Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b88ba368-9677-3234-85b0-5f014bf8f378.roa
File:                     b88ba368-9677-3234-85b0-5f014bf8f378.roa (raw, json)
Hash identifier:          S4CrXO9++Fr0+Gp2Sv9OTdJnet5Lw5Em1sJfXN4ISmQ=
Subject key identifier:   52:D9:91:D5:7E:D9:3C:72:42:59:E0:B0:5A:50:ED:7D:94:9E:4E:64
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFDC5B4E9015A42F450F10
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b88ba368-9677-3234-85b0-5f014bf8f378.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:dc:5b:4e:90:15:a4:2f:45:0f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a5575b71-dcad-4c6f-a34b-e131bae8a54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:89:16:7d:3e:47:0f:d1:4c:26:0e:7d:b1:
                    32:c8:62:98:72:e0:3c:f2:da:19:03:02:7b:da:cf:
                    a3:fb:3f:73:83:d6:00:4f:7a:50:56:39:90:e7:c4:
                    de:61:5f:71:5b:44:d9:0d:da:76:59:18:e6:c3:38:
                    cd:5c:a1:e9:80:23:38:7f:26:8b:e2:d3:1a:14:92:
                    07:79:df:f1:68:41:c4:a5:b5:f0:8e:52:32:51:99:
                    f6:ad:b6:dd:8e:6f:91:09:53:a6:ed:f3:4b:ac:ad:
                    c0:75:55:08:8e:a9:63:5a:39:00:a4:37:a8:6b:45:
                    1f:31:24:90:6d:83:66:4e:7b:71:dd:35:40:7a:30:
                    96:56:4f:39:18:b8:e3:5a:95:10:20:2d:69:62:63:
                    66:d2:f1:fb:13:f4:36:d2:29:9f:7e:99:0e:66:bd:
                    3a:79:2e:5c:70:81:a9:af:3d:ad:7c:5f:15:1d:06:
                    87:3e:05:32:43:3c:8c:a3:39:d5:e1:eb:c6:ca:f0:
                    2d:6e:bd:34:4d:e5:5c:d6:d3:f0:3d:82:93:77:67:
                    37:fa:15:72:f1:1c:18:7e:ee:64:f5:f2:02:be:55:
                    88:c3:fc:29:84:aa:3e:71:2c:11:a1:b7:d1:41:12:
                    b6:2f:a4:8c:99:24:1a:24:9a:1d:00:05:b3:db:03:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:91:D5:7E:D9:3C:72:42:59:E0:B0:5A:50:ED:7D:94:9E:4E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b88ba368-9677-3234-85b0-5f014bf8f378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:91:6a:ad:a5:71:72:ee:f5:bb:e1:a7:50:d5:ff:65:84:6f:
         c6:50:ed:90:4d:64:09:02:e7:a9:87:2f:c8:af:93:b2:1e:f9:
         6f:65:ca:28:eb:f3:6e:fe:0b:39:73:f0:91:47:bf:d3:11:1c:
         12:d8:08:7a:94:5b:c4:4c:1b:da:62:c5:eb:02:31:2f:33:4b:
         97:a6:ee:4d:ae:c1:21:02:01:10:21:99:d9:78:b9:5e:5c:c8:
         ab:00:3b:e0:99:8b:84:76:40:0b:0a:d9:d7:d7:c1:60:eb:24:
         e3:55:58:a7:e9:c8:e4:9d:13:d6:94:06:5a:5d:51:3e:61:11:
         28:16:23:2f:05:d3:40:75:2c:0f:01:d6:b1:ed:20:53:42:52:
         79:9a:f0:38:75:a8:00:04:04:b2:83:16:46:87:36:20:20:f4:
         d1:1f:9b:9b:94:59:75:74:ab:7a:78:6e:1d:0a:e0:8e:85:41:
         9c:10:19:78:9f:61:90:65:fb:40:d8:db:b8:f9:1f:4a:98:19:
         66:5d:ed:05:c2:4e:9c:32:f3:72:e0:41:7e:fd:d6:0c:ee:2f:
         d3:b7:3e:b3:b4:ef:51:c4:20:e8:02:8e:4d:0b:53:95:c9:71:
         c1:aa:da:53:3b:60:a2:fa:0c:83:e4:a4:19:f1:14:d5:ff:13:
         65:5a:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:57:06 2026 by rpki-client