Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3733474f-b430-38e1-b249-6df6ad31deff.roa
File:                     3733474f-b430-38e1-b249-6df6ad31deff.roa (raw, json)
Hash identifier:          oFmNSYJvg6H9gw7lMe1cchOMHNrFLo7gCmvnMSV3gTc=
Subject key identifier:   77:36:DC:3B:56:92:6E:FB:A6:92:B5:D1:F6:BF:B5:B5:6F:FC:E2:05
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F52D75C564FFD97A09660
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3733474f-b430-38e1-b249-6df6ad31deff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.106.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:52:d7:5c:56:4f:fd:97:a0:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bea58819-7e47-4c68-bc9d-a4627a1a2672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:74:46:65:12:bc:ff:0f:d6:41:8c:02:c6:
                    61:64:e4:94:ba:09:64:93:aa:2e:74:bf:e4:0d:7a:
                    98:0e:0e:28:7a:39:3d:2d:ba:64:24:0d:a5:88:27:
                    b9:cc:45:4f:8e:09:0e:ed:c7:ac:f2:7e:79:14:8c:
                    e7:83:a1:07:f1:ec:f3:82:73:bc:f8:4f:37:91:28:
                    1e:4a:98:30:ed:20:ed:b6:c2:7b:d6:d7:e2:d5:52:
                    74:b9:c0:99:82:8f:3f:fc:7d:57:37:87:8a:02:e4:
                    d9:5c:f6:30:09:6d:95:95:fc:d2:cf:64:2f:bb:da:
                    2a:5b:37:3b:06:2f:8c:b2:3e:c8:6a:0a:d9:f5:91:
                    67:d0:a7:26:8e:90:57:91:ed:27:d1:4c:51:f7:11:
                    5a:45:db:07:50:c9:c7:36:2f:b4:34:21:5a:bb:4e:
                    c1:b9:bf:70:a8:80:ab:5a:46:26:ea:17:2b:f3:a8:
                    20:14:2e:e2:2a:fe:44:4b:c1:6f:ed:df:07:93:a0:
                    66:9b:e6:6e:a2:e7:e6:f6:6a:91:e9:ad:69:4f:86:
                    ad:1a:7c:09:83:87:ac:c2:fc:49:35:c6:cf:3e:84:
                    d3:c5:87:12:f7:98:6a:a2:7c:dd:22:12:e4:7e:34:
                    38:85:b5:9f:62:b1:3e:0f:4e:2b:87:d8:63:60:ae:
                    e6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:36:DC:3B:56:92:6E:FB:A6:92:B5:D1:F6:BF:B5:B5:6F:FC:E2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3733474f-b430-38e1-b249-6df6ad31deff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:23:cd:6e:9f:27:95:46:9e:8a:b8:b6:6f:19:82:f9:5e:
         26:23:7c:75:21:e8:36:05:ba:77:e6:f8:6d:2b:ba:34:13:99:
         c2:f1:ec:d8:59:0c:d6:12:90:03:2c:6e:b8:74:3d:05:5c:96:
         3a:74:2e:38:b8:1e:66:f8:59:9e:59:34:ef:ea:fe:da:5a:c8:
         2f:a3:12:6e:67:92:4d:22:f4:df:42:00:7d:b5:87:ef:37:3d:
         b9:dc:7a:66:96:93:7a:19:fd:46:ed:28:69:37:1b:2c:96:53:
         3a:95:db:72:e9:37:4b:71:c9:9a:38:0b:27:1d:0e:ba:23:a9:
         ec:46:cd:c2:15:a6:05:03:83:8f:c3:41:85:31:d3:6a:44:d2:
         98:b4:0c:5f:d9:cf:d2:04:50:ca:e1:dc:98:27:f6:d5:76:e7:
         b4:5c:be:45:e1:ae:25:99:9a:c1:46:7a:1d:3c:62:4a:2e:44:
         12:86:a1:ed:9a:6a:ea:7e:e1:a9:1a:31:05:24:82:6d:8e:70:
         59:92:71:bf:f0:3e:1f:a3:81:0d:9f:5c:0e:7d:34:65:25:d3:
         df:74:19:b9:48:6f:0b:e4:82:00:18:52:b3:80:18:c3:f8:ff:
         c1:3b:33:02:86:30:2c:03:b8:ab:8c:32:4d:b6:90:e4:c3:08:
         f6:07:b8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:06:39 2026 by rpki-client