Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b15d373a-29d3-3d66-82a4-1563181aa427.roa
File:                     b15d373a-29d3-3d66-82a4-1563181aa427.roa (raw, json)
Hash identifier:          qkVSxxMtz4oMQ02fTBjTRhu2cLfm2AgVYRUzEZAFq60=
Subject key identifier:   81:FE:09:8A:B5:03:5A:9A:69:51:A8:BC:35:C8:32:4C:B4:8D:6E:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CCF47025EAA0F589C8D880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b15d373a-29d3-3d66-82a4-1563181aa427.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.106.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:f4:70:25:ea:a0:f5:89:c8:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=422317ac-5332-4b67-bcb0-a09b19509faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:83:5f:3e:82:05:dc:47:9c:1e:12:c3:6b:
                    82:3d:12:a5:fc:ea:f4:2c:50:4d:3a:a3:1c:37:71:
                    5e:53:b5:58:8c:33:c4:60:a4:db:81:d6:fe:5c:a2:
                    f6:7b:9e:80:74:2c:57:2e:15:25:6a:30:09:0e:1b:
                    d4:73:84:70:46:d9:72:46:58:0a:4f:3d:ff:7d:ae:
                    00:41:96:42:6d:64:76:54:55:ca:5f:9f:ea:b8:c6:
                    7a:69:98:44:66:26:30:b5:76:43:c9:4b:91:68:ac:
                    87:24:e7:7f:f2:33:19:37:2e:ee:52:f1:c8:6f:5f:
                    b6:c5:56:98:9d:3f:e6:2a:45:8b:1b:f0:35:2d:40:
                    3b:d0:ec:c5:26:46:cc:87:5d:ee:65:37:54:75:b2:
                    29:97:fc:1b:51:32:d1:f2:94:f3:76:ad:cd:97:cf:
                    0f:e3:df:d1:e7:71:6c:85:d5:3c:fb:97:d7:be:24:
                    e6:20:05:71:a8:29:11:72:85:fd:ce:5b:17:f8:18:
                    98:d2:2a:b8:ed:2c:2e:e1:c1:2a:01:75:cf:96:7c:
                    68:94:6b:c0:4d:cb:ce:89:ad:86:1d:a1:84:b5:88:
                    58:5a:58:75:db:c1:05:59:7a:b5:d8:0c:e7:ad:1f:
                    49:cf:4e:10:81:c4:78:f8:7f:8d:3d:50:e1:70:1a:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FE:09:8A:B5:03:5A:9A:69:51:A8:BC:35:C8:32:4C:B4:8D:6E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b15d373a-29d3-3d66-82a4-1563181aa427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:42:3a:ba:34:6f:78:38:10:67:02:b2:cd:b0:fe:3e:3a:08:
         10:4e:95:af:db:fa:89:0d:3a:03:04:18:3d:df:4f:03:40:58:
         54:92:a7:82:eb:ab:cb:2c:35:d0:4e:b3:a3:c4:ee:d2:27:1b:
         f7:88:de:5e:56:c2:0f:2a:01:4b:6c:0f:d3:76:6a:15:ee:a5:
         15:3f:14:c0:7a:f5:48:7f:fc:ba:c7:38:1b:88:a1:a9:2f:1d:
         70:94:c0:65:e8:3e:69:5e:c5:ca:dc:c8:62:e0:a7:88:d2:5d:
         ea:eb:5f:84:8d:0f:bb:0d:e4:9a:37:8b:c1:9c:a3:dd:54:20:
         3d:1f:81:7e:25:51:75:25:70:b4:65:5a:27:8a:6e:cc:75:12:
         2c:78:2b:d1:82:88:37:10:11:f5:88:f4:9f:75:b0:f3:e6:8e:
         a6:5c:e6:1f:19:9d:9c:1c:66:b5:e0:38:fe:be:df:4e:b9:37:
         66:15:58:5d:4f:74:9e:c0:92:6b:f2:22:5f:7a:bc:89:c7:9b:
         39:5d:b5:81:8e:e4:d5:e8:a9:df:dd:80:38:b2:43:18:91:0d:
         0b:d5:82:fb:74:9a:61:bd:60:25:a2:77:ea:cc:61:3e:5b:86:
         e3:2e:b9:ee:d7:67:ed:57:d3:65:85:c7:9d:4b:09:14:e4:51:
         a9:90:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:54 2025 by rpki-client