Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/acf362f3-7d13-3a40-9840-bed96fa77442.roa
File:                     acf362f3-7d13-3a40-9840-bed96fa77442.roa (raw, json)
Hash identifier:          aDFNo9Ya9OWK3e8WQFtJ1oxVEKSXorbUVjlm9wnVECw=
Subject key identifier:   60:AD:88:84:10:F4:8E:9C:D5:EF:E2:86:94:D8:06:C2:A5:F9:65:EE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E1D0420A5B96119AA640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/acf362f3-7d13-3a40-9840-bed96fa77442.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        75.107.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e1:d0:42:0a:5b:96:11:9a:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=1bf7b12f-d880-4aa4-8f12-1634beeb7720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:54:ec:38:36:3c:6b:f0:26:b4:ce:73:72:
                    8d:7d:15:08:9c:16:69:81:0e:0a:30:d2:32:cb:b6:
                    0e:02:97:e4:3b:d3:68:db:33:a4:0a:e3:fb:82:cd:
                    4d:c5:39:96:d0:eb:53:da:53:3f:6d:b2:50:c6:69:
                    9c:fc:59:23:7d:02:de:fc:a3:6e:7b:a1:15:5d:e6:
                    0e:39:f3:55:57:9b:c0:f1:60:c0:b6:8e:45:26:e3:
                    88:e4:20:2b:c9:fc:b5:b1:35:52:0f:86:73:3a:0f:
                    f3:d2:fe:09:bb:90:61:d9:5a:4a:13:14:2d:91:e3:
                    92:11:7e:ab:19:51:b6:c1:26:05:53:fc:19:7b:4c:
                    6d:f8:41:db:33:5c:6c:a2:03:7c:37:ff:4d:43:1f:
                    94:00:cc:c7:13:07:4d:93:be:89:9c:99:ff:e4:af:
                    fe:98:35:08:79:86:db:45:1b:6d:81:72:a2:1d:a9:
                    08:51:57:da:bc:ce:76:9f:05:d8:96:e9:e0:25:05:
                    11:4b:88:25:ce:84:0c:37:97:53:e9:9d:74:2f:a5:
                    9a:77:23:97:6c:6f:2f:68:da:d5:88:dc:88:15:24:
                    06:3a:a8:d4:86:c4:38:82:00:a2:48:04:11:c6:3f:
                    e6:91:6e:71:8a:6c:26:f2:53:30:5b:29:8c:c0:61:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AD:88:84:10:F4:8E:9C:D5:EF:E2:86:94:D8:06:C2:A5:F9:65:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/acf362f3-7d13-3a40-9840-bed96fa77442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a9:52:3e:24:4f:bd:65:f3:8a:83:47:cd:3c:0e:38:a4:1a:
         81:de:94:d0:c5:20:e0:58:7d:dd:46:cb:82:93:96:f9:4d:a3:
         09:14:7d:86:c6:d9:7c:9c:1d:9e:5b:4a:2c:57:07:d3:64:56:
         55:72:d7:d9:f5:b9:ab:30:43:35:b1:0a:a0:7e:33:c1:cc:7a:
         7b:0d:5d:dd:b9:bb:14:64:07:48:86:e6:66:41:bf:00:39:01:
         fd:6f:28:15:42:2e:96:66:e6:b7:c5:e1:39:65:16:85:27:b9:
         5b:a4:3a:d1:6b:8a:f7:c5:03:f4:4d:d6:e9:ab:5a:11:18:30:
         ff:95:1d:84:b8:b2:54:67:b1:e3:f0:7a:24:98:dd:ad:ff:b2:
         be:11:c5:27:46:b3:ad:50:70:4b:0c:3e:99:b7:60:01:5e:4c:
         1c:03:04:0b:ea:a7:32:84:5c:5e:20:7d:53:66:1b:19:e9:22:
         4a:80:56:f9:49:a6:ca:f9:ec:b8:78:96:e0:b7:55:2f:c5:8c:
         53:b1:8c:e5:33:96:44:83:97:45:82:94:04:98:be:db:06:1f:
         b8:c4:3b:52:03:bd:22:43:27:40:0a:51:bb:e3:ef:14:2b:67:
         87:24:0f:e0:41:49:f0:46:78:fd:e4:32:5c:1d:ca:f4:e5:90:
         3e:da:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:12:30 2025 by rpki-client