Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/53bf57f8-1fad-36a5-abe4-788f451a3ade.roa
File:                     53bf57f8-1fad-36a5-abe4-788f451a3ade.roa (raw, json)
Hash identifier:          NoTMPnaMthO3bDmVpDuGU4KxagTnqJoRbYQJuF1gazI=
Subject key identifier:   EB:AF:19:0F:60:FB:BD:64:8C:64:90:0A:E4:D8:2D:2D:80:DC:8E:5D
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E842A3624842014EA0477C200
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/53bf57f8-1fad-36a5-abe4-788f451a3ade.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     3477
IP address blocks:        140.90.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:36:24:84:20:14:ea:04:77:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=42242d3c-a553-469f-b868-af1e1306d65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:09:4b:e4:c3:14:0f:fb:53:50:42:66:ea:
                    5a:e2:e0:6d:ce:5e:7a:6c:30:b1:ea:db:47:6c:61:
                    8c:82:59:58:b5:c5:0e:86:85:e1:be:ff:9b:ac:64:
                    a2:7a:c0:df:35:05:c8:79:ad:1a:52:68:82:e2:34:
                    44:3a:2e:8b:01:aa:fc:20:4a:df:97:15:e3:1d:81:
                    eb:9e:9f:7d:37:30:d0:7d:56:42:69:0a:e1:d4:4c:
                    76:df:81:77:60:9b:90:9d:b9:90:d3:b0:b2:d3:13:
                    7f:32:e3:36:fd:b6:c9:b4:95:90:32:8f:c1:74:8b:
                    c4:6b:64:42:bd:4c:bd:62:e0:75:4b:15:af:a5:07:
                    a6:1e:42:32:a9:f2:64:5d:93:63:d5:bd:80:67:6e:
                    8a:ef:e1:40:e0:40:54:b5:32:50:8c:e0:fc:2b:ec:
                    da:21:4a:f8:08:b0:c2:bf:24:7c:82:11:60:da:fa:
                    34:19:11:dd:e2:33:6c:75:14:7e:c5:af:61:fd:7c:
                    a4:67:7a:f6:9a:ac:ff:fa:ce:82:52:5e:22:1e:ec:
                    e9:c7:f1:b9:bb:b3:9c:8e:bc:c7:7a:9f:e7:8d:c8:
                    59:8d:a5:4c:1a:6b:49:7a:86:ee:64:50:80:1e:98:
                    da:a7:05:15:09:b2:c0:76:d9:3a:03:3d:85:90:8b:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:19:0F:60:FB:BD:64:8C:64:90:0A:E4:D8:2D:2D:80:DC:8E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/53bf57f8-1fad-36a5-abe4-788f451a3ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.90.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:76:bf:0a:45:3b:ff:4c:bb:6a:c3:3c:dc:ec:03:44:0f:bf:
         a6:7f:de:d6:89:e7:f2:78:48:4a:99:5d:43:49:43:4f:39:af:
         b9:cb:c9:4d:8b:80:64:03:d5:99:c8:88:02:7e:de:ae:c6:dc:
         17:5a:11:8b:70:94:cb:d7:74:bf:40:84:e9:64:de:4f:83:6f:
         72:09:a2:f8:6e:31:7f:21:d3:9d:e0:51:3d:c6:24:ad:19:3e:
         cd:10:d8:3e:76:fa:cf:2d:78:c6:49:90:29:42:b2:83:8a:5c:
         e5:42:c9:73:1d:c0:fb:b4:12:6b:a5:20:94:65:b7:13:a9:9b:
         40:a0:5f:88:45:f4:a9:d2:bd:fb:6b:91:a1:ed:98:fa:75:91:
         7c:74:e0:70:ca:34:be:b6:35:ac:db:0f:25:71:a4:f6:1c:fc:
         ea:e2:18:e3:f9:41:b7:a0:dd:68:9d:9c:5d:2c:bc:15:fc:4d:
         14:aa:95:51:67:b2:df:f0:d2:24:eb:09:53:c5:23:3c:e5:76:
         41:40:82:8d:69:b5:c0:c5:17:88:0e:18:99:d9:ca:49:de:18:
         83:de:bf:60:28:cb:8d:ce:34:de:c1:ea:29:42:e9:d3:05:e5:
         8f:6a:92:0f:a3:5a:11:74:68:a0:ba:00:4b:c6:61:de:01:3a:
         84:b9:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:07:34 2026 by rpki-client