Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/52898e70-eb6a-3cae-ac24-a2057e3e55bf.roa
File:                     52898e70-eb6a-3cae-ac24-a2057e3e55bf.roa (raw, json)
Hash identifier:          rrnU2MiqXRluigKB4f2DvacnVwxOrEHEF4TfHEDa44k=
Subject key identifier:   F3:70:AC:CE:D7:B2:1E:AA:07:4D:26:19:82:50:CA:7E:A8:E4:50:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F66814DA7D4D0D7DCD550
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/52898e70-eb6a-3cae-ac24-a2057e3e55bf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        75.107.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:66:81:4d:a7:d4:d0:d7:dc:d5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=638a456b-4b3a-4019-a56e-f6013309113b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:5d:e1:e9:4b:d6:a2:46:a8:ca:14:69:1b:
                    e1:3e:ec:91:45:98:71:f6:37:6b:69:b8:c4:b7:c9:
                    f7:35:ec:f6:ff:38:30:07:d8:d5:e7:ab:eb:0c:59:
                    9a:6b:e3:70:4b:40:8c:85:c2:50:4f:3e:11:81:78:
                    ef:6c:fc:df:1e:16:65:f5:ec:31:7f:71:43:e4:04:
                    81:6b:de:86:bf:87:d4:f0:7e:9b:a1:67:ae:06:18:
                    7a:da:85:1a:8d:d8:84:f9:3d:99:26:a3:fb:fb:bc:
                    b5:e8:20:f2:a2:ef:fb:06:76:02:f2:26:76:84:67:
                    12:a9:8a:41:40:59:fa:db:43:c4:6e:84:c3:42:62:
                    55:48:82:f0:0c:4d:09:0c:15:4a:7b:4d:f8:f4:80:
                    61:03:f2:63:98:4c:ea:a2:6c:27:bf:fb:4c:94:d7:
                    a1:0a:d6:fb:34:52:81:dd:92:49:69:4a:46:cb:17:
                    da:28:ff:92:4e:1e:d7:6a:a0:32:6f:83:9b:64:25:
                    a1:6e:20:7e:c0:e7:80:8b:c7:eb:e5:d3:16:7f:39:
                    a0:e6:f5:e1:47:93:6b:16:ad:0c:6e:0f:73:12:3d:
                    15:54:23:3b:e3:a6:d9:7e:4d:08:4c:3e:ec:62:88:
                    9a:1f:24:38:89:84:7b:cd:6d:ea:72:87:fa:42:fd:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:70:AC:CE:D7:B2:1E:AA:07:4D:26:19:82:50:CA:7E:A8:E4:50:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/52898e70-eb6a-3cae-ac24-a2057e3e55bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:31:9a:0f:10:09:a8:95:60:88:35:73:32:a7:49:2f:5f:b4:
         72:3e:23:ac:59:de:ef:89:3c:ae:d1:b7:da:3e:b1:cc:b1:0f:
         b9:50:7d:61:b8:a1:2a:6e:5f:23:67:4c:eb:2e:d2:a5:f0:ec:
         ad:8b:bb:84:29:0f:13:3a:7c:39:c7:55:e3:95:b1:63:2a:cd:
         e3:f3:59:73:4b:d7:92:54:2a:d2:bd:11:2e:6e:99:01:a8:52:
         70:ab:38:88:cd:fe:3c:9f:1e:86:45:36:73:4d:89:6e:87:95:
         57:93:58:79:18:4b:fe:6d:31:9e:29:9e:eb:3a:6d:d1:c9:56:
         75:e9:c9:75:f8:6e:3b:31:a7:f8:8c:40:ce:c9:7b:71:06:e4:
         33:c0:e4:23:e5:49:b5:b0:66:ab:c5:ea:1d:92:35:cf:9c:57:
         56:5f:ec:1a:76:07:c5:74:0e:dc:22:ec:ab:82:bb:af:83:10:
         d9:b1:07:1b:f2:c7:84:55:5c:4d:41:09:bb:ca:3c:5f:45:c5:
         c6:9e:2b:02:7f:69:c0:72:c6:88:3c:d0:04:3d:5b:ef:9c:8f:
         29:3a:3d:4d:6d:e6:f2:6f:ad:14:a7:a9:65:83:b7:80:4d:94:
         83:b8:0f:f8:13:a2:89:09:c7:4e:d5:09:65:46:11:e5:8b:bc:
         58:98:82:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:53:27 2026 by rpki-client