Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b26e0c0-499d-3530-acfa-44c145846cb8.roa
File:                     5b26e0c0-499d-3530-acfa-44c145846cb8.roa (raw, json)
Hash identifier:          GCcIN6aCd8eG/tLhkQLL4e/iZFurR/KNetf8dqk5JCo=
Subject key identifier:   01:61:A0:C9:AD:E0:4F:FD:A0:A8:F1:F2:F6:72:92:4E:A2:A7:3F:BA
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584DBE6B250118FFCF74803D0740
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b26e0c0-499d-3530-acfa-44c145846cb8.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     0
IP address blocks:        192.133.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:25:01:18:ff:cf:74:80:3d:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=5f2cbe18-ebbb-43ea-9bfe-b0b05671c0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:4c:5a:fd:91:b7:2b:f4:4e:39:65:34:57:
                    ea:71:2d:4f:16:a7:80:a6:a4:5e:4f:46:d4:29:65:
                    44:d2:89:b4:de:0c:75:02:5d:05:c3:08:a5:60:99:
                    33:16:89:f7:79:f9:e4:a6:5f:7f:2c:44:6c:7a:84:
                    64:73:c9:40:09:f3:99:3e:2d:2e:ca:7f:df:a9:e7:
                    23:05:13:9a:ae:e6:a7:7a:b4:8e:ff:3e:9a:71:27:
                    09:26:0a:b2:7f:11:a4:e2:84:7f:05:f2:9f:18:73:
                    16:07:ff:2c:b9:ba:3f:0a:dc:62:b9:8c:94:e1:3f:
                    e0:94:82:ac:11:7d:05:92:ac:98:1b:03:70:51:ba:
                    fe:c0:86:59:2a:8c:48:2d:f8:d8:75:cf:c0:ef:28:
                    d3:77:80:32:35:d7:a8:5e:d0:8b:8c:98:32:dc:d8:
                    dd:ab:7c:6b:67:aa:f9:90:a1:25:04:ac:77:83:c4:
                    22:91:65:95:2b:35:85:01:d3:a1:3d:63:b3:22:fe:
                    e6:f5:3b:3f:1c:db:58:3c:f6:fc:54:b6:fa:a7:5c:
                    f2:ec:05:b3:a6:d5:7a:9e:ee:33:c9:38:9d:22:33:
                    39:80:4d:5e:5c:58:7b:8e:01:4d:f5:4d:a9:11:8c:
                    46:3e:d4:db:85:41:83:38:30:9c:82:6a:01:24:10:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:61:A0:C9:AD:E0:4F:FD:A0:A8:F1:F2:F6:72:92:4E:A2:A7:3F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b26e0c0-499d-3530-acfa-44c145846cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:1a:4b:81:6d:ae:f3:29:4d:1a:9b:36:03:bf:ca:51:7f:
         86:2b:27:9a:c7:59:28:4e:59:48:13:08:35:99:a3:11:d3:bf:
         61:f4:83:18:dd:e4:b9:b3:3d:ed:9f:bd:b2:f7:ae:83:19:51:
         08:e4:6a:85:1d:20:9d:14:ea:0c:fb:37:d0:46:23:39:47:dd:
         94:de:cb:af:ba:7f:08:ad:47:19:89:f5:ce:d8:c9:39:03:d6:
         5c:af:95:fc:bf:b9:9c:49:04:ed:b6:b5:f6:37:69:6e:ed:d8:
         c3:6e:a9:af:79:e8:af:ed:46:8b:2b:ae:fd:7b:ec:d8:bc:1c:
         59:60:fd:36:fb:67:c9:f4:21:db:2e:87:17:c0:a5:12:dd:7d:
         67:a1:6d:0a:86:2b:7e:7b:b1:20:a6:f9:31:77:54:43:d5:93:
         13:4c:bf:c8:a2:aa:00:c4:45:e5:ea:86:e1:eb:dc:6f:9e:98:
         d6:5c:fc:5e:46:67:d2:bb:dc:ea:f0:53:1c:b8:a3:5f:95:0c:
         1b:6c:bc:df:ba:a4:6b:ad:43:0a:4b:94:15:4f:24:d1:df:d5:
         be:7c:cc:9b:06:e6:c6:fb:cb:2b:cc:0a:c4:52:8b:3e:c1:ee:
         64:94:4f:cf:a8:81:48:ca:8b:48:37:31:02:96:2f:0f:69:22:
         16:a8:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:47 2026 by rpki-client