Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d05b2a2e-d90f-3d8d-afb8-1e45956ce697.roa
File:                     d05b2a2e-d90f-3d8d-afb8-1e45956ce697.roa (raw, json)
Hash identifier:          buNslzxILZxlU8lqhUL31rm9JPru9L2E1voZuAeZmcY=
Subject key identifier:   BF:48:CE:EA:ED:3A:8D:17:4C:5B:3C:AB:87:9C:18:D3:36:40:66:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDAE75861715096BB2D380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d05b2a2e-d90f-3d8d-afb8-1e45956ce697.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        75.107.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:ae:75:86:17:15:09:6b:b2:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=47512eff-b39c-407d-a32d-aec46b6adee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b8:15:a3:4a:08:70:67:d0:32:1b:32:a2:c8:
                    e3:52:9e:11:0b:c5:16:46:5d:98:bc:ea:f5:39:a7:
                    b4:59:79:3d:c8:ac:ec:1d:fb:30:52:35:d7:29:9e:
                    36:3e:70:09:b7:71:95:d2:2f:0b:d5:76:59:07:7c:
                    23:30:ab:c0:f0:b3:6e:13:13:81:9b:bb:2c:66:f4:
                    57:58:f5:8d:ea:ed:2b:e7:4b:ad:f4:6b:2d:fc:3c:
                    60:11:dc:81:8a:a6:48:43:27:49:a4:eb:4f:ef:aa:
                    1b:f9:32:ad:7a:52:36:c2:4f:d4:42:8f:c2:db:df:
                    80:d2:96:e0:0c:11:e9:53:a0:87:1e:eb:d2:f6:c6:
                    26:db:78:6f:0c:f0:41:10:47:cf:e8:79:14:96:e7:
                    09:51:dd:97:f2:a4:36:2c:d6:df:06:a2:60:c8:bc:
                    16:8e:ee:03:c3:0b:d4:6a:eb:a4:40:ed:e3:48:25:
                    92:45:54:94:f0:ad:01:78:13:3f:58:55:fe:0e:76:
                    75:c2:20:c5:ea:77:c3:dd:be:62:75:21:c9:83:1f:
                    74:f2:97:f9:f9:5e:72:f5:b2:5b:9d:0e:9a:42:2c:
                    f6:cc:dc:2e:1b:d4:92:ad:55:8c:0f:89:b0:bb:48:
                    89:3b:70:31:1f:c8:20:bd:e7:8d:1e:06:45:d2:f5:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:48:CE:EA:ED:3A:8D:17:4C:5B:3C:AB:87:9C:18:D3:36:40:66:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d05b2a2e-d90f-3d8d-afb8-1e45956ce697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:29:80:e9:1a:14:90:56:26:f9:46:c3:25:8f:1d:3c:7c:b5:
         3f:4b:6e:b6:85:bd:85:97:03:bc:41:16:f6:55:b4:11:99:6a:
         85:b4:fe:b0:8f:9e:6c:af:c0:0d:80:25:ee:b2:6e:0b:e5:5e:
         61:0a:2e:aa:ec:3e:7c:a8:b3:bd:cb:27:0e:f5:10:ab:09:28:
         c8:44:e6:f2:40:46:c8:6b:d4:d3:9f:40:7c:60:c4:12:ab:fc:
         85:a8:90:fe:d9:22:fb:41:7f:6c:5f:ef:7b:48:6c:37:ea:bb:
         12:35:90:d3:1f:f5:d4:c3:ee:73:b0:bd:c7:fe:d3:79:8d:51:
         aa:2c:28:cf:10:ba:6a:8a:60:6d:20:56:7a:15:16:56:71:73:
         17:b8:43:4b:9d:95:0d:b2:2d:c9:50:af:7c:cd:58:63:68:40:
         ef:46:65:d9:6e:16:cd:cc:29:08:4a:b1:69:1f:73:1d:8d:d2:
         20:b2:58:13:08:22:bf:4d:65:6e:03:f0:23:f9:49:fe:62:88:
         01:25:c7:b9:36:f3:f5:b7:bc:a3:21:e4:23:c2:8a:39:c7:40:
         b4:46:90:d7:44:52:bc:80:98:e6:85:e6:c1:21:f7:a8:7b:fb:
         7d:d4:d5:31:9f:5f:ef:57:d6:8d:3e:82:d8:7b:e6:37:f2:51:
         6f:f1:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:43 2025 by rpki-client