Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc8289a4-f1c3-3299-9207-8c92ee09aa69.roa
File:                     bc8289a4-f1c3-3299-9207-8c92ee09aa69.roa (raw, json)
Hash identifier:          3HOHBf1ZcaicdMCB1/fTmUeqH2/PkHdmEKQdcyxgVUA=
Subject key identifier:   33:83:11:7D:F9:AE:BF:43:6C:36:BB:9E:18:F0:58:CE:75:BF:61:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E084DB6878B442ECE53980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc8289a4-f1c3-3299-9207-8c92ee09aa69.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        75.107.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:84:db:68:78:b4:42:ec:e5:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=61589004-416e-44f8-83ec-ab182f7d5966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:d7:f1:51:df:78:ee:11:a5:4c:7b:8d:9a:
                    60:eb:d3:35:16:0b:9b:25:85:e9:a3:8b:b2:36:81:
                    2b:ee:0f:27:5b:e3:07:4f:ca:e8:7d:d8:47:32:64:
                    eb:39:26:9a:59:d1:fc:b7:1c:ec:aa:18:53:cd:9b:
                    f1:e2:d6:a7:14:2f:5b:67:99:c5:4e:b2:b2:18:6a:
                    ea:46:8b:33:27:81:1e:80:2b:b9:bc:89:cd:2a:5a:
                    a0:74:86:9c:86:5c:47:ac:e0:09:ee:a4:df:12:c9:
                    a0:10:aa:ed:13:16:7e:f7:8a:1a:07:df:77:38:3b:
                    4f:11:52:cf:b0:44:11:0e:ee:cc:69:ea:6a:b8:8d:
                    6a:cd:f5:e8:da:31:cf:aa:17:37:a5:e1:99:b1:09:
                    c0:53:b7:6b:be:42:ad:05:44:81:a1:54:4e:ea:19:
                    26:17:79:fb:10:4c:a9:dc:cd:57:dd:7b:3b:5e:33:
                    fc:5d:7f:78:ea:32:ff:b0:30:81:74:9e:af:7f:f4:
                    3a:9a:07:34:0c:ea:cc:e0:a9:3a:16:34:22:02:ca:
                    7e:62:cc:c1:4d:0b:83:8c:7b:f3:48:9f:42:1e:9f:
                    ac:2d:23:f6:75:e8:25:e1:3f:e2:29:82:38:c4:db:
                    e2:4c:cd:b1:5c:28:1c:19:eb:4c:f3:93:77:f9:b2:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:83:11:7D:F9:AE:BF:43:6C:36:BB:9E:18:F0:58:CE:75:BF:61:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc8289a4-f1c3-3299-9207-8c92ee09aa69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:87:3e:d6:74:b9:21:7d:29:ec:3e:2f:2b:de:3d:29:88:36:
         6c:3a:56:51:22:3e:ee:45:c1:20:ff:15:05:10:4b:b0:14:5e:
         7d:9d:09:fd:78:8d:02:f2:b1:13:c3:dd:ea:2a:cd:4c:8b:9e:
         e7:2f:4c:f6:37:a4:5f:07:a0:2a:c4:e4:55:84:fe:40:9b:05:
         4d:2c:cb:0a:6a:fc:11:3b:b7:66:52:bd:8e:04:26:ad:01:12:
         45:ba:03:79:64:a9:93:7e:79:06:e6:a5:d7:a3:6a:48:4f:fe:
         df:ca:5c:f0:de:01:9c:27:81:e6:03:f3:30:ea:38:2d:5c:7d:
         22:f8:a0:71:8f:c6:ba:a2:1a:05:09:7b:39:74:a7:03:bd:ce:
         a1:09:9a:a7:cb:8f:1d:74:64:69:59:64:58:22:da:0f:de:dc:
         d1:60:5e:21:d0:ce:31:14:ed:d0:2b:2e:0a:10:f7:b9:2b:71:
         d2:b6:b9:2b:64:3a:eb:fe:c3:23:ad:db:47:f8:9b:32:ce:98:
         8a:fc:07:06:d3:09:5a:3a:da:fd:47:49:b7:00:15:d2:43:78:
         e2:a0:44:e5:59:3b:d9:9d:91:20:5a:33:dd:c1:6e:01:e1:72:
         6c:66:d1:4a:8c:98:ce:4f:dd:ba:72:1b:1d:54:8f:4d:62:25:
         5a:55:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:39 2026 by rpki-client