Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99c4d9f-f0ab-3550-9179-58553c298e1c.roa
File:                     c99c4d9f-f0ab-3550-9179-58553c298e1c.roa (raw, json)
Hash identifier:          oUfDO7AnsGzpNDk9lB0SEb7PuJevP0+RelU8ViJ/c4Y=
Subject key identifier:   F3:4C:34:22:AB:D3:36:6A:AA:10:BE:99:7C:46:2D:11:D8:DA:60:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49837C6E565081DE7A9FA1C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99c4d9f-f0ab-3550-9179-58553c298e1c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.107.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:7c:6e:56:50:81:de:7a:9f:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c8810e88-d73e-453b-bc1f-86a2b690777b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:de:e5:1d:7a:d2:51:ad:d8:00:97:2b:3c:
                    59:e3:49:bb:ae:97:64:33:75:e6:57:df:85:01:be:
                    18:84:5f:c0:fe:4b:1b:a8:11:0a:8c:39:d7:bc:73:
                    77:5c:d4:6d:0d:55:4f:5c:5f:7f:4f:58:13:12:97:
                    bc:9c:f1:a7:3d:84:64:e4:a1:b7:82:21:78:6b:b6:
                    5d:2b:dc:99:ff:a1:29:4a:96:4b:5a:e2:07:03:84:
                    08:52:cb:68:1b:35:c7:89:db:0c:fa:f2:a9:3b:2a:
                    62:68:11:79:ea:3f:c4:14:11:8f:f7:b4:fa:79:89:
                    a8:b1:14:4b:ee:91:e0:e6:1f:96:49:e3:30:69:5d:
                    16:dd:c4:84:ce:45:fe:b9:08:46:f5:3d:a3:80:40:
                    3c:31:f4:cb:44:78:06:74:c1:7b:0c:52:35:b8:a3:
                    77:bb:e4:81:66:59:f5:b1:22:ae:4f:13:21:0b:b0:
                    ef:e7:73:c4:fc:ee:e5:1e:e2:84:11:50:d8:56:bc:
                    58:29:68:d7:19:a9:11:cb:c8:0b:3c:a0:46:02:56:
                    10:2a:be:4a:a0:4f:63:cc:29:3f:44:16:41:5e:02:
                    a4:4f:fe:1a:6f:82:7a:5c:9e:3d:39:b9:aa:4b:c1:
                    52:01:8b:36:84:29:9d:bf:f3:5b:4b:da:4d:58:12:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4C:34:22:AB:D3:36:6A:AA:10:BE:99:7C:46:2D:11:D8:DA:60:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99c4d9f-f0ab-3550-9179-58553c298e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ee:c4:5e:98:b2:da:12:7f:0f:6b:22:b0:48:2b:ce:13:2a:
         84:04:82:34:88:86:b8:68:3b:17:63:56:80:90:6b:10:65:df:
         a7:70:a7:aa:82:fa:9d:5a:ab:37:59:9e:7d:aa:62:fc:b1:d2:
         25:24:6c:32:58:53:8d:51:1e:90:22:e7:5b:cf:b8:04:5e:8c:
         de:43:d7:95:05:67:01:db:12:2f:6d:43:1d:ce:ba:36:97:52:
         50:03:55:72:a1:9c:3e:77:b9:d4:36:18:4f:dc:53:69:52:b7:
         2b:aa:39:51:79:07:b4:f0:dc:ec:6f:df:4a:c9:71:9b:f4:24:
         df:6e:a6:bf:9c:4e:09:41:52:0f:58:3e:43:0a:8e:38:6a:eb:
         6d:5b:c8:ef:d6:19:7a:08:1d:23:32:88:e4:d0:1e:1a:0a:b4:
         47:79:77:b6:63:4c:05:a1:e7:e6:a5:33:6f:c2:70:e1:7c:3b:
         0d:01:80:e9:43:03:b9:c9:9a:2d:9b:67:0f:6a:01:50:c4:a0:
         55:67:57:ab:e5:24:44:be:bd:50:c4:fe:00:55:22:3e:e3:62:
         70:06:88:31:8e:13:8b:1b:0c:12:a7:7c:20:0a:6e:5f:95:e7:
         65:68:89:9b:d8:0c:8c:2b:7b:f3:5b:4f:ab:8d:71:13:60:dc:
         6e:52:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:26:57 2026 by rpki-client