Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3737f2d8-1105-372c-aa6d-b69699127652.roa
File:                     3737f2d8-1105-372c-aa6d-b69699127652.roa (raw, json)
Hash identifier:          99SzImdsKE+nbc/Kw3ZbAi4dkcn2ao0rE3xsz4rKrFM=
Subject key identifier:   1D:3E:56:B1:FA:5D:D9:4F:FB:8F:AC:62:1D:3E:19:01:91:B9:B9:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B50E26819666ED71D8500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3737f2d8-1105-372c-aa6d-b69699127652.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.107.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:50:e2:68:19:66:6e:d7:1d:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cea5b64d-c576-4073-b1db-8038ff4a5c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:23:7d:a7:71:8c:3c:a6:46:3b:e2:97:db:
                    0f:cd:72:89:64:70:20:80:93:42:4d:4f:e9:b7:34:
                    10:81:f8:0e:20:27:cc:ac:78:b9:4e:b5:b4:05:6b:
                    74:e8:49:8a:d0:f6:8d:56:61:98:48:d6:60:9b:cc:
                    8f:bb:f7:a7:7c:26:e4:01:59:8b:74:72:19:92:e0:
                    54:22:8f:82:07:34:e0:32:9a:6c:71:bc:83:c3:88:
                    cc:84:cb:6d:d6:c3:6c:0f:31:1a:c6:6f:4c:2a:e7:
                    2e:56:2b:20:78:bf:c0:4b:93:17:72:15:00:c3:c1:
                    78:80:b3:1d:c7:c5:c4:00:5d:ea:8f:ea:45:e9:32:
                    fb:c1:cb:fc:c5:82:b3:9a:a4:18:ab:95:99:93:1a:
                    52:56:3f:ad:d9:8c:ce:48:93:56:f6:db:62:06:01:
                    67:f3:60:0d:c1:1f:2a:b4:f7:1e:23:10:3b:01:e1:
                    37:f7:7b:95:98:f8:8c:8d:c0:59:e3:51:17:fd:84:
                    7e:e9:49:f9:8c:dc:83:b5:96:9f:a9:45:ea:16:16:
                    5d:ea:29:56:17:c3:47:99:46:78:ef:87:57:e6:3d:
                    69:97:00:77:2d:84:aa:8f:d1:f2:ce:f1:0f:d1:3a:
                    78:79:09:34:4f:40:07:a0:48:8a:fd:21:42:09:f7:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:56:B1:FA:5D:D9:4F:FB:8F:AC:62:1D:3E:19:01:91:B9:B9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3737f2d8-1105-372c-aa6d-b69699127652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a5:af:47:79:31:d2:a0:f2:be:58:d0:75:9e:e7:ea:6d:a2:
         b7:ea:51:fd:5e:37:93:7d:97:03:27:b5:1c:11:56:72:a1:1e:
         bc:46:8b:51:57:39:6c:2d:d8:cd:c9:86:4a:fd:d8:48:29:eb:
         9b:1c:11:f7:8c:8f:8b:b2:ef:03:54:7e:af:a6:d8:20:ad:5e:
         26:9d:32:2b:83:bf:6f:d2:77:c8:c6:8c:54:6e:71:a0:f1:ad:
         99:dd:f6:dc:84:d2:5c:0b:9c:0b:51:bc:f7:6b:81:eb:d2:57:
         cb:f3:65:74:4d:80:84:f5:f4:a7:fb:eb:ee:93:fa:28:9c:cd:
         6f:ad:31:f6:7d:a5:20:57:65:29:18:b1:48:58:a7:6e:5d:e2:
         86:7e:49:c3:e0:a8:2c:ca:c8:8c:86:f7:42:09:c6:35:cd:0a:
         b9:3e:b7:99:02:76:fe:bb:a3:d2:f4:1d:15:9c:e3:f7:75:d8:
         97:7f:18:68:02:5a:95:04:0d:77:46:15:71:cc:42:43:73:6c:
         37:49:29:60:56:ad:f7:2f:79:c4:8a:7f:d2:bb:d7:36:42:f9:
         25:a9:fb:be:a8:49:6f:5e:2e:21:14:36:66:e5:82:dd:c7:75:
         0d:56:20:3c:b6:18:f3:d9:78:57:6e:32:48:7a:26:e9:fb:21:
         a8:44:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:27:01 2026 by rpki-client