Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd7bb805-a8d3-3ca9-889f-e64218b4a189.roa
File:                     fd7bb805-a8d3-3ca9-889f-e64218b4a189.roa (raw, json)
Hash identifier:          AQX7io2SAZw0jKmsZgC+887deU4ffVBmYtiqj24dsZ4=
Subject key identifier:   D9:6F:D4:86:5F:9F:01:C9:0E:0A:CB:4A:C2:02:89:3F:2B:1E:57:22
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E08303C48DB9A67DFD3980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd7bb805-a8d3-3ca9-889f-e64218b4a189.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:83:03:c4:8d:b9:a6:7d:fd:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=bea09226-97ea-4fb3-8d7a-38814e0c3129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:82:e3:ab:82:64:fc:03:2f:24:dd:41:89:32:
                    1e:2c:d4:f0:0e:7a:c9:ae:3e:98:fa:ae:28:54:d0:
                    57:02:f6:a4:8e:5f:ca:94:4f:e6:eb:a7:b8:3d:90:
                    b9:25:b7:72:bb:81:e9:f5:e5:1c:27:01:fe:ba:8a:
                    b6:71:c0:65:9e:fe:b2:d4:89:2b:bb:42:f2:cd:0a:
                    f6:da:7f:63:fa:26:8a:16:7c:6e:f1:6b:5f:c9:e4:
                    9d:49:2a:0d:91:ce:f9:6b:dc:f6:6f:87:b6:42:08:
                    f5:b1:be:43:f3:4b:d1:4c:9b:26:54:43:8b:09:fc:
                    8c:9b:ec:97:20:fd:d0:5d:42:e9:e9:84:c7:e8:5e:
                    e8:20:f4:ac:34:c3:10:a9:62:3b:5e:d4:a8:e0:fb:
                    ae:bd:39:dd:3e:8a:78:d8:a1:49:b0:da:09:00:0c:
                    35:b4:0d:4e:64:e5:fb:17:84:6e:21:b0:d1:9a:3b:
                    64:cd:45:e3:5d:10:91:35:8f:79:3c:c0:97:59:b8:
                    a0:7b:1a:e1:31:93:98:fd:b5:84:1a:d8:9d:55:aa:
                    63:89:aa:dd:e8:b5:6b:ef:c2:56:bc:05:c1:1e:dc:
                    12:ad:81:5e:3d:10:ab:c5:21:f4:a9:61:57:ad:a8:
                    99:d1:56:67:10:f2:e6:7e:1a:85:45:32:c4:59:4b:
                    1f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:D4:86:5F:9F:01:C9:0E:0A:CB:4A:C2:02:89:3F:2B:1E:57:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fd7bb805-a8d3-3ca9-889f-e64218b4a189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:ca:fc:c7:bb:73:e7:0e:08:be:3b:0d:af:6a:d7:84:0f:
         4a:11:5d:20:e6:43:75:a3:b8:83:1f:51:43:d6:db:98:0c:70:
         ef:71:95:7d:9a:5e:75:76:2e:cf:af:4e:85:42:e7:10:96:a4:
         c4:c8:20:f4:ba:51:74:8c:1b:ed:8b:60:de:70:ec:4a:1d:43:
         92:44:a5:19:c0:60:d4:97:b7:e2:30:bf:d5:c9:61:d3:95:d3:
         ef:97:97:5b:72:3d:49:45:ec:53:b7:e2:21:1a:e3:55:eb:60:
         75:e6:12:6c:2a:df:53:c8:f5:06:d2:f5:a9:94:9c:60:61:c4:
         c2:fe:11:93:d9:94:12:0e:6b:dc:99:95:ec:f5:71:f4:28:f4:
         37:b1:64:cc:f5:ec:9f:62:d4:33:ba:26:3f:e1:96:b2:42:d9:
         70:48:09:73:f1:a3:2c:d5:cf:09:a3:da:8a:ef:e5:51:8c:4e:
         9c:ea:2e:17:fb:88:37:7f:0d:7e:51:ff:23:03:95:17:f0:fa:
         cc:42:b1:70:de:37:97:fa:11:f8:cb:38:a9:ab:e7:2e:50:1e:
         2b:62:69:20:04:83:a1:65:09:0c:26:9b:47:7a:e2:ba:f6:45:
         20:ed:51:d7:3c:c4:c8:67:4a:d8:9d:0f:5b:92:73:3c:b9:7f:
         3c:dd:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:15 2026 by rpki-client