Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6254963b-492e-3c82-b430-a27a6d17c6e3.roa
File:                     6254963b-492e-3c82-b430-a27a6d17c6e3.roa (raw, json)
Hash identifier:          IEHBKjzu3w5BdMQzRAFH4BpstG8c7w3XX1j963uPv0c=
Subject key identifier:   39:40:FA:84:82:D4:CA:9D:61:3E:85:B0:87:30:B6:80:B9:15:8F:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84112BCD0A3C40D8DC704FC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6254963b-492e-3c82-b430-a27a6d17c6e3.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.107.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:2b:cd:0a:3c:40:d8:dc:70:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d64f1e3d-499c-4c0f-a3e4-cd73b60c61e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:ac:ab:dd:ef:0b:0b:73:46:a5:66:8c:6d:
                    db:09:24:d9:b1:69:37:a4:57:e0:b8:78:ea:74:9b:
                    21:ad:98:59:80:4f:63:53:42:15:59:6d:d5:08:a1:
                    12:97:ee:96:32:8c:e5:2c:96:4d:38:6f:bc:c7:a4:
                    8d:7e:95:ea:57:6f:a7:ca:31:cc:f1:a2:41:f2:dc:
                    c2:75:dc:67:3c:f0:12:00:0f:fa:47:4d:17:d8:bf:
                    6f:1a:12:ea:16:ee:78:41:91:43:8c:0a:8a:69:8f:
                    a3:19:52:7b:f2:f7:c1:92:14:46:72:fe:74:e8:32:
                    4a:42:25:7e:b3:f5:1b:54:25:49:1f:e1:df:50:00:
                    18:85:94:37:46:2e:10:69:4d:52:1d:5a:7f:df:05:
                    f3:da:86:a6:e8:d1:f9:05:a6:9f:33:f3:1f:68:da:
                    7e:79:60:f5:70:eb:9f:ec:e8:be:77:27:d9:c4:89:
                    54:9d:9c:42:c3:96:f3:8c:6d:f5:40:d5:da:b4:19:
                    b5:14:5a:53:79:16:f3:ac:6d:cd:bd:95:b8:12:96:
                    2a:4b:8b:56:a9:00:c9:74:f5:79:ff:e1:d9:d9:54:
                    f4:7d:30:2f:cf:74:ef:35:7c:be:bf:3f:37:df:a2:
                    bc:25:ac:59:c8:45:11:54:fb:e9:6c:f4:76:4a:b5:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:40:FA:84:82:D4:CA:9D:61:3E:85:B0:87:30:B6:80:B9:15:8F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6254963b-492e-3c82-b430-a27a6d17c6e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7a:09:ee:5c:d8:9d:36:82:02:3c:07:88:bc:93:b2:cd:c8:
         37:a8:a1:b5:72:8c:a1:18:16:99:8d:99:06:8d:eb:c1:b6:6f:
         d3:03:50:ba:c3:5f:dd:cc:bf:c5:6e:49:63:8b:84:40:c5:a6:
         59:1a:19:16:a2:35:ae:5c:25:fb:48:8b:c3:0f:83:bc:5d:a5:
         65:ed:93:a5:83:26:41:f3:c9:1e:33:31:e8:48:8e:61:cb:4a:
         fc:90:c6:4c:c3:1a:76:b4:fc:16:43:13:5e:fa:ad:03:82:08:
         44:33:94:f9:68:ea:48:b8:a6:5a:77:5c:64:7e:24:94:e5:c0:
         ec:a0:a6:f5:a2:7c:15:62:32:ea:59:88:34:ce:8b:af:82:de:
         49:c6:63:ff:9a:02:92:62:06:73:2f:1f:fa:6b:cd:13:ae:98:
         1a:86:67:6c:e7:15:ae:e5:98:85:2d:d4:f9:93:12:82:66:3d:
         bb:22:d8:c3:67:a6:5e:14:e6:b6:e5:8b:ca:62:9c:d0:38:4a:
         5a:5a:7f:b6:eb:91:9b:f0:7d:c6:9d:fd:d5:58:67:c9:57:1a:
         85:46:05:ca:a4:bc:68:23:e5:b6:28:09:4c:d4:a4:e3:cb:d6:
         90:15:33:92:db:14:f4:cf:6e:2e:a1:ba:ee:e9:4e:3e:bc:e0:
         07:8a:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:36 2025 by rpki-client