Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/618354ea-ebe9-3974-9548-f659508361d4.roa
File:                     618354ea-ebe9-3974-9548-f659508361d4.roa (raw, json)
Hash identifier:          myYS7dpDR5sRR1LHyQnYZGNinwjR08AM3Wqm07InBHE=
Subject key identifier:   F5:DE:9C:4F:A5:0A:FA:FC:28:8F:67:FB:B8:C7:49:69:AD:71:5C:C3
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584F498BC8C28F6D1F9483F707C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/618354ea-ebe9-3974-9548-f659508361d4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3477
IP address blocks:        137.75.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:c8:c2:8f:6d:1f:94:83:f7:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b7b072a7-041b-459a-bdd1-e013a2fcbef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:80:6a:26:b0:6c:41:fb:00:ac:ba:63:d4:
                    d7:63:5f:98:6d:93:37:f2:65:5b:ec:3b:b0:bc:45:
                    93:fd:3f:7b:6d:b2:d5:3f:57:6e:ce:18:34:67:3f:
                    d9:54:b8:02:73:74:dd:77:9c:3e:5e:39:60:5e:eb:
                    bc:45:16:ab:1a:d1:b1:33:48:e2:c3:79:7c:48:b3:
                    0b:66:c5:12:04:e7:1a:0a:be:a6:c9:d0:36:cd:e0:
                    40:c3:d5:70:ce:f5:41:cf:99:95:54:c4:46:18:33:
                    1b:a0:e6:9b:64:9e:9a:44:5b:d5:f3:b8:50:62:ec:
                    02:04:15:67:70:5f:1e:c5:98:21:9f:bb:35:72:a7:
                    a3:92:c2:c9:a4:77:15:ca:42:c8:8e:49:b0:58:4b:
                    81:b8:c2:f5:99:44:dc:fa:07:c4:b9:17:c8:a1:60:
                    c0:ac:8e:a6:a9:4c:b3:8a:5e:91:04:27:26:0f:83:
                    72:c1:fd:ee:28:94:1e:94:c6:b6:d0:12:41:f3:4c:
                    22:ab:25:a0:49:e9:64:5b:a8:c0:3d:94:79:92:eb:
                    01:b9:22:15:38:dd:ec:2d:58:32:e4:6a:15:8a:82:
                    28:ab:7a:08:69:10:fd:3c:9b:21:05:91:51:9f:a2:
                    23:90:b3:f3:19:d9:43:33:30:42:ab:a8:f3:d9:f3:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DE:9C:4F:A5:0A:FA:FC:28:8F:67:FB:B8:C7:49:69:AD:71:5C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/618354ea-ebe9-3974-9548-f659508361d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9a:61:37:36:9d:cd:0c:36:03:d0:00:8a:d9:ef:18:93:bb:
         19:ca:f0:6c:dc:b8:f1:d3:3a:98:aa:fa:c9:98:6a:30:e4:4e:
         06:5a:2f:b6:6b:39:8c:d8:5b:2e:a6:95:d0:d7:67:28:9f:a3:
         95:ae:75:07:eb:bb:f6:91:21:73:c6:eb:b4:c3:30:7f:1b:91:
         ae:3f:81:41:0f:28:00:11:f3:7e:c3:7e:e3:21:74:e7:ba:61:
         92:57:28:ac:7c:27:0c:91:d4:ce:88:16:1e:63:ee:22:89:ee:
         31:05:d3:5d:39:08:2b:be:af:08:a3:81:e8:e7:b2:8c:66:27:
         7b:41:24:1d:ec:e0:bb:79:9c:1a:95:d9:a0:3b:c9:8b:46:10:
         43:02:96:8e:ea:2d:7b:bb:33:8a:1e:73:43:44:90:a2:8d:0e:
         29:0c:b0:15:c3:96:10:4b:fd:35:d5:81:26:56:ae:a7:50:82:
         c8:21:0c:2c:d9:98:68:97:85:0d:d8:12:26:30:f1:d1:39:19:
         63:79:41:79:0a:ec:c0:c6:7f:90:49:e2:62:c5:06:76:e0:da:
         db:48:8b:f6:39:67:ec:a9:3e:08:a0:7c:99:1c:bc:d4:12:66:
         f9:a8:bb:a4:0c:8e:e2:70:59:8d:89:82:cb:50:45:1a:38:63:
         35:26:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:59:58 2026 by rpki-client