Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7728222-ace6-363c-9d03-98546cf4106d.roa
File:                     d7728222-ace6-363c-9d03-98546cf4106d.roa (raw, json)
Hash identifier:          9wFLgMniJjb2Tz6d2h0980qhDiKECIrFaeSP0rp8sGg=
Subject key identifier:   4E:4E:25:1E:A1:4F:46:FE:F5:54:7A:B3:9C:02:F1:A2:E1:73:5F:B0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F628FF043077B1B5D0D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7728222-ace6-363c-9d03-98546cf4106d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.107.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:62:8f:f0:43:07:7b:1b:5d:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=387090d0-c13a-4bb4-945e-d52cf20b824d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a4:e3:01:f6:dd:eb:eb:76:82:d5:a1:d8:4c:
                    dd:44:1d:41:24:d5:c3:35:bb:d7:75:03:2a:05:fd:
                    b6:b8:c3:98:0d:cf:40:b0:c9:9c:7c:3a:66:31:a2:
                    79:cb:5f:1c:6e:4d:2c:bd:37:ac:a1:a3:23:85:f9:
                    ea:6d:bb:47:0b:52:42:92:f4:ee:bb:f1:24:bc:6a:
                    bc:9f:4e:37:53:b0:9a:66:34:6d:bd:2f:9b:30:a2:
                    87:f2:d0:59:dc:a0:b2:87:0d:13:2d:3d:e7:f1:48:
                    e7:47:fb:30:74:fe:05:b9:26:c0:99:12:a3:a7:1a:
                    61:87:e9:fe:22:e4:dd:69:03:66:29:83:a2:db:b2:
                    93:2d:6d:e4:ff:bc:79:37:05:7a:88:a8:dd:9a:74:
                    d4:b2:29:4a:27:c6:e6:38:7e:19:49:cb:ac:dd:de:
                    3f:ba:5a:63:a8:75:7a:ac:8e:3c:05:bb:2d:c8:5c:
                    e0:69:28:7b:08:81:ce:0d:2a:9e:67:51:b8:c2:c8:
                    53:23:47:12:2e:28:63:6d:c1:4f:21:21:4e:cf:c4:
                    80:3a:1c:ab:ce:be:ed:3f:b5:56:af:18:92:b0:bf:
                    fd:bc:b7:8a:fa:84:23:a9:5c:44:41:6e:c0:8e:66:
                    7c:85:a2:02:6a:2f:58:1d:7d:e4:dd:6a:11:b2:cb:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4E:25:1E:A1:4F:46:FE:F5:54:7A:B3:9C:02:F1:A2:E1:73:5F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7728222-ace6-363c-9d03-98546cf4106d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:be:bb:d4:13:21:a4:a4:7e:c7:b6:3c:44:4a:fd:69:59:c4:
         22:41:67:cc:25:08:33:3a:33:48:27:82:41:6a:0e:0f:aa:36:
         dd:9c:89:8d:22:21:d4:e5:da:ff:de:19:2f:71:7a:73:84:dc:
         50:6a:de:10:42:07:c6:68:0b:9a:1a:a4:af:93:8f:72:41:ce:
         c9:37:0f:81:66:73:50:cc:52:92:c9:66:61:d9:90:f1:08:6a:
         cc:03:25:3b:be:ca:e1:b6:bd:cf:78:8a:36:8e:ae:f6:c4:12:
         fb:78:7e:fb:c5:80:28:0e:84:a9:49:94:44:17:64:4d:35:45:
         2e:83:1b:00:d3:4a:59:d1:51:9d:e3:21:10:2c:22:4a:18:96:
         f4:f8:f8:6d:6c:f7:29:be:91:6a:9b:86:98:76:76:d5:dc:3b:
         e4:bd:0e:ec:3c:a8:74:07:dc:99:99:97:8f:c3:3e:b3:87:5e:
         10:67:66:a0:de:04:82:92:5f:ac:1a:99:cd:26:a4:bb:3d:4c:
         5b:44:8b:6b:8a:af:98:b1:38:13:09:e4:d6:d6:a7:10:a8:d4:
         a2:6f:90:da:12:1f:a4:8c:de:c2:10:58:5e:a5:81:ea:04:39:
         a0:f8:f8:18:1e:8e:99:b7:83:ee:6d:6c:2f:68:9f:cb:4a:93:
         bd:25:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:51 2026 by rpki-client