Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/176a46a2-0ba6-3428-8880-4e0bb860b31c.roa
File:                     176a46a2-0ba6-3428-8880-4e0bb860b31c.roa (raw, json)
Hash identifier:          RKA1BRP+THWlqxkV5S26Vh2AlXYR7LIGHpY4n05PLbE=
Subject key identifier:   0A:78:F1:F2:DD:A4:55:01:8F:AF:0F:F7:41:89:B4:26:1E:7A:16:E6
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584F506D55D34072EA2A9FF86380
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/176a46a2-0ba6-3428-8880-4e0bb860b31c.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     7764
IP address blocks:        148.129.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:55:d3:40:72:ea:2a:9f:f8:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=ab341a01-9b1e-4eb2-b727-4b18a83ad29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:4e:a5:e4:98:b1:8d:2d:b3:3f:2a:f8:a1:
                    19:bd:98:74:ca:1d:d7:46:e2:0d:f1:2c:0f:68:dc:
                    69:57:21:09:e0:7d:30:61:24:2a:20:50:44:74:8d:
                    d6:d0:33:c1:61:6d:77:09:a1:c8:f9:93:c4:d3:10:
                    eb:aa:6c:b3:29:1b:7e:e8:ea:40:9a:ee:b2:54:73:
                    71:6a:af:dd:57:bc:41:f5:e0:11:7a:a3:42:6f:cb:
                    5a:82:6c:ba:d0:98:36:c0:79:3f:3d:f5:d3:73:4a:
                    02:e0:74:fc:77:b3:48:b4:3f:04:4f:c7:cc:dc:d4:
                    fb:4d:e5:0e:0d:60:90:61:bd:20:9a:80:72:0b:55:
                    bd:88:99:46:0a:7e:d1:cf:2f:5f:a7:5a:4e:40:d6:
                    e6:04:08:1c:3b:2d:7a:5e:8f:2a:90:b8:45:0d:d0:
                    29:0d:e3:d8:f3:40:5f:a1:00:41:7d:c7:ea:22:07:
                    e3:01:45:d5:8d:e3:a0:7b:83:e5:8c:a2:4b:24:9d:
                    20:09:ff:49:67:b8:f0:43:dd:ff:9a:ab:87:e9:e6:
                    c7:8c:e6:b2:b5:f2:41:f6:12:53:78:78:65:a6:71:
                    1c:c6:a1:bd:a1:b5:ad:5a:c6:b1:06:25:d3:37:c8:
                    b9:6c:64:2f:c8:0d:42:6b:cd:a5:a3:f4:6f:a8:cd:
                    a4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:78:F1:F2:DD:A4:55:01:8F:AF:0F:F7:41:89:B4:26:1E:7A:16:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/176a46a2-0ba6-3428-8880-4e0bb860b31c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:15:9f:2f:8c:3c:28:7a:f5:ec:90:ae:1c:cc:01:73:98:4c:
         f3:f0:3c:aa:9f:35:12:60:b0:c5:5c:e7:4b:af:02:7b:ab:77:
         69:54:40:50:7f:81:df:11:1d:84:13:e6:41:e6:60:ce:f0:2c:
         31:c6:78:f3:ee:50:c4:34:66:5f:8d:88:af:3e:2d:80:5b:e1:
         d4:9f:b2:05:df:20:9e:bd:18:f6:40:fd:dc:17:d3:f8:f5:f8:
         56:9a:86:73:e0:73:ff:d0:67:f2:03:71:3f:a7:c2:31:61:b5:
         2f:70:48:2b:16:90:13:f1:08:6a:a8:20:06:15:56:0b:47:5c:
         ff:29:28:d7:be:bb:15:b3:40:c9:a2:c1:ec:92:fb:36:1c:09:
         d7:c7:35:3b:a9:49:2c:59:a1:61:35:d5:9c:ab:1e:61:13:c3:
         5a:0a:14:e4:9c:c5:28:dd:f5:30:07:d0:21:76:ac:6c:ac:c6:
         48:fc:27:52:ed:10:59:0e:c2:5f:85:7f:92:6a:c0:6a:b5:3e:
         f7:b0:d7:70:d0:27:f3:b7:b2:8b:c8:ef:6a:9b:2c:e2:4e:ce:
         8b:e7:65:f0:cb:c0:a9:e5:43:16:e7:09:b3:ba:d4:69:88:ed:
         e5:cc:8f:4e:f5:a6:aa:b1:8d:37:44:96:df:4b:26:28:a2:88:
         8d:07:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:21:42 2026 by rpki-client