Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec6781b-e342-33f9-bf00-475999ffdb6e.roa
File:                     bec6781b-e342-33f9-bf00-475999ffdb6e.roa (raw, json)
Hash identifier:          A/m5hMUiGhkJXeRiyOg135vf5doj2vLRA3V8pyLt2DI=
Subject key identifier:   12:06:7D:B0:86:B8:A2:20:F7:EC:9C:1E:1E:B5:A1:BD:F2:F0:B0:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B8351EBE7A79852391700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec6781b-e342-33f9-bf00-475999ffdb6e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.107.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:83:51:eb:e7:a7:98:52:39:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=c4e9eb3b-bd4c-45e3-ace6-6674c3aa3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:53:b1:48:7c:d6:75:b1:23:b5:9d:c9:be:
                    6c:29:67:11:8d:ec:1e:54:74:3d:52:c5:51:89:5b:
                    a6:a3:61:c6:53:ef:d2:13:35:fb:a2:ee:93:9f:a3:
                    c1:42:88:4d:77:f1:41:1c:f9:9c:10:9a:9d:29:81:
                    69:40:22:8e:35:97:6d:32:eb:ce:f2:dc:ff:ae:ba:
                    b7:15:90:0c:16:9b:d3:84:fd:16:59:57:a0:ec:d2:
                    7b:1e:89:0f:6f:1b:10:8b:5a:65:7d:a9:96:6d:0a:
                    bb:80:fa:fa:63:50:14:cb:8a:4f:3c:36:6c:f2:43:
                    01:2d:6c:30:d2:7b:e5:8a:ba:1f:94:77:0c:fa:f4:
                    4c:e0:16:61:26:93:4e:d7:da:4f:37:5f:ec:1e:82:
                    61:4b:68:5f:88:6b:bc:5c:48:07:c6:90:19:05:d9:
                    db:53:4f:ee:35:9f:71:66:54:83:f3:80:20:aa:dd:
                    79:87:75:ee:db:05:15:d0:96:23:35:c4:64:8a:d0:
                    18:e3:0d:b0:17:d2:bd:43:aa:32:85:29:42:05:06:
                    fd:e5:f0:62:f0:83:f1:45:f9:a4:7d:91:32:59:e2:
                    52:ce:5c:9e:b6:ce:f0:d2:6a:6a:3a:b8:3e:aa:93:
                    1d:62:ab:8c:73:5d:7e:95:e2:a5:57:ce:bf:28:1c:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:06:7D:B0:86:B8:A2:20:F7:EC:9C:1E:1E:B5:A1:BD:F2:F0:B0:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bec6781b-e342-33f9-bf00-475999ffdb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:82:e5:0d:3d:e5:f8:b7:43:45:56:cb:ef:0a:f0:78:ba:
         e4:65:53:ac:0a:8f:ed:74:1b:e4:87:51:45:e2:e8:3e:0c:d3:
         09:51:37:bb:a5:61:b8:dc:c7:d7:dd:d4:bd:fa:e5:5b:34:fe:
         8e:8f:64:1d:df:15:c4:11:3d:4d:5b:76:d9:a7:9d:91:2f:d6:
         52:48:7f:25:dc:1a:87:b2:dc:a0:d9:56:89:c1:4a:8d:98:01:
         a7:27:d1:80:6a:76:42:1f:e1:a3:2d:f4:64:f8:b8:f6:fc:82:
         43:44:7d:8f:3f:f5:d4:6e:a8:b2:cf:18:59:c8:69:3d:96:3e:
         a6:19:0a:12:2b:ab:b1:6c:1c:d6:ef:24:11:c6:72:9d:10:17:
         8e:90:4a:42:09:74:b5:7f:0c:f2:b1:85:a7:b2:f7:9b:b7:2a:
         04:fe:b5:1f:aa:f2:4f:39:9d:38:52:3a:76:c7:c9:b7:0e:13:
         c2:98:4a:ec:54:f5:8e:72:1e:c3:bc:fe:16:af:bf:51:1e:ac:
         6e:fd:d7:8f:bb:61:7a:58:4b:28:8d:2b:08:dc:fe:98:0a:2c:
         74:b9:b5:1b:e8:2f:9a:d6:f6:d5:b7:77:8c:30:8e:c5:8f:d7:
         da:e8:ea:5e:0c:e1:d7:cf:d8:65:01:5f:be:5a:13:4b:ce:f1:
         5e:61:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:34 2026 by rpki-client