Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ce6a652b-d091-36b7-9890-8872ff503a64.roa
File:                     ce6a652b-d091-36b7-9890-8872ff503a64.roa (raw, json)
Hash identifier:          kI5zKWrcSa+wT9/nKyVduShmYsREbRYekMiXymgkWio=
Subject key identifier:   45:0F:1D:8C:26:F1:A9:7A:9F:70:7C:52:EF:73:08:C7:B3:04:71:5E
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584DBE6B20ABFDBF013F07F07A80
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ce6a652b-d091-36b7-9890-8872ff503a64.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     0
IP address blocks:        192.58.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:20:ab:fd:bf:01:3f:07:f0:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=4892d53f-9523-4c84-a625-856e76d16f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e4:17:33:bf:18:dd:72:82:c9:ec:d9:16:50:
                    fc:35:5f:d0:3b:80:f6:31:4a:11:a2:17:43:1f:34:
                    56:63:2d:9f:58:17:c1:80:38:88:a3:14:2b:6b:e5:
                    33:af:cc:81:24:7d:9d:40:39:fd:64:a1:54:ae:00:
                    28:35:6c:f6:ad:f6:7c:de:05:98:d9:43:b3:1a:59:
                    bd:64:4a:5d:fd:aa:ca:a4:4e:53:ec:98:a0:86:3e:
                    79:c2:8d:42:55:64:87:f0:c5:15:05:7b:68:01:26:
                    3a:78:13:e2:f7:39:db:ae:cf:34:5e:50:52:61:36:
                    82:dc:1a:5c:af:7b:3e:ab:fa:e1:79:b0:57:88:42:
                    a5:f7:63:cd:fe:e1:67:4a:8e:46:c9:5b:9b:09:03:
                    3b:8d:f9:b5:90:c1:0c:c8:17:a4:9e:8b:0d:eb:56:
                    c2:4b:65:e0:9a:d6:9c:8a:b3:eb:eb:08:9d:3e:41:
                    b1:03:dc:15:61:f3:80:f8:c6:83:67:81:f7:50:9d:
                    78:fb:42:cb:0c:01:5f:2f:c8:3a:5f:c8:7f:4e:08:
                    c5:8e:7d:7b:a6:a9:6c:21:6f:42:0b:42:a6:1d:8c:
                    7e:2e:7c:1c:bd:1d:fb:1b:25:c1:66:a7:5c:3a:1e:
                    3d:02:df:64:9b:f4:ac:18:61:4a:4f:c1:d0:cc:ea:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0F:1D:8C:26:F1:A9:7A:9F:70:7C:52:EF:73:08:C7:B3:04:71:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ce6a652b-d091-36b7-9890-8872ff503a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:7b:5e:c1:f6:76:68:27:7b:19:64:8a:cd:1e:da:10:2b:b8:
         de:6a:77:c0:95:1a:bd:de:ab:d3:b2:de:ce:29:1b:d0:b7:81:
         6a:fd:d4:b4:f1:d8:0e:a2:61:35:ad:f5:ce:bf:06:97:fa:fe:
         ca:3d:29:98:76:af:d5:d9:4b:73:a1:c0:d0:55:79:ad:c8:5e:
         82:5d:71:15:4b:01:03:ef:e6:5c:f3:14:e2:8a:77:64:72:af:
         e9:3a:f7:56:a0:57:cc:75:58:fc:f9:f9:33:8a:b5:7f:52:7d:
         0c:01:63:13:0b:a5:c0:dd:be:de:81:b3:77:95:a6:c0:95:24:
         b9:ad:bc:82:80:8f:cd:6f:e5:6f:a0:47:41:2a:38:03:83:0a:
         87:89:58:80:55:56:28:71:6c:81:fb:e6:7b:66:19:1f:40:82:
         5d:72:a9:59:84:35:1d:20:a9:4b:c4:9c:7e:3b:24:3e:97:11:
         f0:0e:03:51:9f:49:61:6e:67:f8:7f:c2:05:65:22:d9:da:07:
         8a:1c:bc:b4:c2:b8:80:ef:26:c1:4a:a3:86:b1:8e:a1:52:ca:
         56:2f:a2:ae:dd:15:39:ee:2b:8b:ab:f6:a7:49:e2:94:e6:87:
         44:f2:d7:cb:7b:f2:cb:77:8d:2f:fa:de:cd:d6:a4:2f:23:92:
         8c:be:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:59 2026 by rpki-client