Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6254963b-492e-3c82-b430-a27a6d17c6e3.roa
File:                     6254963b-492e-3c82-b430-a27a6d17c6e3.roa (raw, json)
Hash identifier:          +x64u1Tbf4GzviTDLwc/eJjwWBaNTT7fSaVo6c0wdC8=
Subject key identifier:   C9:1C:9B:FC:42:FD:BC:F0:C2:22:BB:09:C3:D8:39:4B:EA:3A:D4:C6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B80B9D4930F556DC6C694
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6254963b-492e-3c82-b430-a27a6d17c6e3.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.107.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:80:b9:d4:93:0f:55:6d:c6:c6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ec6a6271-f0da-4924-bd38-347ba125f6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:73:56:a7:b0:fa:84:fc:43:ec:30:01:22:
                    59:ca:37:b9:55:89:e1:f0:17:56:c2:da:98:56:3a:
                    8e:78:5c:72:a2:4e:f1:bd:e3:8e:02:ce:db:56:75:
                    83:2b:0c:88:60:33:e1:92:51:dd:9b:69:48:ee:3f:
                    e6:0b:19:fe:4d:81:1b:b4:f3:47:1f:57:55:78:0a:
                    ca:f0:5f:c7:a4:75:e6:0f:b6:05:d4:f9:7c:ee:7c:
                    1a:87:32:6e:d0:c7:17:d1:ca:68:a9:6d:e2:8b:2f:
                    41:9d:5f:3b:1a:d7:52:fc:f1:ab:5f:1c:42:49:03:
                    97:20:5f:b9:79:75:cf:7a:06:e2:ed:04:e3:57:4d:
                    08:11:73:e5:29:d2:49:87:a2:9d:fb:a7:94:66:9a:
                    be:56:cc:40:37:fc:46:3c:c9:78:0f:fd:51:53:68:
                    a2:87:83:fa:37:9d:c0:18:f0:bd:af:71:c8:e2:43:
                    76:33:3f:9e:4a:2b:93:30:e7:d9:84:48:1a:df:16:
                    08:d7:64:6b:bc:17:8b:22:8b:45:75:5a:56:d7:2c:
                    fd:3c:8a:7d:9f:bd:47:be:2f:07:f6:eb:40:98:3d:
                    3a:fc:f4:6f:83:73:32:0f:f0:5f:a1:f4:16:f4:98:
                    71:24:27:2a:26:10:12:a8:c9:a8:d2:50:db:c5:33:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1C:9B:FC:42:FD:BC:F0:C2:22:BB:09:C3:D8:39:4B:EA:3A:D4:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6254963b-492e-3c82-b430-a27a6d17c6e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:af:1b:94:d9:ed:a9:50:30:8d:e8:08:ec:80:2c:4d:b8:
         d4:f5:eb:bb:6a:fa:a1:94:32:43:24:30:49:07:ac:58:03:20:
         8a:03:66:35:09:e0:72:b8:8d:cc:43:bc:9e:14:90:2f:93:d5:
         9f:b9:ed:f7:07:e2:dd:ef:b7:d1:e7:5f:ac:aa:22:f1:12:ca:
         93:25:2b:62:44:97:9d:f5:b4:51:af:50:1d:ca:95:4d:df:4a:
         bb:16:7f:19:5a:a8:86:f6:5d:32:7d:5f:0f:78:d2:90:cf:5b:
         4a:ce:9c:4f:8b:35:03:f4:14:ff:24:14:34:22:81:d2:a3:0b:
         94:7c:c4:5f:60:f3:9c:44:25:31:32:67:46:eb:84:4b:8a:7b:
         aa:81:62:d1:db:f0:94:19:e4:28:69:27:d7:c6:fb:57:b1:b9:
         17:97:45:e1:4e:f3:24:ca:37:1f:03:9b:67:9b:86:44:14:34:
         74:a0:82:d1:27:4d:aa:f2:c5:8e:19:73:21:ab:b8:b8:24:bd:
         e1:5a:7f:16:6b:b0:c8:e9:65:e5:10:f9:d2:df:50:ba:28:5a:
         27:0f:73:37:3c:07:91:71:9e:52:ba:59:91:2a:ce:cf:e3:04:
         d3:10:90:7b:25:f4:32:c3:f5:da:68:fe:0c:3c:6e:24:74:4a:
         a7:a1:56:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:33 2026 by rpki-client