Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6067322-1deb-38e4-85d7-8ff41e8df628.roa
File:                     d6067322-1deb-38e4-85d7-8ff41e8df628.roa (raw, json)
Hash identifier:          RCGcIqbHomwxDaaaKjZXeIGSA/Lso/dcjF2fu7dHw7c=
Subject key identifier:   39:71:07:28:B5:D7:94:DC:47:7A:31:62:6F:D0:54:8B:BA:E5:52:B2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E088B23B81CAFAD6EE9B80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6067322-1deb-38e4-85d7-8ff41e8df628.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:88:b2:3b:81:ca:fa:d6:ee:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b87624f1-b685-4eb1-bcce-c1d89c51c892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f0:39:39:5f:12:cc:8e:c9:d0:4b:a7:9a:18:
                    bc:c1:d3:de:c5:82:32:c2:5c:48:a2:f8:da:68:2b:
                    2e:29:96:e6:c0:e6:b1:a4:c6:0d:4d:e9:bb:0f:52:
                    98:54:9d:05:e2:d3:bd:17:68:3a:aa:62:15:a1:c5:
                    f3:d6:54:43:cb:2b:2f:d9:9f:f1:45:9e:a3:af:d0:
                    09:f8:1d:43:a1:61:b5:22:92:12:9b:7b:75:d2:ff:
                    0b:5e:70:ca:43:fc:8d:7f:29:66:86:dd:6c:a6:44:
                    8f:02:e1:74:5b:73:d6:05:a4:58:1b:7e:67:bc:26:
                    db:c0:80:26:61:58:7f:39:0c:bf:5d:30:1b:2c:b3:
                    c0:23:88:cf:25:21:77:f5:cc:74:31:e7:5d:74:72:
                    1d:27:14:07:94:e7:0f:88:bc:00:21:8d:1f:d7:a8:
                    38:9e:ca:b9:8f:df:41:ab:58:6b:a8:45:a8:5c:cd:
                    56:e0:53:9e:5d:2f:5f:f0:c5:fb:f2:2d:4e:2d:f7:
                    05:2f:b4:7d:05:40:f2:66:86:4b:88:d3:ce:fd:4a:
                    35:29:3b:38:b1:b8:00:be:ff:67:fd:06:77:95:5f:
                    42:55:62:ca:32:11:88:f3:78:e1:7c:89:a4:c3:b5:
                    e0:c7:42:3f:9b:91:cd:99:83:4b:38:15:69:98:39:
                    ef:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:71:07:28:B5:D7:94:DC:47:7A:31:62:6F:D0:54:8B:BA:E5:52:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6067322-1deb-38e4-85d7-8ff41e8df628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:a0:85:75:99:bd:39:92:da:9f:3c:34:52:ac:4f:3a:8c:92:
         8c:60:e9:e6:f4:70:2e:1d:fe:2d:d4:b7:c6:9a:44:42:21:a0:
         57:eb:c3:ea:bb:e6:9b:4b:b2:c4:e9:f8:15:da:c9:51:b7:20:
         be:39:90:98:a6:31:97:29:19:68:27:93:8c:51:fb:ab:54:ba:
         32:54:12:0b:81:22:17:2a:68:d6:46:c5:c8:52:b8:b5:13:0c:
         91:05:af:a9:1b:f5:ca:64:03:c3:3e:de:c0:a4:c2:aa:f6:c2:
         c0:3e:5f:e4:75:6a:df:d1:c1:56:29:72:7b:7d:65:8a:c8:af:
         12:c4:a9:da:09:4a:80:3a:5a:64:df:83:7c:bb:37:e0:fd:22:
         bc:c5:f2:35:9d:5e:d1:00:8f:b3:db:8c:f8:77:25:19:df:b6:
         3e:c9:79:ff:45:56:9e:38:4d:09:65:d8:bb:26:b7:4e:57:4e:
         f4:23:0b:d5:c9:8a:d5:ef:f8:2f:91:6f:36:ad:eb:db:ec:6d:
         e0:a9:40:6a:cc:8b:6f:9a:09:21:bf:54:4b:81:0b:fd:53:a3:
         7f:23:6c:02:37:ef:f1:79:7c:58:cb:76:45:2f:a8:76:6e:69:
         ff:af:5c:ec:30:de:61:47:ed:ef:a6:1f:7c:e7:6b:89:af:22:
         14:51:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:47 2026 by rpki-client