Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36e6af71-e41d-3311-b053-fab336b7e000.roa
File:                     36e6af71-e41d-3311-b053-fab336b7e000.roa (raw, json)
Hash identifier:          lw3mbw5rP8oAPD1XiGRMP4HMkR3DXX6yjnJyosMS60g=
Subject key identifier:   91:4B:30:8B:03:BB:B9:5B:1E:BC:BE:73:93:A8:33:98:BC:21:F9:E6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F668C24728CDFBB6D2DD8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36e6af71-e41d-3311-b053-fab336b7e000.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.107.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:66:8c:24:72:8c:df:bb:6d:2d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cca37dfc-8397-4842-8f45-e89aae9b2b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:48:4e:4c:f4:17:82:94:7e:cf:98:0d:4c:
                    2c:50:50:21:97:85:c7:6a:33:78:50:4c:9f:40:94:
                    81:de:95:aa:c7:1e:9c:91:3f:9a:43:b6:da:26:9d:
                    41:0d:98:1f:43:58:3b:63:32:8b:1e:f5:54:14:b2:
                    70:94:c5:bb:fe:d0:75:0e:e6:1e:46:06:fd:6e:56:
                    5d:98:83:e0:cc:5b:d4:67:e6:fb:61:05:81:ac:ca:
                    05:1f:57:b8:19:b6:69:5a:3b:84:eb:87:6a:13:04:
                    bf:08:22:14:9e:91:61:e9:75:b7:f5:88:96:3c:4d:
                    bf:c4:7a:ef:0b:66:db:bd:b9:b3:fc:e4:27:8a:e4:
                    7e:96:f2:3b:08:a6:79:b3:a0:ad:e2:25:57:b8:4f:
                    75:c9:c9:d3:cf:2e:b2:24:64:e8:7f:d2:a0:d9:c3:
                    89:fd:00:91:bd:8a:67:05:1d:8a:e4:5a:00:6e:4d:
                    bb:1c:a1:8d:01:d5:78:c8:2e:68:a0:de:71:58:eb:
                    59:68:f6:37:74:fb:32:55:f3:51:82:58:e0:e4:ee:
                    15:1c:b5:8b:6b:f9:96:f6:00:50:77:5e:54:de:c5:
                    8c:70:29:39:47:fc:51:33:6d:a5:26:ea:4d:da:f8:
                    85:81:76:cc:f4:f7:04:9a:e6:49:37:92:3a:e3:6d:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4B:30:8B:03:BB:B9:5B:1E:BC:BE:73:93:A8:33:98:BC:21:F9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36e6af71-e41d-3311-b053-fab336b7e000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:e5:ae:59:3c:36:d4:e2:40:78:b5:80:4b:51:01:ba:06:
         f8:de:3c:6c:70:50:72:c3:f0:b5:8a:f7:77:8a:6e:d6:18:ad:
         ca:8d:75:f5:dc:93:31:e1:03:17:2a:17:fe:dc:d3:f6:69:3f:
         34:fe:51:7e:d8:78:ab:a3:24:98:63:0f:af:83:c8:dc:fb:e5:
         c5:ff:63:34:9d:93:8c:5a:fa:ad:50:fd:0e:3f:57:5d:db:1c:
         a0:88:32:46:1a:bf:8c:cf:6c:d4:74:0f:0e:a9:18:88:04:de:
         ce:46:59:e7:fa:db:fb:5d:71:e7:3f:0b:42:cb:3d:da:31:07:
         d1:fc:5b:ed:4d:e0:61:75:07:2f:74:6e:ce:c5:00:54:06:60:
         97:c5:e2:83:a1:5e:a5:87:3d:51:ea:27:7d:18:47:6f:4e:de:
         fb:e5:fd:be:e7:ab:fc:90:a8:2e:04:cb:05:89:24:75:73:2f:
         a4:86:e7:39:a5:4d:e9:a2:73:15:2b:68:87:ec:c5:2d:74:16:
         24:a9:cc:78:78:c2:e6:02:86:f9:ef:21:4a:23:13:2e:e0:d5:
         4f:e7:b4:53:d2:58:4a:78:c4:f7:d2:a8:5b:29:4b:4b:1e:9d:
         56:91:dc:ad:f9:14:4a:da:07:a8:15:db:b4:6c:47:58:9e:c3:
         ec:8e:1a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:56:19 2026 by rpki-client