Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ea5ee27-6a9c-3808-bd87-7e53684ea18e.roa
File:                     2ea5ee27-6a9c-3808-bd87-7e53684ea18e.roa (raw, json)
Hash identifier:          nPHy9RvLBHXF6Td0t8aTVWm5b8YwC8o8kqn+JyRVR4Y=
Subject key identifier:   D0:2C:AC:BC:88:7E:71:D8:9C:39:0E:E6:3C:CB:A1:EF:E4:BF:26:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFCF015F5E46EA374DE880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ea5ee27-6a9c-3808-bd87-7e53684ea18e.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.106.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:cf:01:5f:5e:46:ea:37:4d:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=795e4f7b-b3be-4ef0-a202-3ca711e98c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:52:4e:69:4e:12:1b:1a:c9:3e:b0:89:d2:
                    b6:e6:03:01:e5:2b:e0:d6:9a:8a:2b:06:52:b9:5f:
                    22:c8:c1:dd:f0:0c:cc:69:55:f4:24:4c:d1:fc:c0:
                    14:07:27:47:da:ef:ee:30:c8:6e:50:f9:75:48:75:
                    0b:c8:df:ac:d8:01:3c:07:4c:a2:b8:7b:d9:5c:18:
                    01:f2:99:e2:26:5f:32:bb:0d:42:93:5f:b5:3c:fd:
                    55:50:d5:48:0c:b1:11:34:1e:2a:ad:64:46:87:21:
                    68:00:3c:a6:ca:6b:65:fd:7e:a6:39:10:cf:4a:8b:
                    2c:09:3f:3d:05:6e:33:76:1e:20:e0:be:88:a3:8c:
                    f3:0a:97:cf:8a:12:e9:fe:9f:65:30:12:4b:8a:af:
                    b9:c7:d8:cd:f0:ba:8b:a0:87:17:f1:8e:a0:02:0b:
                    80:f3:69:22:b2:1b:6e:fd:e0:c6:79:06:f3:ac:b6:
                    08:91:64:d0:1a:20:ac:61:c7:d5:a4:d7:0f:04:20:
                    b2:2d:c1:51:cc:48:07:da:e8:61:87:70:93:fb:08:
                    13:68:42:37:a1:56:96:f1:e2:b8:4e:0b:3e:38:10:
                    f5:e7:cc:39:10:15:29:bc:41:db:89:af:d7:4c:32:
                    26:e4:be:8e:11:b6:23:b3:7f:9e:2a:5a:34:bd:14:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2C:AC:BC:88:7E:71:D8:9C:39:0E:E6:3C:CB:A1:EF:E4:BF:26:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ea5ee27-6a9c-3808-bd87-7e53684ea18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:1d:bb:26:8b:d0:2d:e9:52:6c:80:85:e1:06:7b:83:7d:ad:
         33:f5:c7:7a:d6:19:48:6b:24:9a:6a:c9:78:74:64:c0:9f:fd:
         72:47:f7:bf:a1:ac:ef:dd:85:28:64:77:d3:d6:c8:f9:83:8b:
         3a:b0:0f:1b:8c:fb:15:c2:61:2c:b0:75:93:c6:ec:97:40:ec:
         c1:5f:70:be:30:a3:26:ca:a4:b1:38:be:34:23:24:3a:56:e6:
         22:38:4e:31:c0:23:cf:1e:ed:7a:0b:e4:d7:8f:05:f0:f6:9c:
         21:4f:20:a3:dc:26:1e:41:13:65:18:9b:1e:24:c5:c4:6f:f6:
         a2:7c:b4:af:7a:c4:fc:d0:a8:b2:5e:11:3c:e1:16:bd:a6:0b:
         54:ab:a3:84:65:8b:5e:49:d4:15:fb:fe:8b:36:69:cd:95:a2:
         92:ae:b6:6e:23:59:60:7a:d8:e7:61:8a:99:fb:ea:86:e4:3c:
         ff:fd:d7:c6:37:28:4f:ae:20:83:a2:22:49:4e:5b:2a:ed:88:
         67:5c:a5:c3:b7:fe:46:38:a7:03:51:ab:b9:b4:18:9a:70:00:
         4b:39:8d:91:f5:f1:01:96:0d:cb:2b:de:c8:a3:dd:6a:61:41:
         c2:33:94:36:3a:e0:8c:4b:85:95:fe:8b:d3:4d:6e:7d:ec:ba:
         94:31:31:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:48 2026 by rpki-client