Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa
File:                     94b919d1-b053-3e4c-8ada-5c10fb23217e.roa (raw, json)
Hash identifier:          p9c0cPPkQSL3ClIFxKsW36nTyk6T75kwb1aausffzyw=
Subject key identifier:   FA:F3:88:9A:5A:00:A2:3D:0B:A7:4F:33:B4:D5:BB:F9:A6:36:75:12
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584DBE6B200F5233AAF1F0BF9380
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     0
IP address blocks:        192.58.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:20:0f:52:33:aa:f1:f0:bf:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=8bdbce3e-619a-4cf3-b48a-6cc8c5fecf22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:5b:66:18:d6:53:a8:3f:09:09:c7:69:bc:
                    83:0f:03:3c:ad:22:4c:e9:5a:c5:10:04:75:c5:f8:
                    80:c0:02:f0:3a:4f:2e:68:1e:01:f2:5e:9f:60:97:
                    07:f6:c0:03:ee:9a:66:97:47:97:d5:6c:84:1e:19:
                    d6:7b:aa:06:e8:d3:d7:03:bd:81:f1:52:90:e9:58:
                    d3:f8:1f:c9:ae:cb:bb:d8:70:af:90:e0:9a:49:bf:
                    be:3a:f4:10:85:64:70:0a:7e:94:db:e1:c2:b9:48:
                    54:ac:95:f9:6b:91:8b:58:9a:75:fd:a2:98:d7:ce:
                    c3:1b:41:fd:59:0d:78:c9:78:d7:c0:c5:a0:88:e6:
                    65:87:4b:16:31:ea:b7:a3:e6:dc:8c:18:6f:6d:49:
                    be:b0:53:81:fc:7b:a9:4c:64:77:6a:89:71:16:77:
                    29:1b:29:18:c1:01:52:fc:06:a7:29:03:61:b6:e3:
                    9c:13:a2:2d:bd:4b:bc:e1:ad:65:0c:bf:ad:ac:2b:
                    d8:fa:d6:01:01:f4:2b:e2:e8:62:ef:33:a0:ce:a3:
                    d1:75:44:c8:8c:9c:09:96:12:1c:90:fb:12:f1:32:
                    3b:59:61:8e:5c:51:f5:90:d2:a5:86:ce:67:2e:cb:
                    22:91:16:cf:bd:4c:ab:59:01:fa:e4:e4:27:19:d8:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F3:88:9A:5A:00:A2:3D:0B:A7:4F:33:B4:D5:BB:F9:A6:36:75:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/94b919d1-b053-3e4c-8ada-5c10fb23217e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:70:16:36:3c:0b:57:e4:d7:bb:b6:09:f9:90:39:dd:4c:c1:
         f3:50:4e:01:1d:a3:83:f0:42:59:db:f0:df:58:59:2b:95:6a:
         05:77:a5:26:43:20:df:9a:74:5d:86:f9:10:47:82:87:02:dc:
         81:bc:a2:f7:a4:81:0a:60:2a:8c:ad:24:e5:52:94:83:4d:a0:
         00:0e:dc:fb:8d:8a:ab:28:e4:3c:93:a1:16:98:bc:c0:2f:32:
         b0:89:3d:ee:38:e8:60:00:68:b9:a9:e8:6f:e3:0f:b9:3c:02:
         46:e3:9d:cc:ee:fb:a7:1a:cb:a6:2e:6d:af:54:52:eb:d5:2e:
         97:ad:9c:73:01:12:da:85:de:05:d9:98:93:e6:a5:2f:92:10:
         19:9c:63:39:77:e9:18:7b:c7:15:2a:b1:72:d4:40:ac:ea:35:
         4c:1c:12:6e:de:cc:e8:3a:79:56:ae:3e:f6:ae:4e:63:fe:c4:
         24:e0:5b:53:4e:89:62:d3:93:2c:5c:85:15:ea:83:de:69:a7:
         09:da:35:f5:36:fe:b2:01:88:8e:74:a2:7c:70:19:0b:1e:af:
         b4:10:2a:b0:4e:f9:05:a2:63:d5:42:ba:04:cb:8c:99:31:49:
         38:3b:68:d1:0d:5b:95:96:de:5e:4f:b1:23:5a:a8:66:3a:dc:
         df:c1:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:57 2026 by rpki-client