Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecaae239-7594-39d9-b8b8-4ea8280fc360.roa
File:                     ecaae239-7594-39d9-b8b8-4ea8280fc360.roa (raw, json)
Hash identifier:          M3wj1C0struQNdzedBAnxeOLNzP0YBGebMMy/1GHjVU=
Subject key identifier:   A9:C3:23:A7:4A:C2:78:9D:0E:7E:53:C4:B4:DA:F1:EE:3A:33:C1:C5
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BFA83B89B6705578E2400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecaae239-7594-39d9-b8b8-4ea8280fc360.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.107.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:fa:83:b8:9b:67:05:57:8e:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ccda6510-039a-4706-a130-5139bc9b7e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:6d:f5:24:cc:2d:50:e3:10:9c:92:1b:9f:
                    8d:ef:bd:2b:22:81:44:2d:0b:f2:98:40:bc:6c:d7:
                    a1:d7:4f:76:89:2f:b5:7b:97:48:ec:08:76:4c:85:
                    c7:52:81:94:bc:79:b0:25:65:c4:0b:24:7a:41:eb:
                    bb:b0:da:14:fc:98:0f:e8:72:0c:b7:0b:02:79:af:
                    cd:eb:49:ed:4e:05:3b:12:aa:c9:ca:4a:2f:b3:ba:
                    a7:cd:3e:7e:94:13:67:f7:f8:09:a8:54:2d:87:0f:
                    ef:2e:d1:87:61:e6:b4:cd:52:97:43:3b:45:b7:57:
                    db:21:ae:e8:fa:ea:36:55:b4:f1:f7:5f:74:de:2a:
                    89:94:54:05:af:5d:e7:18:b7:5c:e4:36:99:10:4b:
                    6d:cb:7b:5c:37:fd:f9:23:1e:d7:3d:8a:61:fe:68:
                    08:06:01:ab:0a:37:9d:04:11:3e:bc:88:cc:1f:a0:
                    c7:37:c3:46:68:f0:37:8c:7a:fa:e8:74:6d:99:42:
                    79:5e:1e:3b:9b:df:1e:7b:4c:73:50:76:92:72:4a:
                    a8:78:75:55:ad:d5:30:52:6b:81:45:12:e7:26:9c:
                    12:44:16:92:d4:76:73:0d:80:b7:34:c4:f9:ef:3b:
                    8d:0f:44:da:38:d8:98:fd:26:c4:cc:04:88:6f:47:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C3:23:A7:4A:C2:78:9D:0E:7E:53:C4:B4:DA:F1:EE:3A:33:C1:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ecaae239-7594-39d9-b8b8-4ea8280fc360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:35:f4:ef:40:42:8d:4a:42:0c:67:8e:f5:4e:f7:2e:93:27:
         f5:fe:4d:52:7a:65:be:ea:cf:ee:fc:95:c4:69:e5:aa:bd:5e:
         ba:4c:c7:90:33:69:41:62:f2:a4:fb:7a:89:80:7e:de:0b:62:
         08:55:4a:13:ff:02:de:0c:47:06:08:06:13:33:9a:29:d9:b9:
         d0:d3:57:47:95:e2:23:99:74:58:49:d1:8d:fb:e2:40:ec:61:
         7e:b6:d2:ff:ad:02:39:cd:53:54:62:18:60:08:b3:d3:b9:38:
         34:f7:a3:43:14:cf:d2:44:9a:88:c3:df:cc:5e:56:e7:76:95:
         39:0e:11:7b:8a:d9:3d:98:8b:dd:51:c9:8f:04:ab:8d:9e:97:
         8d:43:ad:15:06:f1:94:8e:ec:6e:aa:94:51:c0:3e:d2:6e:03:
         11:6c:42:78:e4:96:7a:89:34:55:e7:1d:72:50:51:f2:8f:5b:
         18:e1:62:a6:fa:b9:f8:bf:c1:3b:94:5a:00:20:a4:d4:ed:e0:
         dd:65:4c:35:21:53:22:1f:c2:d9:f3:1b:b3:93:25:73:e5:e0:
         ab:ab:ee:c8:f0:95:dc:00:a7:ed:71:9c:19:c1:3b:d0:26:60:
         40:84:3a:2f:fe:fe:3c:71:fb:9d:32:3e:66:8a:a3:6d:8c:88:
         fe:42:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:33 2026 by rpki-client