Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b8d6508-dbe2-3a19-a06d-83637c908bdc.roa
File:                     3b8d6508-dbe2-3a19-a06d-83637c908bdc.roa (raw, json)
Hash identifier:          7pAkX5Xt3aVXyMorPYALVOLLuwJVUjp2ckF31YKxYSc=
Subject key identifier:   8D:01:4B:2B:08:F9:5E:FD:14:54:D3:74:AE:BB:4D:B0:6C:22:66:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584C45A7912210D569A633B5BAC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b8d6508-dbe2-3a19-a06d-83637c908bdc.roa
Signing time:             Mon 22 Dec 2025 14:00:39 +0000
ROA not before:           Mon 22 Dec 2025 14:00:39 +0000
ROA not after:            Sun 22 Mar 2026 13:00:39 +0000
asID:                     7155
IP address blocks:        75.107.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:a7:91:22:10:d5:69:a6:33:b5:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Dec 22 14:00:39 2025 GMT
            Not After : Mar 22 13:00:39 2026 GMT
        Subject: CN=2c873577-614f-4a6c-a9e7-ee177cab3458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:8a:55:2a:52:f4:bb:d1:26:58:f0:0c:0e:
                    07:77:0c:af:94:ac:89:2e:45:06:af:8f:78:37:c5:
                    77:7c:8f:7c:f2:7f:89:a6:a6:4a:26:09:7e:62:25:
                    42:77:ed:a7:94:39:19:c6:26:35:a9:d8:ce:cd:84:
                    89:61:b8:36:d9:70:53:57:97:ca:cd:36:27:89:26:
                    45:2c:f2:80:8a:1e:11:1b:24:90:31:f9:3d:23:ad:
                    3e:b0:b7:7b:40:76:9d:65:9a:6d:20:db:ab:62:2c:
                    4e:fd:ab:c2:36:14:74:f6:6f:e3:59:d3:ac:9f:09:
                    da:41:d3:bb:b7:0e:d1:6f:57:75:eb:93:05:50:53:
                    32:c9:5c:94:79:b3:63:9b:06:fc:b8:18:50:68:00:
                    51:71:7e:24:e0:20:3a:51:19:7e:a7:03:6b:e8:ab:
                    bc:5e:ac:cb:21:2a:fa:11:fc:4f:4f:e9:0c:17:e5:
                    22:43:b0:eb:84:df:a0:59:3f:a6:08:a9:87:16:4b:
                    a3:71:ff:29:62:0f:3e:39:b5:fb:8a:f5:4a:97:89:
                    23:cb:a8:42:b4:9f:c0:9e:f6:23:cf:69:86:25:46:
                    21:b8:15:ac:54:ac:47:2f:40:88:23:a6:ee:48:e5:
                    57:7e:65:61:55:2f:3d:a8:b8:e0:a7:37:7d:83:1a:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:01:4B:2B:08:F9:5E:FD:14:54:D3:74:AE:BB:4D:B0:6C:22:66:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3b8d6508-dbe2-3a19-a06d-83637c908bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a8:fc:9c:95:e1:d7:a4:7e:1d:f9:78:ad:20:e1:af:8b:b8:
         eb:46:cb:a8:eb:57:bb:a5:e6:82:25:c8:a7:6d:46:71:72:6f:
         8a:2c:1b:a1:8d:8a:af:aa:4c:50:fe:3d:97:57:b9:d2:3d:6d:
         76:ee:22:75:da:f4:60:66:f7:d9:25:b0:15:05:ef:1c:c9:d9:
         12:f3:c4:1d:d8:6b:74:60:4e:49:4a:e9:4b:cd:37:9e:c1:5f:
         00:88:83:d0:0f:42:0c:64:84:30:75:0c:68:d1:f2:01:d7:af:
         e1:a0:66:d2:58:81:7e:8c:eb:09:76:8b:a9:6b:54:db:a8:af:
         6d:50:c7:a6:e2:77:70:6a:6d:f9:d2:87:68:14:95:76:b6:fc:
         c1:6a:c3:ed:a9:cb:f5:19:9b:31:53:69:72:53:f1:f2:0b:57:
         34:e8:85:cf:d6:34:1c:45:74:04:62:4a:89:48:35:24:54:7b:
         67:83:3e:5e:44:63:3c:25:98:72:8b:ed:33:d0:1f:c9:a9:bc:
         57:68:81:88:4d:6c:c7:78:35:82:10:98:d6:35:6a:9f:11:c1:
         f3:b9:cd:41:8c:37:6f:5a:14:af:86:12:80:2a:e8:aa:b8:2b:
         4b:a5:e1:3f:ac:0e:03:62:20:2e:f2:1c:7c:c9:a8:53:29:38:
         7f:50:39:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:12:24 2026 by rpki-client