9:3a:
                    21:18:24:78:f5:7e:56:cd:8f:79:26:15:1d:6a:44:
                    11:bb:37:19:e1:14:3f:5a:39:e8:cb:48:72:39:50:
                    39:3a:1b:eb:25:81:65:3c:a1:5b:46:7c:13:79:fb:
                    6d:23:d1:b5:ce:4d:56:0d:80:dc:27:b1:6e:9b:fe:
                    eb:51:ab:c2:37:7b:e0:f4:7a:39:f4:a3:e1:9e:88:
                    9a:fe:02:52:8e:39:ff:07:f0:bb:b5:d8:56:c0:c8:
                    1b:b6:78:f8:16:f0:d7:d1:d2:94:0a:09:b4:84:12:
                    8c:93:3d:c3:68:03:fd:ab:7c:d4:00:91:5f:d0:30:
                    0e:cb:ef:16:1a:1e:67:b6:2a:bf:ba:db:62:5c:57:
                    83:79:e2:d0:17:c5:f9:42:ee:f7:0b:c8:c0:f8:fc:
                    fe:44:c4:c3:97:87:7e:0d:f0:4d:70:ca:ba:a0:53:
                    96:ca:b7:e8:ef:f6:85:1e:dc:da:0a:7c:e8:5e:1f:
                    44:26:ed:fd:c0:5f:ad:d9:e2:6e:76:81:e7:6c:f9:
                    4d:31:67:ba:88:0f:ce:62:f3:96:9f:bf:ec:53:1b:
                    68:11:91:7f:11:8c:29:61:24:a7:79:f6:df:bd:d6:
                    81:d7:70:43:5e:bb:0f:45:73:af:2b:55:ec:4b:7e:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6E:8A:00:09:0E:AC:98:97:DB:5C:39:3B:7C:61:7A:F9:67:E6:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2798fcad-1027-3e7b-a5bd-66c09fc35285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6e:f6:58:e9:2d:42:8b:ce:ed:da:c4:c7:3c:90:79:fc:a7:
         e4:fe:ef:0f:2b:30:c3:14:05:ea:16:ff:28:10:0a:c9:06:10:
         22:fb:c1:73:34:02:d5:21:be:d2:f6:6d:0a:8c:84:de:67:8c:
         44:f9:64:be:e0:46:7b:b1:3b:bf:4b:e7:0c:b3:2d:d1:11:5d:
         d5:d4:50:0c:19:c0:b2:30:24:46:dc:36:b5:ca:b4:4f:e9:5c:
         45:c7:d3:0a:e9:9c:80:1e:4c:6c:a7:e9:77:bd:5a:63:3e:bb:
         4d:b3:e5:52:b4:d6:9c:f3:11:c4:00:ae:13:af:6e:f1:37:c2:
         c8:15:a7:7f:8d:e3:58:10:b8:63:08:b7:b2:84:5b:a5:dd:53:
         40:37:52:de:ff:8e:5d:a6:b1:cf:ed:53:08:9e:45:cc:9d:3c:
         37:ec:e8:7f:7e:44:c4:07:bf:69:87:98:2e:86:c8:b4:11:2f:
         a9:80:65:ac:86:d3:b2:66:b1:ba:7e:e5:7e:8e:3b:1b:c0:21:
         be:47:07:e3:b8:49:ea:45:99:b6:6d:e6:90:f3:21:e2:c8:21:
         9e:9d:32:8a:33:72:31:cb:cb:e0:e9:64:a6:6d:ae:25:95:a8:
         6f:b6:86:38:2f:db:63:60:4b:b8:55:cf:58:60:b1:a8:0d:d8:
         8c:ca:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:25:44 2026 by rpki-client