Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa
File:                     1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa (raw, json)
Hash identifier:          oCMBGLP83aZsGbinrAsEl0Xux9wDHXpUQzW27IVJ5MU=
Subject key identifier:   CA:29:8D:B9:2E:F3:5F:DA:EB:E0:BB:3F:C9:45:BF:BA:B1:E0:C9:44
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584DBE6B253EED3BF3E5300A4280
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     0
IP address blocks:        192.58.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:25:3e:ed:3b:f3:e5:30:0a:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=3b09b575-4834-42ef-b54a-7f8454b68531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:56:a5:bc:b6:e9:b8:a6:f4:ef:72:7b:71:
                    83:e8:09:18:6b:20:01:98:bc:8a:a6:75:d0:c7:e5:
                    f4:d8:bb:a8:e7:5d:a6:02:02:9a:58:96:40:82:8e:
                    24:51:18:6e:22:e5:99:1f:e6:03:ae:6e:67:28:04:
                    50:cb:9c:4e:8d:78:4e:b7:da:18:2c:f6:1a:6f:68:
                    48:e7:33:76:a2:aa:fd:c9:fd:16:fd:be:7a:9a:a0:
                    66:ea:bd:dc:bd:be:4d:98:df:5b:1f:f9:ff:10:cf:
                    8b:d4:03:31:47:b2:83:c3:5c:48:f5:a2:29:42:c1:
                    e5:3c:e7:99:7a:e6:ac:46:3f:8f:08:c4:47:0c:f7:
                    20:1a:29:44:30:8f:30:bc:de:18:57:53:2a:8c:01:
                    04:b0:2b:6f:6b:00:3f:63:0a:e7:bd:aa:77:7b:00:
                    5d:12:b5:bd:94:c7:ae:7c:39:d1:22:d3:56:02:a7:
                    8c:92:22:2d:e5:c8:65:ca:5b:25:83:22:d3:6d:b3:
                    6e:df:82:28:e1:c0:2e:77:ff:f0:9f:b0:b8:22:3c:
                    8c:c6:67:a0:ef:9f:2b:f0:d5:55:86:b7:02:6a:57:
                    24:66:34:3f:02:71:a0:33:74:22:85:51:ec:6c:55:
                    55:36:2b:17:12:c5:0a:d3:c5:8c:d6:60:f4:9c:28:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:29:8D:B9:2E:F3:5F:DA:EB:E0:BB:3F:C9:45:BF:BA:B1:E0:C9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/1d3e47ab-4da7-374a-8602-cf1acffa8b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:be:c6:fa:42:39:0d:82:41:3b:64:5e:e8:a1:2e:4c:63:33:
         8e:bf:7c:72:86:20:ec:65:1c:cd:05:ac:24:4f:8a:6d:28:dd:
         9b:9d:7f:c8:86:88:e3:5f:56:e7:4c:e4:54:4e:33:8b:65:be:
         28:73:dd:c5:de:7a:80:c9:6a:03:c8:9f:33:b3:09:a7:f9:23:
         32:ce:ee:6c:ab:a1:3a:31:4c:68:73:14:09:7b:d0:7f:8f:1d:
         d7:e0:8e:c6:bb:12:cb:0d:0e:32:2c:f6:8f:08:e7:57:85:48:
         e2:95:94:6c:9d:62:3c:54:7a:de:c6:1a:d1:28:2f:07:0d:98:
         41:94:43:59:89:bc:24:8f:de:29:ef:7e:0c:60:27:81:09:06:
         3e:00:94:5c:a2:89:a9:4f:62:c1:ee:8c:df:91:8f:a4:f2:90:
         d7:cf:6c:80:0c:b7:aa:9a:69:4c:d0:43:7f:ed:5e:d6:47:d8:
         12:d4:3c:7e:aa:fa:5f:c9:24:38:d3:6f:b5:bd:50:25:6f:38:
         4c:63:dd:b9:b8:58:02:00:0e:18:0d:7f:a4:20:0b:a3:76:d3:
         79:35:4a:f8:f8:b9:65:80:02:8e:02:92:2f:68:a0:da:f8:e2:
         a1:2a:fc:e8:c0:02:bd:e4:31:cc:cf:f0:dd:2e:bd:5d:53:9f:
         64:c5:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:11 2026 by rpki-client