Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db33167f-24a6-381e-94c2-62c7691fc986.roa
File:                     db33167f-24a6-381e-94c2-62c7691fc986.roa (raw, json)
Hash identifier:          cHbyzjB82rldU6+UIMzTvp0VceIGkLoR9VwbHyIR25g=
Subject key identifier:   94:18:ED:81:2E:08:19:59:FA:1E:57:AD:BB:2D:04:EE:D6:E5:1B:AA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F5B54ADC40B896366EB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db33167f-24a6-381e-94c2-62c7691fc986.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.107.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:5b:54:ad:c4:0b:89:63:66:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=43abce12-31ce-4ad7-bd24-74ce37e09dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:93:84:11:4f:85:25:54:b7:ee:ae:0f:2c:
                    11:82:e2:0f:a2:d8:6d:ad:20:16:a4:6a:e0:16:75:
                    f0:4e:85:5c:bc:ca:1f:d7:3d:28:63:17:0b:39:51:
                    44:51:ad:9b:1e:35:2d:8c:d2:a4:73:37:09:e8:ba:
                    2d:4d:2e:f0:f6:13:89:a1:e3:be:f4:5d:cf:52:fb:
                    e4:fe:6b:20:73:b0:bd:27:56:a3:8b:0a:e9:6e:4d:
                    5d:4f:44:7d:60:0e:0d:94:36:a2:1a:84:8b:b3:b2:
                    0d:a5:cd:66:e4:51:a6:27:58:a7:83:5b:3f:5a:ed:
                    80:6d:75:54:fc:9d:e1:55:bb:d2:da:35:64:55:0d:
                    0a:66:a5:01:d8:44:6a:25:44:37:72:f3:b8:48:9a:
                    c8:d3:20:d4:b9:9b:32:3d:c7:64:9a:38:ee:41:b5:
                    5b:a5:c3:39:60:e2:b3:1b:08:8b:a2:b0:c0:ae:55:
                    a3:29:5d:5b:8e:9e:7d:75:e5:eb:22:1d:44:cd:80:
                    f4:b3:38:d0:a4:08:22:b4:68:68:54:b9:ad:8a:3d:
                    db:46:b0:1f:3f:fa:c9:d9:ad:10:4d:13:4c:10:e9:
                    3f:7f:cf:24:00:51:d0:00:fc:9b:a7:97:27:aa:6e:
                    a7:4d:cd:2d:30:c3:e8:92:c5:ba:18:a1:cc:0a:0d:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:18:ED:81:2E:08:19:59:FA:1E:57:AD:BB:2D:04:EE:D6:E5:1B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db33167f-24a6-381e-94c2-62c7691fc986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:c2:cc:c1:ee:d0:a9:75:9b:19:fe:59:6e:8e:84:af:a4:
         25:e0:32:f8:34:2b:30:98:5d:f5:de:63:74:02:ec:61:aa:aa:
         3c:93:07:c0:3f:67:61:ba:f3:a3:51:6c:23:da:68:0e:9b:01:
         89:82:09:b4:78:b5:43:03:e9:78:a3:d9:1a:74:44:ad:ea:92:
         4d:0d:c4:cb:0d:a5:e1:71:68:33:05:eb:3b:fe:e6:75:e5:41:
         a4:55:36:77:14:cb:b3:a2:ee:81:7d:73:94:6d:a5:5d:0a:df:
         59:fb:2f:79:54:3d:2f:f2:6a:fb:04:36:35:4c:f2:36:3d:e7:
         f4:ab:8d:e8:f2:17:59:92:b8:da:90:dd:de:dc:f6:89:b2:16:
         8f:4d:84:d7:2b:52:e8:de:d3:ff:3d:a4:43:51:cf:ba:40:12:
         b1:c2:c9:72:45:51:33:cb:cb:c2:d2:27:02:98:27:88:35:95:
         1f:92:ba:7b:13:53:8a:5f:d7:d5:a5:ae:d2:ad:20:60:b4:be:
         95:64:e1:42:ff:b6:bb:59:2f:b1:d3:56:11:76:3e:87:5f:1a:
         9b:62:d2:fa:dd:ce:85:1f:50:26:c2:9a:1d:10:f8:a9:4c:40:
         7f:b8:20:7e:64:1a:2a:3d:9b:9b:bf:73:a3:a1:52:6e:fb:bf:
         1d:bc:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:14:51 2026 by rpki-client