Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa
File:                     b995e288-53e8-3b22-b9c9-4d8646d3c448.roa (raw, json)
Hash identifier:          6p3qmeYzhjuak9Mw39wKENKUsOCgVFU4nCtBvVQOkzQ=
Subject key identifier:   29:8D:3C:11:10:9D:52:BE:45:88:AE:5F:4B:4C:59:E2:17:9A:56:BB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDB2C6E17EF3590946ADC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.107.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:b2:c6:e1:7e:f3:59:09:46:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ee38b18c-b04e-4c10-97df-f09260a5b3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:1e:51:e9:ab:02:f1:6a:53:a6:95:f9:8d:
                    2f:52:16:a1:a8:0b:6c:41:5a:5f:e6:7b:c5:09:01:
                    7d:ed:af:72:49:e4:72:70:f2:91:32:5b:be:99:02:
                    58:69:e2:da:31:b1:85:80:2e:f2:a0:4b:a7:56:40:
                    b0:11:90:1e:b5:0c:31:a4:65:ae:42:e3:41:22:c4:
                    b5:19:ca:28:d2:78:55:89:32:b3:45:76:44:7e:28:
                    95:a2:0d:44:3a:ab:90:ef:f4:76:fe:e5:fe:22:49:
                    91:5e:d3:69:4a:91:82:0a:a0:31:10:cc:46:22:b0:
                    06:85:ab:92:ea:9a:d2:d1:4e:38:5d:01:f0:6d:4d:
                    cc:1e:b9:d9:47:75:75:86:43:50:16:66:fc:ed:6d:
                    1c:64:e5:bb:c3:5e:73:0f:50:2a:23:c5:5e:bf:79:
                    18:d0:02:9b:82:8f:ac:3f:d9:a8:a5:31:74:9c:34:
                    fe:d8:73:28:b0:24:bb:fd:ae:d8:ce:e2:4d:a2:f4:
                    3d:93:37:96:f0:47:3e:18:ed:ac:43:25:ed:eb:36:
                    78:9a:71:ea:a7:d6:36:13:cb:e4:66:fe:72:82:a6:
                    3d:d7:63:e0:54:b1:8b:f2:9e:f3:3b:89:f9:6c:f1:
                    dc:a1:5b:79:31:ba:54:be:91:03:bb:0e:be:b2:63:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8D:3C:11:10:9D:52:BE:45:88:AE:5F:4B:4C:59:E2:17:9A:56:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b995e288-53e8-3b22-b9c9-4d8646d3c448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:fe:b6:15:de:f2:02:46:95:dc:86:da:f7:18:be:66:ec:
         11:96:44:f8:11:7b:24:7a:07:80:ea:8b:de:7d:14:c4:bc:00:
         de:fe:88:1e:b4:e9:82:c2:a0:e3:f0:51:8f:df:d0:6a:1d:0c:
         e6:5e:09:ca:ed:0d:fb:b1:8e:11:15:0a:5e:44:7a:e4:32:e6:
         38:bb:13:27:21:92:75:90:18:6a:62:c6:17:13:0a:17:de:f8:
         76:dd:92:01:6a:3c:d4:71:6c:75:2c:60:29:1f:64:b1:e5:58:
         db:0c:4f:5e:34:1d:d1:e1:13:c3:9e:20:fc:ca:dc:7e:22:d8:
         00:23:56:53:40:80:1d:20:74:50:f2:57:4c:38:0e:7c:05:f4:
         4b:4a:69:51:07:78:3d:38:07:f6:0b:12:62:f2:89:5d:54:d1:
         64:bc:50:fb:56:c9:49:8c:d6:f7:27:98:bc:4f:f4:6e:06:38:
         cb:62:45:96:04:23:bc:67:b1:80:0d:f9:0b:8c:2a:4b:1b:97:
         f7:b1:1c:1d:88:25:ba:fa:4a:72:f5:5b:4b:15:7c:91:24:4f:
         fc:d8:16:3b:4a:58:29:16:1f:7b:8f:43:e2:17:da:74:83:82:
         d8:0c:29:d0:f3:8d:fa:90:3c:0c:cf:cd:9b:b0:f2:ef:b6:19:
         bd:04:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:05 2025 by rpki-client