Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d846849d-48a1-3842-9821-bd2e7b00d18e.roa
File:                     d846849d-48a1-3842-9821-bd2e7b00d18e.roa (raw, json)
Hash identifier:          s0mDDk/1axjVIAY0Ywf1jxitN1eEZFY7ctNjvSbz1Ig=
Subject key identifier:   FE:E4:A6:5B:73:D8:22:31:44:46:AC:F9:3D:0C:4D:13:F2:10:96:E2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F6D5ED49B5E46AD326700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d846849d-48a1-3842-9821-bd2e7b00d18e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.107.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:6d:5e:d4:9b:5e:46:ad:32:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=94cbe9bb-de6d-4995-ad55-d89416f3a95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:39:ce:d0:e6:8a:bd:d5:e6:cd:19:f2:42:7f:
                    84:e0:fa:9d:2b:c2:e8:98:58:2e:c5:b2:5c:14:ad:
                    b9:ed:d3:02:3c:1f:25:01:1f:5f:9f:f4:51:65:56:
                    91:a0:22:85:7a:1f:91:da:2e:fd:21:82:78:f8:67:
                    5e:fe:7a:e0:97:1a:6d:7d:7e:77:39:bd:f6:a5:2c:
                    d5:c1:7d:c2:48:e6:c3:1c:43:c1:75:52:3c:f6:75:
                    63:9c:a2:d5:f3:35:d1:84:aa:c7:ca:ed:66:5e:87:
                    d3:4b:5b:67:ab:70:8f:8d:0f:e4:63:b7:01:1f:44:
                    61:8c:26:e8:a0:79:6f:fd:cd:31:f5:70:a6:b0:e8:
                    d0:89:cd:df:d7:a2:aa:69:97:d1:d4:69:18:96:50:
                    fc:d8:0c:18:4c:96:ae:60:49:e5:5e:1c:c2:fa:ea:
                    e5:67:5f:7f:18:7c:52:6e:4a:1f:70:37:99:52:6c:
                    fc:76:bc:fb:e9:4a:34:d7:3a:a6:62:0d:c8:19:38:
                    0e:3b:01:88:0e:d4:9c:6b:95:e9:63:35:e0:d5:9e:
                    01:01:3b:37:51:25:f4:8b:94:55:e9:cb:8b:44:4c:
                    57:d8:fc:0f:97:72:cb:56:48:a8:a5:54:8f:b5:7d:
                    90:71:79:b6:81:6b:8e:3b:c7:b3:61:91:37:ed:2c:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E4:A6:5B:73:D8:22:31:44:46:AC:F9:3D:0C:4D:13:F2:10:96:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d846849d-48a1-3842-9821-bd2e7b00d18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:04:75:bb:b5:a5:23:e8:89:87:1a:16:7e:f3:f4:19:b9:0e:
         ba:18:98:8d:e7:bd:df:82:20:2f:af:fe:e7:ad:65:60:d6:10:
         fd:9b:2f:56:c5:fa:c6:23:1c:2c:43:34:e0:9b:31:e5:05:ee:
         58:46:46:5e:18:b2:fd:cd:98:5b:ff:29:47:5b:59:f1:27:49:
         a5:b6:ad:39:8c:80:92:80:16:81:d3:8e:f9:e2:99:6a:0e:5f:
         05:16:48:67:68:e7:b3:64:96:4a:d4:73:aa:c0:63:d6:48:f2:
         2e:a3:0f:28:3d:d2:ea:58:84:f3:8c:3b:7a:94:ef:e2:5e:a5:
         04:9c:89:78:cc:9c:3b:71:0b:46:b0:f7:57:45:f3:b3:95:73:
         87:19:1a:89:32:d3:1f:88:96:a8:d7:95:fe:7a:73:d8:30:3f:
         f3:ba:3b:6b:b7:b8:cf:cf:f5:3a:b8:ac:8a:4e:de:05:80:97:
         91:31:05:e3:f5:e2:45:04:6c:ca:76:1c:5b:ce:53:74:e1:2c:
         d6:52:4e:8d:b2:21:47:23:53:5a:37:34:c9:3a:5b:59:9d:61:
         d3:fe:ee:fb:a8:48:7b:60:f9:2f:14:54:09:83:9c:e6:04:79:
         9f:d9:7b:36:7d:62:35:32:50:ff:b3:bd:01:96:9b:7a:15:8e:
         89:24:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:48 2026 by rpki-client