Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa
File:                     56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa (raw, json)
Hash identifier:          hzA2EylYtQ/ymF0cqRGTQP9hMPdmSLq1u3LCDi6fPmI=
Subject key identifier:   27:B4:A8:BE:85:26:FB:24:50:32:B5:E0:62:7E:BD:CF:E6:E4:49:CC
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584B1D9C2939BD63032045BE6294
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     3477
IP address blocks:        192.58.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:29:39:bd:63:03:20:45:be:62:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=02403744-0bc7-43ac-b778-896af35fd818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:9d:ff:d8:34:c6:7c:bd:f2:80:17:f1:54:
                    e2:96:be:07:8b:33:97:64:dd:cc:19:76:cb:03:3f:
                    93:be:92:da:7a:50:77:19:e3:05:55:d1:f9:e9:24:
                    79:0a:af:ae:3b:4c:54:aa:3f:08:61:80:a5:3c:2d:
                    be:56:36:df:65:7a:83:a1:5b:15:c1:8a:4d:ea:3e:
                    42:60:7e:aa:31:b0:04:2e:a3:48:79:d4:7a:bd:10:
                    32:62:02:48:0e:8f:2a:23:54:d0:3b:c5:ca:83:16:
                    fd:f4:cd:ec:67:63:08:6d:bc:36:e2:59:9a:4c:db:
                    03:19:82:c2:36:3a:47:df:e5:6b:43:00:ab:86:4c:
                    c9:4d:8d:2a:47:a2:3b:69:47:04:6a:89:a5:34:c9:
                    23:a2:d9:2d:2e:49:2e:5c:5e:9b:1d:b3:8f:3a:4b:
                    45:67:6f:6f:97:c1:6b:2a:49:52:17:55:4e:70:a5:
                    11:e5:60:97:44:cd:cc:d1:db:f0:24:0e:ad:45:d2:
                    4d:ef:37:a0:cc:f2:bb:02:36:fa:dc:50:18:66:a5:
                    3d:dc:43:f8:06:d8:85:30:ab:9a:2c:87:50:2d:f0:
                    fb:e2:c1:bf:dd:f6:8c:f3:84:cf:ea:ce:97:60:3e:
                    ff:0a:52:85:12:c3:b9:27:ff:42:2a:e2:e1:72:67:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B4:A8:BE:85:26:FB:24:50:32:B5:E0:62:7E:BD:CF:E6:E4:49:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:36:6b:af:79:af:d2:dd:80:f0:8d:64:f2:3e:21:f5:bc:e9:
         b1:1e:fe:f6:7c:b3:be:89:b7:5c:db:8a:88:9b:91:df:e0:d3:
         37:4c:42:46:c6:d4:b9:b1:67:fd:38:4e:f3:ad:0b:ed:f8:40:
         84:c4:19:c2:80:18:1d:22:3f:b6:9c:3b:5d:c0:67:5f:d6:e6:
         00:0c:0a:09:cc:f7:8e:eb:5d:6a:8e:62:b3:94:f8:39:2e:35:
         fe:30:c4:d5:8c:ae:1b:b1:a3:85:92:d6:55:90:62:83:93:bf:
         db:58:c7:7f:47:5e:f0:54:1b:fb:82:16:2a:19:2c:91:6f:d5:
         ef:88:52:d1:7b:bd:5d:4b:ee:06:0f:fb:48:c4:dc:2f:42:ea:
         af:a8:c4:87:98:65:09:1a:bd:5f:65:73:10:3c:7f:63:85:43:
         08:60:4b:8c:b3:61:e2:54:e8:f2:3a:db:d2:eb:08:8a:f8:b3:
         15:b8:84:2a:2a:12:e1:a1:d3:e6:09:f2:fc:f3:f9:13:ac:12:
         56:0b:04:c4:5a:39:10:3b:4a:2b:9b:a9:ba:25:db:74:a9:60:
         84:e5:33:fe:9c:2d:16:ed:bc:3f:83:b0:20:8b:ff:38:d4:37:
         f9:0f:a7:29:9d:5c:cd:1d:84:02:69:bf:9d:9a:db:f1:5e:13:
         19:9b:b3:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCk5vWMDIEW+YpQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
MDI0MDM3NDQtMGJjNy00M2FjLWI3NzgtODk2YWYzNWZkODE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Sd/9g0xny98oAX8VTilr4HizOXZN3MGXbL
Az+TvpLaelB3GeMFVdH56SR5Cq+uO0xUqj8IYYClPC2+VjbfZXqDoVsVwYpN6j5C
YH6qMbAELqNIedR6vRAyYgJIDo8qI1TQO8XKgxb99M3sZ2MIbbw24lmaTNsDGYLC
NjpH3+VrQwCrhkzJTY0qR6I7aUcEaomlNMkjotktLkkuXF6bHbOPOktFZ29vl8Fr
KklSF1VOcKUR5WCXRM3M0dvwJA6tRdJN7zegzPK7Ajb63FAYZqU93EP4BtiFMKua
LIdQLfD74sG/3faM84TP6s6XYD7/ClKFEsO5J/9CKuLhcmcFNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCe0qL6FJvskUDK14GJ+vc/m5EnMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNTY0NDFiYjgtYWFjMi0z
Y2RjLWIzMWItMGU4NDg2ZmI3ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDoBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAM2a695r9LdgPCNZPI+IfW86bEe/vZ8s76Jt1zbioibkd/g0zdMQkbG
1LmxZ/04TvOtC+34QITEGcKAGB0iP7acO13AZ1/W5gAMCgnM947rXWqOYrOU+Dku
Nf4wxNWMrhuxo4WS1lWQYoOTv9tYx39HXvBUG/uCFioZLJFv1e+IUtF7vV1L7gYP
+0jE3C9C6q+oxIeYZQkavV9lcxA8f2OFQwhgS4yzYeJU6PI629LrCIr4sxW4hCoq
EuGh0+YJ8vzz+ROsElYLBMRaORA7Siubqbol23SpYITlM/6cLRbtvD+DsCCL/zjU
N/kPpymdXM0dhAJpv52a2/FeExmbs5U=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:00 2025 by rpki-client