Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecaae239-7594-39d9-b8b8-4ea8280fc360.roa
File:                     ecaae239-7594-39d9-b8b8-4ea8280fc360.roa (raw, json)
Hash identifier:          fh5MDx4izMuStSifJpT7uCwtawHFkMys/cwle5j8sIk=
Subject key identifier:   7B:41:65:E8:9D:48:6E:C3:F9:41:96:14:8F:4F:A7:5A:31:C5:D3:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E085AB8C2DE7261F2ED940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecaae239-7594-39d9-b8b8-4ea8280fc360.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:85:ab:8c:2d:e7:26:1f:2e:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=fba9be78-f416-42e5-82d7-2b694f5f2be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:d8:7a:f4:4e:07:0e:8b:dc:66:2b:74:9b:
                    11:c8:c4:51:25:ce:e3:2d:7a:8e:77:3c:a7:36:3d:
                    79:27:85:49:a9:d9:bf:57:85:33:39:d1:3d:49:d4:
                    88:0c:6c:fa:c2:36:9c:38:8b:86:d1:93:57:63:89:
                    13:f3:61:d2:8d:c4:64:bb:5b:85:4d:c2:d7:a8:97:
                    98:8f:14:69:2f:34:dd:6b:39:80:43:dd:74:20:5f:
                    d3:a9:57:19:eb:d1:32:57:b8:fc:05:20:dc:6c:63:
                    01:47:27:57:c2:50:4b:f5:29:02:de:36:9a:db:3f:
                    7a:3e:dc:e5:b7:00:a2:96:49:e1:ce:6b:92:f1:5c:
                    06:0c:37:ba:6a:7a:bf:7f:61:fa:91:87:7f:67:cd:
                    bc:26:19:43:28:e8:41:da:c1:6b:7b:ec:73:6a:05:
                    e5:84:24:2c:22:9f:eb:6f:9f:4f:05:8d:23:c8:db:
                    95:6d:c8:65:d5:f2:f8:0b:1c:5b:52:13:a7:27:89:
                    03:c2:56:0b:6e:72:ff:d9:02:74:ef:9a:11:20:c1:
                    11:48:5f:d5:00:8e:bd:f8:c5:2b:8d:5e:32:9e:99:
                    35:89:17:c1:a6:a7:ed:25:c1:b8:88:8e:a3:81:e7:
                    aa:da:6e:95:cf:d8:fa:bf:f6:78:80:eb:0d:80:13:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:41:65:E8:9D:48:6E:C3:F9:41:96:14:8F:4F:A7:5A:31:C5:D3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecaae239-7594-39d9-b8b8-4ea8280fc360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:d4:b7:3b:2f:4d:39:45:27:86:36:36:34:68:68:88:55:52:
         54:be:b5:78:24:ba:db:4b:72:f2:7d:4f:c8:d3:51:33:95:0e:
         91:b1:dc:1a:c3:fd:74:f4:74:23:cc:0d:fb:20:8e:da:fe:29:
         a2:09:fd:e4:10:15:ab:a7:32:e3:db:c0:b9:30:3c:4e:6a:f3:
         35:8f:db:de:56:2e:1b:1a:23:dd:54:2b:c5:88:e4:8f:db:87:
         1e:a7:1f:f7:c2:40:07:88:f3:de:da:29:5e:c6:14:ff:94:a5:
         5f:f1:d9:f0:0d:38:6a:23:2a:c4:75:62:26:f4:16:e3:00:a6:
         a3:f1:8a:78:c8:b1:0c:75:e7:3c:be:78:82:a4:0b:43:ab:4d:
         73:fd:b8:9a:46:25:bf:74:17:1d:d3:be:9a:c4:ea:2d:cf:79:
         63:f4:a7:24:93:ec:cd:9f:53:61:1e:94:8f:c2:eb:33:08:60:
         a7:73:59:04:ba:96:16:27:fd:50:d2:24:6b:62:ff:09:f4:62:
         8d:48:0e:7e:d7:9b:9a:ae:f5:c4:3a:69:9d:44:d1:42:2a:38:
         1e:45:c8:d3:f2:57:f0:00:1c:81:86:2e:6c:bd:fa:21:e5:4c:
         36:d3:fe:ac:c7:9f:5e:e3:2c:f1:3c:62:86:7d:cd:0a:a0:33:
         60:a2:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:16 2026 by rpki-client