Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5ed9787-c744-315e-a870-33ca6f1f9435.roa
File:                     a5ed9787-c744-315e-a870-33ca6f1f9435.roa (raw, json)
Hash identifier:          L+c2HoMrMpqJf8IDtZXyOBBgMjB0BDpPafpH0dPezVE=
Subject key identifier:   24:4C:D9:E3:D4:C3:29:42:3F:38:E7:4C:FA:1A:D9:6D:2A:58:27:63
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BF6ABD275A90A6AF83280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5ed9787-c744-315e-a870-33ca6f1f9435.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.106.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:f6:ab:d2:75:a9:0a:6a:f8:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=482395fd-3145-4550-ad21-f373cb2d29ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:c6:ff:88:f4:da:73:66:f4:ea:6d:ba:b9:
                    82:4e:37:4b:27:75:29:45:d2:ad:96:dd:e1:24:72:
                    ae:09:2d:69:df:b4:e7:8b:0b:bd:b7:d3:0d:7f:34:
                    99:ac:6d:fb:4b:e4:a3:da:d2:51:53:24:76:66:32:
                    2a:dd:bd:a2:39:9f:3d:ad:fd:7d:3d:c3:d8:5d:9e:
                    d8:27:a2:70:b4:2e:f3:fb:62:ef:71:84:f0:ff:75:
                    cf:52:e3:3f:c3:97:20:99:8d:2c:76:51:c5:98:d5:
                    e8:00:2d:ab:09:fa:cb:f1:6b:b2:7f:b3:b8:db:12:
                    4a:d0:63:9f:63:6b:46:e8:c5:1b:7a:d8:13:31:31:
                    54:95:1a:5c:d3:84:61:b2:44:ec:ad:c8:62:35:58:
                    0f:2f:1d:e9:c2:87:6e:d1:8b:a3:24:f9:ac:b7:59:
                    61:fc:93:f2:5e:f2:0c:b2:22:fe:ab:39:29:9d:85:
                    5f:b3:ef:41:34:e0:d9:03:20:dc:35:d7:3c:a7:ab:
                    a6:4f:37:8d:ca:07:41:31:1c:af:0a:24:c2:51:77:
                    82:5f:ab:f0:13:e4:50:74:7b:96:65:0c:30:5c:e4:
                    95:f0:51:04:70:a5:10:10:d3:82:87:0b:82:9a:11:
                    32:94:af:e1:ef:a6:83:95:d3:31:52:e7:da:28:cd:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:D9:E3:D4:C3:29:42:3F:38:E7:4C:FA:1A:D9:6D:2A:58:27:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5ed9787-c744-315e-a870-33ca6f1f9435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5b:eb:2d:ff:30:a5:a9:d0:dd:44:5b:e7:1b:5b:28:57:aa:
         e2:c9:fc:74:2d:9a:5a:5b:67:20:be:06:96:4d:38:32:db:a3:
         54:32:97:6b:48:7a:51:2d:9f:0c:6d:fb:9a:56:23:db:52:7d:
         85:e4:72:50:04:3d:4d:46:2a:be:9b:f5:c8:f8:15:e1:d5:00:
         83:8c:b3:77:c4:72:96:4c:7b:6d:90:f9:d2:dd:92:b7:1e:d7:
         e0:ec:c6:b9:03:1f:a6:4d:73:95:90:7d:00:7e:ed:00:1a:c6:
         3f:4d:96:94:f2:d7:09:bd:e6:88:b1:5d:c4:2e:c0:f0:e6:fa:
         1f:ea:40:b2:24:e3:f7:e1:b9:41:02:4a:da:37:cc:04:6d:81:
         26:f7:21:e1:7c:8c:a7:13:79:ec:f5:af:01:75:e9:86:8b:a4:
         49:ee:30:e1:e3:b7:74:29:38:52:d7:01:24:8a:18:23:aa:bc:
         85:1c:cd:30:00:78:53:bf:2d:94:39:91:0d:d9:56:16:86:d0:
         1a:fa:2a:17:f0:9a:c1:e6:b1:4b:d9:f4:f9:ff:d4:a5:0f:7f:
         f5:24:98:85:2a:a9:ec:5a:2f:75:e0:16:02:b6:bb:9a:e9:6c:
         20:1f:49:80:8c:68:f5:9f:b0:40:42:dd:7d:35:4c:7d:a9:dc:
         b8:cf:43:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:59 2026 by rpki-client