Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cae87a-524a-3524-bf4a-7dbc24a66778.roa
File:                     29cae87a-524a-3524-bf4a-7dbc24a66778.roa (raw, json)
Hash identifier:          hEycxNjLxRtrw5fZ5Eyu5nbW/EoSadzAsyD7hDNEMNI=
Subject key identifier:   F8:EA:68:C1:04:08:DD:14:46:EB:4E:38:EA:D8:2D:58:55:A2:1D:DB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B51037324AC6327C12640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cae87a-524a-3524-bf4a-7dbc24a66778.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.107.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:51:03:73:24:ac:63:27:c1:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bd653d19-2ae5-4328-be58-cd54afcabc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:a4:f0:89:1e:f8:e1:b0:26:b1:f0:f9:98:
                    81:f5:8c:30:8d:88:ae:6e:ac:65:37:14:84:dd:0f:
                    8d:21:db:7b:0a:10:ba:98:ea:f2:e2:af:1a:f9:f5:
                    57:f0:09:a7:4f:bf:47:3a:79:3c:ca:5a:e4:6e:d2:
                    a5:50:14:d9:90:db:e0:45:4c:85:48:c2:52:65:f4:
                    70:17:c7:6b:d0:28:a8:8e:e5:b6:fd:b5:d1:55:66:
                    7a:72:7a:b0:68:68:a9:ef:c3:9d:d1:17:83:e0:44:
                    70:8a:fd:90:51:c2:49:8c:6b:f6:fa:b7:3a:dc:39:
                    ab:a2:af:19:ac:c4:07:8f:af:61:93:9f:1d:4b:d5:
                    69:30:24:19:1f:ae:b1:a8:3e:5c:d3:db:8f:9f:32:
                    9b:3c:22:03:10:b8:d8:19:58:ed:0c:96:00:08:a2:
                    df:96:ff:ea:45:e1:17:47:7f:be:3c:ae:9d:91:23:
                    07:12:7c:09:dc:ae:d5:d5:84:44:df:9a:a1:17:9b:
                    64:66:44:4d:f1:a0:51:2b:e7:49:bb:12:f9:12:d7:
                    c8:d1:80:2b:72:74:96:6b:4f:ee:1c:2e:51:25:5d:
                    5d:d3:4e:fa:5b:1d:03:2f:c5:2b:33:75:75:7f:14:
                    01:85:d2:d1:7f:16:ff:d3:bc:3f:2f:7b:b5:c1:2f:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:68:C1:04:08:DD:14:46:EB:4E:38:EA:D8:2D:58:55:A2:1D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29cae87a-524a-3524-bf4a-7dbc24a66778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:77:21:ca:c0:14:15:77:1d:f3:ab:49:6c:3e:22:e8:09:
         39:62:78:ae:d3:cd:77:c2:90:d8:ae:84:19:ad:a3:8e:f3:31:
         4f:ae:d5:66:51:33:76:ab:b3:17:ca:44:e2:e4:aa:2e:0c:24:
         ee:49:42:c7:cc:8c:57:e8:da:0d:2f:88:1f:4b:b6:b3:61:82:
         9f:05:b1:dc:ad:62:01:ae:91:9a:9d:fa:7f:34:11:ab:23:d4:
         d9:e3:18:3a:65:35:c4:1a:6a:9f:f7:9f:75:84:cb:68:b9:51:
         bd:63:a4:57:ca:3e:39:12:ab:e4:d2:27:3d:f7:ee:8d:26:02:
         4a:c8:f2:0a:4a:a7:61:a7:28:d9:21:2f:1c:79:a8:44:de:b0:
         0a:19:f5:60:52:5d:59:c4:46:21:09:e4:72:d5:51:89:c7:1f:
         32:0e:10:ff:ce:d7:4c:9b:20:51:17:0b:1a:f6:e4:fa:91:35:
         d6:45:10:2b:e1:15:ad:b3:a4:ec:a3:a1:aa:22:c5:21:31:8f:
         be:4a:9a:34:6a:64:90:14:d2:81:70:b4:f9:dc:d4:93:24:7a:
         0e:c6:63:0e:a9:56:1c:d4:1e:5f:83:e8:f0:3c:eb:a2:db:4a:
         a9:fb:66:1e:66:98:7f:20:54:72:25:4c:34:31:91:67:b0:fb:
         7b:52:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 18:47:04 2026 by rpki-client