Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1925d74-ee13-3d60-85ec-3f00217f0abe.roa
File:                     a1925d74-ee13-3d60-85ec-3f00217f0abe.roa (raw, json)
Hash identifier:          pZq5PBfAEzeUQD2fL/PVXSVbgfEa+Y8wO7H7YRgAYuM=
Subject key identifier:   3B:B6:28:F4:F3:2D:7C:05:0F:FF:95:D3:7E:9B:00:34:5A:E9:84:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B54C7D7DA8A3474DA30A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1925d74-ee13-3d60-85ec-3f00217f0abe.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        75.107.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:54:c7:d7:da:8a:34:74:da:30:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bf9a413e-e4c7-440b-aedd-354214962254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:60:5f:f1:c8:7e:e0:73:ed:15:c9:bf:76:
                    b3:61:30:8d:7d:e2:21:f0:34:43:5d:4e:b0:34:d2:
                    89:da:b7:38:14:a1:d1:9a:72:0b:fe:d0:3b:c4:31:
                    e9:e9:d5:7e:2f:e7:ad:63:88:3d:46:d9:54:02:15:
                    42:4a:b6:5d:01:4c:88:ec:85:ea:76:13:8e:55:c7:
                    d6:fc:ff:9b:77:8e:72:08:e5:04:8a:dd:a6:00:83:
                    17:f6:3b:64:57:3b:b4:f9:3c:b3:3d:be:43:82:63:
                    94:34:dc:0c:c6:a5:25:63:1b:0e:b4:47:48:21:96:
                    1f:8b:e3:40:ff:56:93:df:01:9a:16:c2:3e:19:11:
                    4f:a4:b9:b6:5d:91:1e:38:56:68:7b:51:62:3f:ff:
                    8e:07:29:b8:cf:33:7c:42:65:05:bb:50:4b:bd:0a:
                    a0:78:a0:2f:bd:36:22:a3:56:33:0a:b2:a6:6f:42:
                    a8:61:57:6b:06:78:aa:79:e3:e8:f5:d5:5a:cd:0b:
                    24:37:f3:bb:59:32:da:c6:6b:9a:d7:3e:2a:aa:54:
                    90:42:04:6e:13:c1:c1:da:fc:f4:2c:3e:2b:0e:c6:
                    76:37:a5:29:46:40:1b:1f:90:46:a3:f9:11:6e:c6:
                    69:e5:53:73:cd:b7:b6:e8:6e:da:ad:17:ba:6c:eb:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B6:28:F4:F3:2D:7C:05:0F:FF:95:D3:7E:9B:00:34:5A:E9:84:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1925d74-ee13-3d60-85ec-3f00217f0abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:41:9e:55:f0:e4:c1:2e:18:97:10:18:7f:97:91:ef:9e:87:
         4c:8a:00:d3:a7:97:7c:a0:5f:03:15:f4:48:5d:8e:3b:31:3d:
         85:e8:42:b1:37:e7:a9:63:ee:57:36:b2:35:92:f3:9b:ed:18:
         dc:57:21:77:e0:68:51:fc:00:0a:88:06:fc:5f:16:f2:4d:2f:
         67:02:11:92:45:63:2a:0e:3d:2b:ec:4c:51:82:7f:8e:99:81:
         56:ad:5d:2a:d8:a3:64:53:b8:f8:81:5e:13:3c:f1:57:1f:21:
         45:0b:28:e4:7b:a1:02:ef:34:26:a3:18:9e:c6:35:7d:4d:29:
         87:4c:da:a1:69:71:59:b2:84:f0:23:94:2f:50:d5:3e:a7:46:
         06:79:55:69:cc:e5:88:77:6b:69:de:9e:61:58:b4:bc:d4:35:
         ee:48:ac:ea:90:cc:a5:81:f8:d8:7a:c5:5b:38:7c:95:f2:51:
         a1:bc:d4:5f:44:3f:a3:88:d9:f1:03:d3:3f:a2:78:82:83:93:
         6f:2f:23:d1:ed:c7:26:32:ce:77:2f:5a:13:3b:bd:ed:9f:c0:
         6a:06:ca:62:4e:36:66:d4:93:6a:e5:0c:8d:fb:48:d0:79:98:
         f6:58:a7:3b:e3:6f:ba:9e:1e:61:41:ca:ec:55:05:3d:ed:bb:
         97:e3:d6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 03:29:19 2026 by rpki-client