Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87aee5f0-dfe5-3775-922b-9bb920326ef0.roa
File:                     87aee5f0-dfe5-3775-922b-9bb920326ef0.roa (raw, json)
Hash identifier:          ikCVP0z05/P795pCmZ+UabmglDleMiP5uQXqwWmlluo=
Subject key identifier:   3B:59:07:91:F2:30:6F:09:29:F0:DF:8E:31:88:0A:56:58:CC:8D:3E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E08C690DDE97E724D658C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87aee5f0-dfe5-3775-922b-9bb920326ef0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:8c:69:0d:de:97:e7:24:d6:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=9f055944-8b9e-43e0-bfd6-7556a95f8527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:04:b0:34:82:51:de:a8:61:9a:5d:d8:89:73:
                    fc:91:d1:ff:fd:16:96:1e:ef:73:6b:20:c6:cb:2b:
                    f0:b0:2c:5d:4a:56:62:be:58:73:3e:a3:41:99:50:
                    2f:59:52:d7:a4:11:d6:b5:8e:d9:8a:cc:d0:20:c8:
                    d6:08:d3:af:1e:f6:72:9d:5d:3a:63:4f:c3:60:35:
                    99:87:1f:46:46:3d:69:85:34:3b:63:11:8e:4b:30:
                    4a:5c:56:92:21:a0:f9:bd:be:25:42:00:97:f9:c8:
                    6e:95:d2:b2:91:99:88:a2:2f:27:03:87:d7:dc:70:
                    dd:bf:a0:e8:c6:ea:5d:bf:02:78:db:e7:e9:ea:55:
                    13:e3:64:bc:0f:ea:40:a4:b0:de:39:ef:8a:59:67:
                    fe:9f:69:69:56:32:74:7f:f0:c2:da:52:34:45:d0:
                    8f:b7:63:a0:ac:4f:3c:b0:81:24:12:4d:b5:5a:64:
                    9f:bc:26:57:26:19:b2:86:13:0b:61:14:9b:17:fe:
                    ac:53:11:cb:97:3f:66:ab:70:e5:02:50:a7:11:c2:
                    f1:38:ec:27:74:32:6e:a0:60:ee:62:04:36:35:47:
                    5e:2e:fb:73:33:4e:c9:80:0d:21:c3:61:cd:0f:02:
                    7a:86:49:5a:3b:9d:f4:b2:02:ed:c2:6e:6b:75:07:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:59:07:91:F2:30:6F:09:29:F0:DF:8E:31:88:0A:56:58:CC:8D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87aee5f0-dfe5-3775-922b-9bb920326ef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:f7:a8:10:88:2e:d9:cc:ab:58:74:a4:2f:38:f8:ec:11:c1:
         9a:2e:7c:0e:ec:08:02:df:c2:9a:8e:c4:dd:85:d2:70:fc:e5:
         4c:ae:ef:9b:e7:0a:8a:24:0f:a7:4e:b2:77:1c:c4:27:3a:4d:
         42:c4:8d:b6:c6:71:8a:df:76:fe:89:9d:c7:e9:ae:da:2c:35:
         55:45:29:e8:61:48:aa:24:0b:31:af:48:3a:2d:63:89:22:b5:
         00:0e:bd:9f:0a:38:63:35:b3:36:ca:00:d3:9c:80:56:46:78:
         22:cb:86:20:7a:b3:ff:60:fc:67:f2:95:1a:b9:64:5a:bc:d3:
         ec:6c:f0:fc:51:bb:c5:db:1e:6c:58:19:57:c8:68:4a:46:d9:
         6b:82:bd:a0:43:96:97:a5:ef:ab:24:da:d5:27:77:18:e5:4a:
         55:a8:ad:94:44:68:34:22:f0:54:5d:af:30:e6:22:ad:8d:9b:
         56:9d:aa:55:46:79:fc:2e:00:a2:c4:b0:bf:fe:9a:f9:e6:e7:
         1d:2d:10:9b:97:70:a6:ed:60:3b:08:03:57:37:09:2e:13:03:
         6e:5f:c1:cb:1e:b4:c4:ee:8b:5a:0f:31:9a:33:e7:f6:a1:50:
         7e:65:18:64:b4:2d:f4:84:46:10:dd:b7:15:92:2a:68:f5:24:
         82:ae:e9:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4IxpDd6X5yTWWMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
OWYwNTU5NDQtOGI5ZS00M2UwLWJmZDYtNzU1NmE5NWY4NTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwSwNIJR3qhhml3YiXP8kdH//RaWHu9zayDG
yyvwsCxdSlZivlhzPqNBmVAvWVLXpBHWtY7ZiszQIMjWCNOvHvZynV06Y0/DYDWZ
hx9GRj1phTQ7YxGOSzBKXFaSIaD5vb4lQgCX+chuldKykZmIoi8nA4fX3HDdv6Do
xupdvwJ42+fp6lUT42S8D+pApLDeOe+KWWf+n2lpVjJ0f/DC2lI0RdCPt2OgrE88
sIEkEk21WmSfvCZXJhmyhhMLYRSbF/6sUxHLlz9mq3DlAlCnEcLxOOwndDJuoGDu
YgQ2NUdeLvtzM07JgA0hw2HNDwJ6hklaO530sgLtwm5rdQca8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtZB5HyMG8JKfDfjjGIClZYzI0+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODdhZWU1ZjAtZGZlNS0z
Nzc1LTkyMmItOWJiOTIwMzI2ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2v2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANH3qBCILtnMq1h0pC84+OwRwZoufA7sCALfwpqOxN2F0nD85Uyu75vn
CookD6dOsnccxCc6TULEjbbGcYrfdv6JncfprtosNVVFKehhSKokCzGvSDotY4ki
tQAOvZ8KOGM1szbKANOcgFZGeCLLhiB6s/9g/GfylRq5ZFq80+xs8PxRu8XbHmxY
GVfIaEpG2WuCvaBDlpel76sk2tUndxjlSlWorZREaDQi8FRdrzDmIq2Nm1adqlVG
efwuAKLEsL/+mvnm5x0tEJuXcKbtYDsIA1c3CS4TA25fwcsetMTui1oPMZoz5/ah
UH5lGGS0LfSERhDdtxWSKmj1JIKu6Xs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:28 2026 by rpki-client