Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd364992-df3d-3307-b957-86be0e7013af.roa
File:                     fd364992-df3d-3307-b957-86be0e7013af.roa (raw, json)
Hash identifier:          ELMYPfNlMx7Nqo1gHbIs+Ep6sQXOPJbMFDb6eQE0Qfs=
Subject key identifier:   E9:23:54:AF:E5:C8:2C:03:FA:C4:4B:21:B0:57:29:0F:6A:4D:92:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B34F75730772041E2A080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd364992-df3d-3307-b957-86be0e7013af.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.106.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:34:f7:57:30:77:20:41:e2:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bad97401-d0bf-4e8e-a348-bd13161d63dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:c0:03:4b:bb:a3:2c:d9:f1:2b:3b:bb:a4:
                    65:81:26:e4:82:aa:15:3f:4b:51:6a:b9:75:3f:e7:
                    ce:19:6d:64:31:df:6b:c0:e3:bb:ae:39:9a:3a:dc:
                    a4:fe:49:3b:2f:24:8d:22:46:cf:da:5a:64:29:32:
                    f5:c9:49:40:03:90:85:de:bd:80:12:d4:49:08:0d:
                    e4:c1:18:d3:e2:48:b4:d9:1b:05:c5:81:26:34:f1:
                    6a:d4:5d:27:c5:60:2b:48:32:34:2d:f4:fb:eb:b4:
                    73:4d:f9:9a:cf:14:15:0b:17:36:fe:3c:ac:c3:97:
                    3e:56:61:63:a0:47:96:89:da:60:2f:43:0e:2b:a2:
                    0b:9e:ee:c3:47:e0:2c:13:86:42:d8:89:00:6c:53:
                    f6:54:03:93:55:47:ca:1e:91:21:78:64:f3:61:1b:
                    0e:31:77:c2:bd:d0:51:82:04:d4:14:74:68:cc:bb:
                    7f:1a:fa:91:56:a5:c7:df:47:85:44:c7:7d:e3:9c:
                    de:f1:c8:d4:50:55:d9:d2:be:c8:19:6e:b2:de:81:
                    c6:c8:a4:f8:ea:9b:20:dc:fe:9e:d1:5a:e5:be:59:
                    3f:32:a4:dd:ac:b1:46:71:3a:98:47:c5:ff:9d:42:
                    24:29:c8:68:36:3e:0f:53:2b:f9:bf:29:c4:03:85:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:23:54:AF:E5:C8:2C:03:FA:C4:4B:21:B0:57:29:0F:6A:4D:92:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd364992-df3d-3307-b957-86be0e7013af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c7:e9:08:1b:2c:db:b5:24:9f:03:07:d1:1a:d4:e4:b0:39:
         e6:1f:13:62:56:1f:48:67:2a:f2:5f:f5:2e:e6:1a:8e:17:2f:
         b7:8c:92:86:f2:ea:72:69:8b:da:02:87:4d:c9:ca:15:b4:ed:
         4f:86:b1:ac:81:5d:ce:06:96:96:3a:2b:15:0e:dd:56:84:5f:
         94:dd:93:cc:58:80:aa:bd:53:dc:d8:a7:bb:eb:45:eb:ab:06:
         f0:49:e5:ff:a9:75:74:40:37:fc:ee:83:0a:43:14:41:e7:3e:
         0b:1e:48:d2:c2:98:fd:f0:b1:c2:88:a5:b4:fa:b3:b4:bc:14:
         26:64:f1:ec:f4:2b:e0:50:e4:c1:61:d4:22:be:79:28:05:0d:
         3f:df:59:b1:d0:84:a6:1f:10:e1:02:ce:6e:43:fb:46:ef:3a:
         21:d2:d6:c9:a0:18:b6:f3:b8:d6:ec:20:12:68:4f:a8:a3:ab:
         05:0f:9c:05:46:46:0c:27:0b:57:52:12:47:86:2b:ae:77:d6:
         10:89:c7:15:19:43:05:cd:2f:0c:16:fe:a5:73:29:22:ba:62:
         ee:e5:13:2e:b4:62:12:f6:c2:fe:ce:19:8f:64:45:b5:26:73:
         9c:be:38:db:fe:e0:40:b8:8c:d8:32:66:cd:86:0b:ae:9f:28:
         40:6a:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:59:05 2026 by rpki-client