Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc8289a4-f1c3-3299-9207-8c92ee09aa69.roa
File:                     bc8289a4-f1c3-3299-9207-8c92ee09aa69.roa (raw, json)
Hash identifier:          9MGx1vcdiJjgT43nWwvY2Qr0Wh7gzdZWIFBFgyAv2ZM=
Subject key identifier:   76:60:87:4A:1C:AE:57:C7:75:71:C9:01:DA:A9:3F:15:4C:01:7D:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F5DAF7CDBEE49F970DF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc8289a4-f1c3-3299-9207-8c92ee09aa69.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.107.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:5d:af:7c:db:ee:49:f9:70:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f46095de-60c4-451f-a1eb-520a6572aa71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:0c:0d:fa:56:fb:54:4b:42:71:08:33:3d:
                    58:83:b0:b7:e5:2a:05:ed:f8:97:c7:f2:bb:de:60:
                    8f:12:14:d8:39:7f:0e:55:60:6e:e3:80:41:eb:03:
                    23:bd:65:42:d8:d6:f2:b1:fd:14:af:79:a2:e1:00:
                    c2:2b:de:48:c5:29:b0:8a:44:86:b8:93:13:d4:f2:
                    95:21:9a:ab:9a:e5:e5:77:aa:13:73:2d:9b:d2:89:
                    2a:6e:55:75:77:f5:05:f9:e9:c9:29:44:9f:99:f1:
                    80:4a:1a:e8:b6:ed:77:50:dd:cc:0a:79:f8:40:e9:
                    c9:9d:a3:0c:fa:b7:db:55:ae:83:a9:80:6b:bc:66:
                    49:fa:ea:e9:1b:93:1e:56:12:73:59:60:a4:82:6f:
                    a9:38:fc:7f:fe:73:ce:75:94:78:0a:a2:e6:d0:34:
                    42:46:fc:45:dc:19:ea:c8:6e:fe:15:03:43:bd:ed:
                    52:84:5c:ae:ab:96:dd:94:30:31:53:db:40:da:53:
                    14:ea:e0:e6:b9:c4:39:d4:a9:3f:70:b7:ac:4e:d8:
                    25:b7:df:9e:6c:4e:71:92:25:6b:59:d8:a9:e1:3a:
                    9b:b1:f5:35:b9:8a:59:65:07:e1:bd:52:4c:a3:83:
                    08:33:28:42:bf:62:c6:ea:84:ce:2a:20:08:53:6f:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:60:87:4A:1C:AE:57:C7:75:71:C9:01:DA:A9:3F:15:4C:01:7D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc8289a4-f1c3-3299-9207-8c92ee09aa69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:30:7b:ae:b1:b1:a5:fe:2a:8d:2b:b2:b7:34:3e:0a:7e:
         f0:45:3d:6a:54:d3:57:87:8d:75:7a:32:d3:c1:48:e4:f8:3f:
         23:55:43:ca:ea:e0:aa:e1:26:d4:44:ee:1d:ac:75:ae:a9:04:
         ab:95:1d:e3:d8:18:47:e2:5b:ab:08:c8:7c:31:a6:19:8b:d2:
         db:09:1a:f5:f6:67:f3:ec:32:08:fb:02:a8:39:ea:5d:ca:bc:
         7d:52:f5:d0:59:88:27:b1:34:63:43:85:e2:2d:29:8b:77:c1:
         a2:90:2f:09:35:8c:03:10:dd:cb:4e:0d:24:82:c1:ba:cb:a2:
         cf:99:a6:b1:50:f1:23:c3:53:c5:b8:47:92:f4:ef:43:89:db:
         22:13:c7:d3:bc:aa:ba:fa:4a:62:e1:b6:7d:bb:2d:dc:42:57:
         0d:6e:91:d4:53:be:f9:8d:f4:2a:65:0b:f9:70:cf:64:25:d0:
         b7:ac:7b:4c:85:a4:97:54:fb:85:19:fb:48:96:33:bd:6e:5c:
         e2:dc:b0:f3:1e:5c:51:fd:2a:25:a3:db:99:ae:cc:dc:ad:b8:
         43:08:cc:ec:fc:f9:73:0d:dc:09:62:8d:98:00:44:e7:81:06:
         55:73:a4:93:25:1f:6b:4a:f5:d6:50:de:30:49:40:36:86:fe:
         b4:38:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:18:43 2026 by rpki-client