Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711be966-d7e4-3c9f-983f-2a78d9f4a270.roa
File:                     711be966-d7e4-3c9f-983f-2a78d9f4a270.roa (raw, json)
Hash identifier:          ROZL4QXqXGhkwnUeOFPh3/JbYHnz/wg9sOHCWkrinig=
Subject key identifier:   5E:66:61:E8:36:EF:F4:82:32:58:7E:B2:63:68:F7:AF:36:C7:E7:38
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BFD0843DF4A665CD35A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711be966-d7e4-3c9f-983f-2a78d9f4a270.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.107.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:fd:08:43:df:4a:66:5c:d3:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8695d8b6-c2cf-4ae3-bbac-fc654cd4f362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:f4:ec:f5:0d:6c:cd:88:e1:d1:8b:e6:ba:
                    f6:73:03:08:48:b0:6f:28:46:e6:80:0a:e4:1c:0d:
                    91:f5:f3:60:35:ab:29:c7:77:15:e8:8c:1a:14:04:
                    ba:f7:e8:cc:b3:4a:a4:90:54:4c:89:86:8f:ba:fc:
                    a4:97:32:35:98:31:96:44:fe:f6:a3:01:60:9b:ad:
                    57:0b:d2:2a:e3:74:d8:5a:1e:39:69:e8:d3:8a:cf:
                    0d:79:e2:e7:60:45:99:e9:9c:6f:af:19:3d:f7:2f:
                    b5:0b:73:1b:42:7a:07:cd:75:11:10:e4:96:ba:86:
                    9a:cb:ff:29:ff:08:fe:eb:18:f8:c0:55:69:38:1c:
                    f1:8c:53:b8:d4:f0:2f:20:ac:8e:fb:a4:b7:f6:bd:
                    29:87:27:8a:99:62:10:65:17:a4:54:2b:a9:e1:d1:
                    6b:9d:8c:cf:7f:ce:6e:df:67:47:34:59:4d:ff:af:
                    24:b9:4a:02:e7:ea:21:d0:84:e1:7e:6c:84:79:84:
                    20:24:3f:c7:7a:17:92:7d:f3:19:fb:9b:8c:26:b9:
                    57:90:ff:2d:5d:68:2a:cb:dd:57:28:f9:60:0b:95:
                    a1:bd:d6:70:c9:1b:1c:f7:f5:9e:f1:52:d9:f2:0b:
                    f9:11:54:d3:5f:09:be:93:74:3c:10:86:c3:3e:fa:
                    19:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:66:61:E8:36:EF:F4:82:32:58:7E:B2:63:68:F7:AF:36:C7:E7:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/711be966-d7e4-3c9f-983f-2a78d9f4a270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:86:58:50:6b:09:63:5b:39:de:e7:09:7a:dc:e1:69:58:12:
         05:4f:97:ea:fc:72:67:d8:73:a3:4a:a1:6f:da:2d:23:db:eb:
         30:12:c1:16:4a:e7:35:2a:9c:ca:62:ee:49:37:48:ea:34:3b:
         17:f4:9b:42:8f:f5:45:03:f1:6d:30:6b:01:eb:d2:0c:f9:55:
         ce:5b:41:fb:8a:b3:65:61:b0:e0:7f:5b:f5:d7:54:f3:b3:8d:
         91:21:d2:3d:ec:01:ab:78:11:66:08:f7:0f:ee:72:c2:75:31:
         a7:1c:ab:13:eb:ce:11:90:4c:26:d2:c5:d6:8a:2a:5e:79:1b:
         aa:65:34:66:b3:e2:4c:39:f8:27:c5:cd:37:a3:14:c0:bf:8b:
         c0:bc:58:60:23:f2:a7:30:ca:eb:3f:aa:b4:65:20:10:e3:44:
         58:88:3f:42:f5:1c:ce:78:31:b6:81:27:92:36:e4:94:20:cb:
         9f:82:c8:5c:c4:ab:28:77:3b:0d:21:75:34:b8:02:99:79:67:
         2e:7f:44:7c:b2:e6:8b:12:e0:d6:b4:b6:40:12:17:c8:b1:bd:
         92:dd:6c:53:53:bf:1a:7d:e5:46:0c:15:09:f2:2c:ad:9d:65:
         df:6f:76:c4:d7:17:06:57:13:19:46:9f:f8:6b:24:a1:dc:9b:
         b6:62:33:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm/0IQ99KZlzTWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ODY5NWQ4YjYtYzJjZi00YWUzLWJiYWMtZmM2NTRjZDRmMzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgj07PUNbM2I4dGL5rr2cwMISLBvKEbmgArk
HA2R9fNgNaspx3cV6IwaFAS69+jMs0qkkFRMiYaPuvyklzI1mDGWRP72owFgm61X
C9Iq43TYWh45aejTis8NeeLnYEWZ6Zxvrxk99y+1C3MbQnoHzXUREOSWuoaay/8p
/wj+6xj4wFVpOBzxjFO41PAvIKyO+6S39r0phyeKmWIQZRekVCup4dFrnYzPf85u
32dHNFlN/68kuUoC5+oh0IThfmyEeYQgJD/HeheSffMZ+5uMJrlXkP8tXWgqy91X
KPlgC5WhvdZwyRsc9/We8VLZ8gv5EVTTXwm+k3Q8EIbDPvoZRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF5mYeg27/SCMlh+smNo9682x+c4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzExYmU5NjYtZDdlNC0z
YzlmLTk4M2YtMmE3OGQ5ZjRhMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2u7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIiGWFBrCWNbOd7nCXrc4WlYEgVPl+r8cmfYc6NKoW/aLSPb6zASwRZK
5zUqnMpi7kk3SOo0Oxf0m0KP9UUD8W0wawHr0gz5Vc5bQfuKs2VhsOB/W/XXVPOz
jZEh0j3sAat4EWYI9w/ucsJ1MaccqxPrzhGQTCbSxdaKKl55G6plNGaz4kw5+CfF
zTejFMC/i8C8WGAj8qcwyus/qrRlIBDjRFiIP0L1HM54MbaBJ5I25JQgy5+CyFzE
qyh3Ow0hdTS4Apl5Zy5/RHyy5osS4Na0tkASF8ixvZLdbFNTvxp95UYMFQnyLK2d
Zd9vdsTXFwZXExlGn/hrJKHcm7ZiM40=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:15 2026 by rpki-client