Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bdd9563-842d-3a41-be96-38dd495122ea.roa
File:                     9bdd9563-842d-3a41-be96-38dd495122ea.roa (raw, json)
Hash identifier:          RvhcP//x1tgqwB9oq2LjJETViQx4WO4MdP7b/xEjkCI=
Subject key identifier:   24:4B:FB:1C:92:24:19:BE:13:4B:03:0A:B0:76:87:BE:7E:2D:80:E0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BF5E4D69C6C758D571FC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bdd9563-842d-3a41-be96-38dd495122ea.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.106.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:f5:e4:d6:9c:6c:75:8d:57:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=27235cae-460b-473c-872b-1918ba30589b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:80:9d:91:54:5b:90:9b:a8:3f:ea:ed:7d:
                    43:60:6a:cc:c7:b7:06:d0:8e:59:2d:07:95:d5:53:
                    ff:7e:d2:99:47:d9:85:0e:66:c2:63:a1:ba:83:94:
                    12:ae:f0:f5:f9:4c:a3:62:46:15:f9:f8:f5:05:ee:
                    5f:86:05:1b:35:47:58:ef:db:d1:f3:24:31:0f:ca:
                    d4:bc:d6:e9:27:da:82:71:b7:6a:56:b9:7d:83:d1:
                    7c:2a:21:8c:62:26:93:55:71:06:6f:3e:ae:a2:4d:
                    45:50:8d:52:ab:e3:0a:e7:97:fb:ac:eb:79:dc:70:
                    76:c1:57:62:2f:3a:54:0d:4f:9d:53:35:c7:60:24:
                    07:30:5c:94:eb:94:8f:d4:ff:44:eb:8b:c7:52:6e:
                    1c:7d:bf:13:46:ac:14:f0:8e:bb:d6:32:9d:54:2a:
                    89:9f:f7:84:23:ed:c2:67:5b:28:3f:52:6c:df:7a:
                    58:3a:1f:5e:d3:ea:da:98:33:28:45:6f:fa:57:52:
                    80:95:2f:52:3c:53:d6:70:ff:ed:89:b3:97:45:22:
                    14:c4:ae:95:8b:8c:11:a6:4b:fc:db:a6:b9:17:ed:
                    a3:eb:2e:ce:de:74:48:34:cb:fa:cd:d7:f8:71:5f:
                    05:78:96:f0:1a:a3:2c:50:ac:25:e5:ae:23:35:15:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4B:FB:1C:92:24:19:BE:13:4B:03:0A:B0:76:87:BE:7E:2D:80:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bdd9563-842d-3a41-be96-38dd495122ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:87:62:61:6e:8a:8d:f8:17:1b:6f:7b:71:47:03:c8:8b:4e:
         55:30:97:58:2b:8a:42:b6:e6:0c:78:2a:73:40:a1:bd:73:05:
         d6:59:aa:2f:48:4f:63:e0:59:3f:70:04:84:03:46:41:4b:c1:
         07:fd:ac:2a:c3:13:27:91:3f:25:31:61:e6:6b:6d:b0:65:ae:
         f8:07:56:88:e1:c2:30:dd:03:b1:fe:8d:46:b3:d1:b3:59:34:
         cc:69:e6:86:5a:6c:a4:8f:42:6d:aa:30:89:40:30:f5:56:ec:
         92:54:02:ca:f1:89:0e:fe:e3:84:1b:24:69:b2:ef:4e:e8:82:
         45:e2:a3:28:ab:4f:02:c7:93:00:0e:82:9d:64:87:df:d5:19:
         fe:15:d9:df:2b:29:56:72:be:81:54:2a:3d:79:de:be:f9:59:
         16:63:86:13:9c:14:d1:09:22:ab:ac:39:f7:55:c7:28:12:bb:
         6b:9c:97:3b:e6:5f:08:75:8c:e4:60:1c:2d:d6:73:53:19:ac:
         30:a5:6d:55:bb:87:49:08:e6:63:8f:0b:82:3b:f7:49:d0:96:
         80:82:a8:74:46:49:12:06:34:b1:86:f7:ef:b1:9e:5d:5e:a1:
         f9:4e:80:69:d0:e1:a5:df:df:fa:19:ae:7a:52:d5:5c:4f:43:
         a7:7d:d4:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm/Xk1pxsdY1XH8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MjcyMzVjYWUtNDYwYi00NzNjLTg3MmItMTkxOGJhMzA1ODliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW6AnZFUW5CbqD/q7X1DYGrMx7cG0I5ZLQeV
1VP/ftKZR9mFDmbCY6G6g5QSrvD1+UyjYkYV+fj1Be5fhgUbNUdY79vR8yQxD8rU
vNbpJ9qCcbdqVrl9g9F8KiGMYiaTVXEGbz6uok1FUI1Sq+MK55f7rOt53HB2wVdi
LzpUDU+dUzXHYCQHMFyU65SP1P9E64vHUm4cfb8TRqwU8I671jKdVCqJn/eEI+3C
Z1soP1Js33pYOh9e0+ramDMoRW/6V1KAlS9SPFPWcP/tibOXRSIUxK6Vi4wRpkv8
26a5F+2j6y7O3nRINMv6zdf4cV8FeJbwGqMsUKwl5a4jNRWz2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRL+xySJBm+E0sDCrB2h75+LYDgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWJkZDk1NjMtODQyZC0z
YTQxLWJlOTYtMzhkZDQ5NTEyMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2prMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+HYmFuio34Fxtve3FHA8iLTlUwl1grikK25gx4KnNAob1zBdZZqi9I
T2PgWT9wBIQDRkFLwQf9rCrDEyeRPyUxYeZrbbBlrvgHVojhwjDdA7H+jUaz0bNZ
NMxp5oZabKSPQm2qMIlAMPVW7JJUAsrxiQ7+44QbJGmy707ogkXioyirTwLHkwAO
gp1kh9/VGf4V2d8rKVZyvoFUKj153r75WRZjhhOcFNEJIqusOfdVxygSu2uclzvm
Xwh1jORgHC3Wc1MZrDClbVW7h0kI5mOPC4I790nQloCCqHRGSRIGNLGG9++xnl1e
oflOgGnQ4aXf3/oZrnpS1VxPQ6d91IQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:25 2026 by rpki-client