Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a149c674-aebc-348e-8e83-17a8adb28378.roa
File:                     a149c674-aebc-348e-8e83-17a8adb28378.roa (raw, json)
Hash identifier:          brYBcdATMQMfkq/lIohITTkQhfgzHkBDNzs7YCDoly4=
Subject key identifier:   13:CA:27:C2:AA:3C:BC:E1:DD:AB:A8:0E:A6:77:A7:E2:C4:BB:CB:8E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0854261CE650483EC6900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a149c674-aebc-348e-8e83-17a8adb28378.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:85:42:61:ce:65:04:83:ec:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=e16d6a2e-08a1-47b6-a141-3cf7ea9229cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:64:b7:84:19:6d:24:56:50:3d:93:85:1f:
                    99:b5:0d:8f:b0:e4:3e:13:bf:8d:44:ca:1a:71:f1:
                    64:c1:08:a7:71:85:18:2e:92:48:15:4f:e5:3a:79:
                    7e:55:c6:fa:2e:86:f5:96:0a:d8:e3:4a:cc:f6:03:
                    37:02:c4:f3:95:a8:73:e6:e4:4b:18:fb:0c:64:7c:
                    37:d0:99:87:83:9b:85:3b:c9:b3:fd:75:5c:3e:e5:
                    c3:ba:79:92:c6:4f:aa:59:41:56:ad:a1:ca:8a:25:
                    5e:63:00:79:b9:d2:07:fd:d3:43:c8:49:a4:79:ca:
                    0f:aa:9f:51:53:01:b2:01:c4:bd:5b:56:6e:3f:ec:
                    cb:33:cf:43:6b:65:56:4e:97:66:27:e8:7b:95:af:
                    43:c9:f1:b2:a7:f2:f6:ee:48:de:5d:b0:e4:e3:18:
                    33:ee:ec:3d:18:ef:b9:7c:a6:ce:41:a5:5d:e0:19:
                    d1:d3:62:23:7b:fb:d2:c1:5e:24:1b:b9:aa:40:64:
                    86:f6:4d:47:07:1f:3b:52:3e:54:cf:ee:33:c0:60:
                    f8:61:7c:7a:7a:37:f1:b0:e9:0d:21:db:fd:46:63:
                    91:71:50:2d:1f:76:b6:0d:89:0d:22:2b:e8:40:66:
                    05:8f:d4:d6:e1:0f:41:c5:90:04:1e:84:23:fe:4d:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CA:27:C2:AA:3C:BC:E1:DD:AB:A8:0E:A6:77:A7:E2:C4:BB:CB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a149c674-aebc-348e-8e83-17a8adb28378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:78:78:94:0c:b3:0e:bf:be:19:07:6b:f7:5c:d1:67:6c:64:
         60:10:ba:79:4e:65:ff:21:c8:80:0b:57:c9:e8:75:df:74:a7:
         e5:6f:68:54:c0:b6:d4:39:1d:4e:9c:64:cc:dd:45:15:ed:95:
         07:cd:3e:46:0a:61:a4:f9:54:ef:4a:ea:d4:4f:65:f6:7e:17:
         0e:27:b2:7d:7b:8c:14:1c:d8:88:af:92:d2:b0:6a:ac:92:e6:
         c4:3c:a6:31:cb:39:a0:7c:55:d6:b9:67:7c:99:0a:bc:95:a2:
         d3:96:f0:94:92:3a:bb:d6:b3:17:2a:42:dc:83:59:27:8d:8a:
         25:aa:40:fe:8f:df:d9:d5:94:e6:b4:32:59:87:50:7d:5c:2d:
         2c:c0:7e:0b:ae:27:8d:ca:44:b6:64:ab:6b:ab:4f:3f:93:48:
         57:01:35:88:91:44:a6:6c:0c:8a:b7:ba:c9:04:02:39:69:9b:
         b5:ef:04:a7:54:8b:db:7f:92:c8:98:4d:51:36:f7:c5:d7:32:
         4d:b3:07:23:36:cb:9d:a1:b7:3a:18:75:e9:6d:2f:03:91:14:
         bc:f5:53:4a:81:ec:f5:87:df:19:30:8e:9b:aa:2b:a8:00:e7:
         d3:de:ab:9c:e1:56:31:aa:2e:db:39:24:e1:6a:a5:7a:f5:fd:
         7a:9f:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:26:25 2026 by rpki-client