Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/93afe960-704e-36e7-857a-41cc89d65f41.roa
File:                     93afe960-704e-36e7-857a-41cc89d65f41.roa (raw, json)
Hash identifier:          cUuubS/1uCFbLtqVrcJOx6DBgmQCXbnfywjEBUc+JFU=
Subject key identifier:   02:F8:BF:CD:90:E5:D0:68:1F:BA:A9:3E:7A:9D:3C:B8:CF:C4:D7:79
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49837E0FC30D1912EFF47B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/93afe960-704e-36e7-857a-41cc89d65f41.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.107.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:7e:0f:c3:0d:19:12:ef:f4:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f68fa032-ce67-49bb-a4dc-6e99981126d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:78:a6:8d:03:90:0f:b5:08:5e:6d:35:9b:
                    35:d4:40:df:11:4b:91:61:d2:d1:52:ec:fe:07:26:
                    92:e1:8b:c7:73:86:b8:67:b5:76:84:10:ea:4e:2f:
                    59:8f:38:a1:cf:75:0b:fb:ec:d7:90:5f:9d:18:2a:
                    28:55:5c:37:f3:27:6f:08:6e:31:7d:cd:99:a0:6f:
                    28:c6:0d:7b:9c:2f:1c:4e:0f:81:ca:42:09:fd:ca:
                    0f:38:01:e9:7a:6e:5d:b2:00:44:a3:41:e8:09:c6:
                    44:34:30:11:0a:0b:ea:4b:d0:3d:5d:dc:b8:0d:78:
                    06:ce:9f:08:82:21:9d:1a:73:8a:6c:4d:9d:c9:00:
                    29:a2:6d:90:ec:31:b5:5d:4b:88:14:d6:c3:69:52:
                    96:63:36:6d:c4:72:eb:c2:b2:e4:88:12:8d:28:fb:
                    d9:19:8c:0d:d4:cd:0f:ec:21:38:e0:96:32:81:12:
                    dc:78:05:a2:56:16:96:1c:6e:38:1e:b9:cb:4f:ae:
                    9a:59:f6:4e:00:04:41:d2:b9:54:c6:e5:8f:78:b3:
                    c9:51:f6:d3:22:08:00:b2:a3:d4:b7:f9:1a:89:3f:
                    24:70:62:ed:71:d2:ff:79:d6:da:67:a0:2c:85:0a:
                    cb:55:86:ea:2e:8b:e8:b5:16:a2:e6:ac:55:6c:14:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F8:BF:CD:90:E5:D0:68:1F:BA:A9:3E:7A:9D:3C:B8:CF:C4:D7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/93afe960-704e-36e7-857a-41cc89d65f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:73:68:95:20:fc:69:58:ad:dc:71:99:1c:fc:5c:82:d2:6e:
         77:59:b2:96:04:31:26:14:84:c4:3b:09:56:ea:50:5f:85:ac:
         29:9d:b2:49:f3:96:ef:d1:c5:8a:23:f8:b9:aa:af:e9:4d:b3:
         98:57:c3:b2:23:5a:ef:cd:3a:38:a7:b7:25:b8:f4:4f:90:c9:
         23:0c:e7:01:8a:34:c5:48:35:9c:a3:8a:c5:e5:f7:9b:83:ca:
         de:76:3a:97:9c:93:4c:26:4e:01:61:f0:1a:d5:2e:f6:84:85:
         c7:e4:13:45:bf:7e:df:a1:a2:54:07:07:a9:24:a5:45:29:2c:
         8b:d9:2a:62:36:21:d0:9e:16:cb:0d:2f:41:37:97:f9:8a:24:
         f4:a2:ed:5f:4e:be:68:57:39:cf:7d:f0:65:81:7a:83:94:6a:
         60:8b:b8:16:1b:7a:f9:d4:7b:1c:92:c8:69:14:a8:6f:e6:a8:
         3d:81:3d:7a:5f:67:b5:8e:bf:25:9d:9e:ae:a6:28:99:5e:fe:
         c7:58:00:44:b4:5a:9c:9c:eb:56:b1:dd:b9:d7:56:27:28:91:
         59:c1:4e:8d:c0:da:db:8d:17:3f:6f:02:29:6b:af:fc:36:03:
         52:a4:6f:52:49:6b:ef:65:4e:d6:b9:ea:e5:32:e0:15:4c:c8:
         7f:f5:ec:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg34Pww0ZEu/0e4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjY4ZmEwMzItY2U2Ny00OWJiLWE0ZGMtNmU5OTk4MTEyNmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWt4po0DkA+1CF5tNZs11EDfEUuRYdLRUuz+
ByaS4YvHc4a4Z7V2hBDqTi9Zjzihz3UL++zXkF+dGCooVVw38ydvCG4xfc2ZoG8o
xg17nC8cTg+BykIJ/coPOAHpem5dsgBEo0HoCcZENDARCgvqS9A9Xdy4DXgGzp8I
giGdGnOKbE2dyQApom2Q7DG1XUuIFNbDaVKWYzZtxHLrwrLkiBKNKPvZGYwN1M0P
7CE44JYygRLceAWiVhaWHG44HrnLT66aWfZOAARB0rlUxuWPeLPJUfbTIggAsqPU
t/kaiT8kcGLtcdL/edbaZ6AshQrLVYbqLovotRai5qxVbBRw5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAL4v82Q5dBoH7qpPnqdPLjPxNd5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTNhZmU5NjAtNzA0ZS0z
NmU3LTg1N2EtNDFjYzg5ZDY1ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2v/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJlzaJUg/GlYrdxxmRz8XILSbndZspYEMSYUhMQ7CVbqUF+FrCmdsknz
lu/RxYoj+Lmqr+lNs5hXw7IjWu/NOjintyW49E+QySMM5wGKNMVINZyjisXl95uD
yt52Opeck0wmTgFh8BrVLvaEhcfkE0W/ft+holQHB6kkpUUpLIvZKmI2IdCeFssN
L0E3l/mKJPSi7V9OvmhXOc998GWBeoOUamCLuBYbevnUexySyGkUqG/mqD2BPXpf
Z7WOvyWdnq6mKJle/sdYAES0Wpyc61ax3bnXVicokVnBTo3A2tuNFz9vAilrr/w2
A1Kkb1JJa+9lTta56uUy4BVMyH/17Jc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:38:13 2026 by rpki-client