Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c955d346-8750-3e9a-80eb-5d3abc31cb49.roa
File:                     c955d346-8750-3e9a-80eb-5d3abc31cb49.roa (raw, json)
Hash identifier:          S8qN4JsFf59ZW2cM7z/XG0STFLNS+WzuYOq1rTrkAOQ=
Subject key identifier:   67:15:08:0B:D8:BA:95:F9:32:4D:1C:FB:E7:1A:17:20:5F:9C:83:7D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BF9D75813CB404BBDD100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c955d346-8750-3e9a-80eb-5d3abc31cb49.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        75.107.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:f9:d7:58:13:cb:40:4b:bd:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7bea5efc-29be-4389-9403-5e5ba06031e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:62:49:7a:c1:dc:a5:54:7c:47:62:51:f3:
                    e5:1d:e8:ae:b6:4f:e0:f6:ab:70:3c:af:f8:7c:86:
                    02:1f:fa:7a:27:c2:3b:51:b9:39:33:7a:21:b0:ae:
                    60:f1:aa:42:22:e5:2c:cc:ee:2d:05:c9:23:a4:a1:
                    b2:f9:7c:8f:23:3e:0f:e4:fa:ec:a9:fe:be:29:25:
                    ac:10:a7:08:c4:06:e9:a6:85:d9:2b:90:0b:e0:a5:
                    4e:58:e3:29:7c:86:00:25:d8:2d:3c:fc:1f:bb:ef:
                    8e:a7:47:f0:ef:17:94:3d:33:5b:c5:ce:a3:b3:99:
                    02:e8:92:09:cb:8b:03:96:91:0a:01:ec:9f:c7:ce:
                    54:57:a0:f6:7a:f7:cf:28:68:01:4b:dc:df:39:7c:
                    27:12:4b:9b:94:d4:49:e7:7d:2a:93:31:f8:02:48:
                    7b:0a:15:85:2f:b0:d7:85:a1:f3:58:f1:ec:ad:5c:
                    2b:d6:1c:f2:69:8a:60:0e:7d:c8:3c:97:f7:0a:3f:
                    c7:1c:ff:43:65:6b:5e:fe:bb:33:0b:e2:5f:4b:01:
                    8c:d0:08:0f:c0:66:8d:70:62:f3:00:1b:f2:19:ea:
                    b3:16:88:84:f8:f2:10:8e:62:13:52:fa:e9:d5:f0:
                    44:98:65:f5:13:a3:ef:3b:d9:84:0f:7d:6b:42:5d:
                    a0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:15:08:0B:D8:BA:95:F9:32:4D:1C:FB:E7:1A:17:20:5F:9C:83:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c955d346-8750-3e9a-80eb-5d3abc31cb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:61:ce:8f:c0:87:66:d4:d5:54:89:8d:19:4c:1d:a9:9d:4d:
         9c:dd:5d:12:cf:5e:bf:d8:d2:c9:d0:6e:a8:9b:90:5f:6a:a2:
         55:d5:de:b9:2d:79:15:fb:79:ac:be:0d:55:2e:78:c5:80:85:
         aa:3c:7d:f8:af:b7:0c:a4:69:ae:e5:6c:8f:06:df:99:67:b5:
         ad:29:a2:13:eb:5e:89:71:35:a4:40:c1:2c:23:06:19:15:f3:
         32:09:0b:6b:71:a9:51:3e:60:ca:12:e4:7f:69:19:4e:ed:dd:
         4f:0f:7d:ca:e2:1a:4a:ed:83:53:41:bb:21:32:0f:ae:2c:86:
         dd:36:be:28:fd:aa:01:b4:15:2d:e1:88:c3:fc:b1:b4:5d:53:
         ad:83:df:2d:5c:08:1d:75:56:0c:62:bf:4d:9f:0b:b5:47:2f:
         db:ae:90:c5:5c:f2:d2:ea:c9:98:c7:26:e4:89:77:a5:7b:0b:
         22:59:7d:14:39:0d:20:dc:b1:91:ae:c6:fe:aa:2e:d3:84:f2:
         9a:51:50:f0:91:f9:e0:4c:bd:c0:f6:a9:cd:73:f7:46:ff:b7:
         b1:0b:7a:8b:f8:91:49:c5:2f:04:e2:d5:d5:46:8b:76:cd:dd:
         71:b5:2d:cd:7f:3e:b0:76:9b:60:6f:74:a6:5c:6c:4d:da:58:
         2c:44:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:57 2026 by rpki-client