Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cae42762-62d4-3a50-a98c-3fd27079501b.roa
File:                     cae42762-62d4-3a50-a98c-3fd27079501b.roa (raw, json)
Hash identifier:          9YTUUhxJVPzKZcpu1O99kJ8CBRdxkc6vzh6U/gcom/U=
Subject key identifier:   AD:05:AD:E1:7B:D2:F9:DE:12:A1:F9:0E:0C:CB:86:30:BB:97:F0:1F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49836E5E3A64A2E5DF9E4C10
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cae42762-62d4-3a50-a98c-3fd27079501b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.107.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:6e:5e:3a:64:a2:e5:df:9e:4c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1b654f65-1c38-42d6-af2d-a4a074282769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:40:46:2d:b6:be:21:f5:e9:97:29:71:cf:
                    e8:ef:01:e9:ff:f7:00:eb:e7:7e:0d:bf:a2:6e:92:
                    21:67:7d:e3:3f:5d:29:b0:94:2c:f1:27:99:e9:31:
                    d0:27:01:fd:d0:41:dc:06:db:e9:26:d6:b4:30:80:
                    eb:2f:df:8c:d1:1c:a8:72:a4:fd:88:88:01:10:03:
                    e8:91:2e:bc:53:ad:02:45:14:c5:28:f8:ed:33:02:
                    db:9c:da:0b:82:d3:7f:90:e4:b3:e9:d8:14:a7:61:
                    80:0e:49:f2:00:ec:79:f5:5f:9e:1c:05:a3:b0:a3:
                    76:ad:15:0b:49:0a:cd:56:b5:81:01:3b:21:22:ab:
                    1c:ca:7a:e4:e4:e3:44:cb:65:9a:76:79:04:a6:9d:
                    80:1e:97:66:1c:2c:6b:88:d7:51:2e:50:d1:65:bf:
                    a3:d8:12:73:20:df:94:92:9e:ea:be:2b:04:67:aa:
                    27:47:65:98:8e:c2:8b:eb:05:32:6c:39:e7:de:f0:
                    45:08:56:90:78:f8:44:70:b5:9c:aa:1b:ea:c1:a3:
                    55:06:70:e5:9e:34:7b:35:ce:45:29:15:c9:21:a3:
                    8f:37:8c:5b:05:1c:01:e8:7c:48:70:97:d5:49:66:
                    f5:e1:cf:23:26:0f:eb:54:c9:87:23:ca:c9:ff:c1:
                    c7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:05:AD:E1:7B:D2:F9:DE:12:A1:F9:0E:0C:CB:86:30:BB:97:F0:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cae42762-62d4-3a50-a98c-3fd27079501b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:82:d9:f0:f7:45:d8:64:e8:b6:d8:f2:3c:dd:f4:4c:3f:
         97:a7:0c:1f:b4:c2:9b:bd:50:fc:35:4c:4f:12:71:a2:e1:b9:
         b4:7e:76:aa:27:7d:89:f9:20:52:6a:8d:a2:73:14:3b:9e:1d:
         7e:bc:87:52:73:8e:ba:5b:5f:a1:dd:3f:d8:0f:55:db:03:cf:
         2d:cc:7c:4a:ed:87:71:bc:a1:b1:51:f1:1d:ea:ed:1e:40:e7:
         09:94:31:d8:bf:57:09:05:4d:44:05:0b:f9:f4:02:24:71:b3:
         ca:91:0a:f0:9e:28:a0:16:3b:7a:58:40:f0:23:e1:44:ee:da:
         c0:5b:c2:e6:97:be:17:d4:df:c2:fd:21:26:f2:ad:ca:98:1b:
         43:79:21:50:bc:90:01:6c:d5:54:1c:a4:cf:f3:94:5e:bf:a6:
         1b:37:0b:c4:ee:0c:a0:ac:a6:c8:7c:87:69:d6:78:b3:74:e6:
         63:7c:96:87:48:17:2a:b7:fe:bc:96:a3:c5:4f:84:b8:ab:9b:
         11:96:d9:0c:97:f5:12:40:fd:69:cc:3d:01:6b:e2:1f:b0:d7:
         a9:7f:46:9c:35:7e:80:d1:e6:34:22:f7:78:cb:17:40:b8:40:
         2a:5b:26:0b:21:1a:a0:3e:f8:6e:6e:4f:c0:b4:88:fe:28:0a:
         63:e0:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:06:09 2026 by rpki-client