Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f06213c6-cd65-33a2-b373-14af6a7ead3e.roa
File:                     f06213c6-cd65-33a2-b373-14af6a7ead3e.roa (raw, json)
Hash identifier:          QZhuhou2q4dNYKIH/7DbzysQjZ6eySuBgCX7Oo8c37g=
Subject key identifier:   D1:8C:18:44:4A:AB:5A:99:40:16:0B:92:43:F8:8E:32:A8:D5:8D:D1
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584DBE6B201BCA508E7C9718BE00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f06213c6-cd65-33a2-b373-14af6a7ead3e.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     0
IP address blocks:        192.67.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:20:1b:ca:50:8e:7c:97:18:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=7ebe6224-a919-4cc7-b4fd-28cbba15bb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:dd:49:fa:35:28:ed:95:21:42:20:a9:60:
                    b8:8a:18:7e:30:5a:e7:a6:32:95:f6:3a:85:cc:a0:
                    72:de:4d:6f:be:2e:4a:9b:c3:b5:e4:fc:8f:ff:a7:
                    3d:29:7d:dc:2b:e4:64:34:39:0e:d4:0a:ca:e8:a3:
                    f4:b3:83:9a:42:15:48:dd:f3:c8:a0:b8:5d:5c:b7:
                    20:32:e4:d2:6f:40:97:44:16:80:a8:f7:56:60:e3:
                    a3:7f:66:52:49:34:a3:a4:60:a9:0c:48:4f:8d:6c:
                    ee:01:dd:2e:f7:eb:62:bf:4d:d7:69:19:8f:74:62:
                    b6:f4:0c:86:f7:9d:72:e8:6d:fd:03:65:48:5c:e9:
                    a3:3c:b7:1f:1a:d7:ea:ec:3b:8b:c9:b2:2f:f3:1f:
                    72:7c:24:58:5c:58:2e:da:c0:46:02:c8:79:11:04:
                    56:cc:53:fa:b6:05:fa:5d:c1:97:23:58:35:b2:5d:
                    bd:db:bb:d0:f7:31:7a:34:15:90:8a:58:03:04:92:
                    ed:1f:3f:6a:86:0c:36:3a:17:a4:a6:76:e7:10:5c:
                    1c:3d:97:32:92:1e:6e:ac:c5:c2:bd:76:e1:9f:8a:
                    f5:df:a2:01:03:4c:88:63:07:09:9a:95:c5:93:55:
                    77:af:48:7b:3f:00:be:fb:ba:49:27:a7:36:80:8b:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8C:18:44:4A:AB:5A:99:40:16:0B:92:43:F8:8E:32:A8:D5:8D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f06213c6-cd65-33a2-b373-14af6a7ead3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:21:c1:b0:bd:2d:82:db:66:f6:63:80:41:b0:c6:fa:c6:
         80:81:94:af:f4:6d:49:02:61:77:8e:66:d9:c2:bf:a8:4f:ea:
         12:35:4c:df:e4:04:0f:d1:c3:24:71:09:43:cb:aa:33:c6:dc:
         14:56:07:fd:45:32:cf:dc:e6:80:24:b7:31:a8:25:a7:a3:df:
         d9:5b:0c:53:2b:b4:99:22:9f:e7:c3:69:96:79:93:a5:86:d2:
         6a:f5:24:4b:22:82:75:ad:b8:0d:67:31:83:02:26:83:9b:1d:
         eb:c8:11:54:2a:6f:61:3b:da:5f:c2:57:46:78:e9:5c:92:23:
         01:44:00:99:4e:dd:3a:14:4b:0c:fd:b9:04:e2:4a:d5:93:3d:
         53:da:d1:e1:11:44:85:13:0e:d3:05:29:51:c6:84:3c:f3:37:
         90:c7:d0:e7:84:c7:e6:04:91:2f:d8:92:f8:07:cc:92:98:92:
         1a:f7:ba:66:b5:69:1a:dc:cd:67:26:ae:6e:19:41:e0:c9:31:
         69:67:f0:85:20:f3:5a:12:e7:e1:d7:af:c9:fb:81:b1:14:dc:
         4b:6d:98:9b:0d:85:bb:fc:31:36:c3:be:eb:11:ba:f7:04:69:
         55:7e:a1:94:88:6f:74:11:e7:24:e7:56:84:20:ec:22:d4:1f:
         ca:76:63:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+ayAbylCOfJcYvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk
N2ViZTYyMjQtYTkxOS00Y2M3LWI0ZmQtMjhjYmJhMTViYjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk7dSfo1KO2VIUIgqWC4ihh+MFrnpjKV9jqF
zKBy3k1vvi5Km8O15PyP/6c9KX3cK+RkNDkO1ArK6KP0s4OaQhVI3fPIoLhdXLcg
MuTSb0CXRBaAqPdWYOOjf2ZSSTSjpGCpDEhPjWzuAd0u9+tiv03XaRmPdGK29AyG
951y6G39A2VIXOmjPLcfGtfq7DuLybIv8x9yfCRYXFgu2sBGAsh5EQRWzFP6tgX6
XcGXI1g1sl2927vQ9zF6NBWQilgDBJLtHz9qhgw2OhekpnbnEFwcPZcykh5urMXC
vXbhn4r136IBA0yIYwcJmpXFk1V3r0h7PwC++7pJJ6c2gIt2+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNGMGERKq1qZQBYLkkP4jjKo1Y3RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvZjA2MjEzYzYtY2Q2NS0z
M2EyLWIzNzMtMTRhZjZhN2VhZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEOxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA52IcGwvS2C22b2Y4BBsMb6xoCBlK/0bUkCYXeOZtnCv6hP6hI1TN/k
BA/RwyRxCUPLqjPG3BRWB/1FMs/c5oAktzGoJaej39lbDFMrtJkin+fDaZZ5k6WG
0mr1JEsignWtuA1nMYMCJoObHevIEVQqb2E72l/CV0Z46VySIwFEAJlO3ToUSwz9
uQTiStWTPVPa0eERRIUTDtMFKVHGhDzzN5DH0OeEx+YEkS/YkvgHzJKYkhr3uma1
aRrczWcmrm4ZQeDJMWln8IUg81oS5+HXr8n7gbEU3EttmJsNhbv8MTbDvusRuvcE
aVV+oZSIb3QR5yTnVoQg7CLUH8p2Yyk=
-----END CERTIFICATE-----
Generated at Wed May 13 12:49:57 2026 by rpki-client