Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/2727f34b-731f-334e-8ed7-eb3e33f6a197.roa
File:                     2727f34b-731f-334e-8ed7-eb3e33f6a197.roa (raw, json)
Hash identifier:          NSInSm1Nh6Y7uP+8Trw856BFY+ejpvzdyIpcs+hMV6o=
Subject key identifier:   8C:FC:3D:E1:92:61:0F:68:3A:A7:27:65:69:E6:09:43:10:B6:6B:3A
Certificate issuer:       /CN=7f65257f-b470-457c-ae60-9f9105a2a833
Certificate serial:       010D0C9F4328584F3FAD2DA2FA01A0F1B2C39200
Authority key identifier: 9C:CF:F6:32:F8:BA:D8:53:2A:2F:4E:AA:2E:7C:58:C2:4D:0F:2A:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/2727f34b-731f-334e-8ed7-eb3e33f6a197.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     399031
IP address blocks:        192.75.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/7f65257f-b470-457c-ae60-9f9105a2a833.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/7f65257f-b470-457c-ae60-9f9105a2a833.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:2d:a2:fa:01:a0:f1:b2:c3:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f65257f-b470-457c-ae60-9f9105a2a833
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=b5c6ee41-ef49-4d50-b4ab-998d0db9c664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:d5:56:7a:77:29:1d:62:50:25:37:1a:ae:
                    01:2f:72:23:e8:2b:6a:f2:74:0b:c0:2f:6f:6f:ae:
                    78:16:30:65:2d:96:37:f7:de:cc:7f:3e:32:f4:4f:
                    1b:59:80:d4:3e:0e:77:e8:eb:3e:1d:3f:70:31:f4:
                    1f:12:22:c1:8a:b3:3c:65:84:ee:7a:52:8c:f4:5f:
                    06:fe:a9:e7:bc:5d:44:00:53:f4:dd:42:57:d7:e0:
                    b8:9e:c8:d4:08:82:80:a5:2c:98:b8:42:7e:2d:e7:
                    08:df:54:d1:4a:70:d5:32:a6:4b:8e:53:36:50:50:
                    e1:ab:0c:86:15:ca:5f:c6:04:cf:05:3c:df:06:19:
                    51:7f:16:3a:e8:73:99:20:10:60:90:14:56:ac:c1:
                    ee:fb:94:be:74:e2:78:cd:d3:4b:e0:28:20:ab:d0:
                    e6:80:3d:6f:73:cb:fb:c8:7e:f6:0e:f1:e4:f6:38:
                    9e:9f:10:41:d7:34:e0:6a:20:e0:55:32:52:a0:bd:
                    5b:80:3f:6c:1f:48:f2:4f:3b:b1:cb:7a:7d:0e:c0:
                    dc:3c:8c:09:ea:41:f2:0a:8d:d4:1f:16:a3:ff:32:
                    67:8e:87:06:d6:b5:e7:5b:59:c4:d3:32:50:d7:ac:
                    cc:dc:ea:97:46:51:19:2d:1c:78:96:3f:c0:96:73:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:3D:E1:92:61:0F:68:3A:A7:27:65:69:E6:09:43:10:B6:6B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/2727f34b-731f-334e-8ed7-eb3e33f6a197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833/7f65257f-b470-457c-ae60-9f9105a2a833.crl

            X509v3 Authority Key Identifier:
                keyid:9C:CF:F6:32:F8:BA:D8:53:2A:2F:4E:AA:2E:7C:58:C2:4D:0F:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7f65257f-b470-457c-ae60-9f9105a2a833.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:67:fa:83:18:97:fd:e6:ff:ad:0b:6f:01:45:32:fb:7b:4c:
         4c:32:f9:86:8d:e0:67:18:e3:93:af:17:e4:f3:bc:ee:ab:90:
         93:81:f9:cb:d3:9b:ee:bf:57:9d:8e:82:6c:46:0d:af:80:77:
         71:db:28:e7:72:93:61:01:44:47:49:3a:bf:22:66:c8:78:6f:
         6e:a1:e7:d1:55:28:e8:57:19:08:05:67:1a:ae:94:ee:d2:1f:
         27:db:50:df:09:8b:26:e3:aa:46:67:47:e2:24:01:54:c7:a5:
         63:80:d1:e0:d6:0a:c5:e2:01:f3:59:dc:6a:79:48:84:e8:3e:
         70:cc:52:54:1e:b2:14:ed:88:18:60:90:ac:a1:7f:e7:b0:3b:
         e0:ac:5e:8b:2c:70:4b:df:7e:c4:35:b2:35:f8:b5:a4:7b:58:
         49:af:f8:94:69:27:dd:eb:cd:fc:2d:f2:90:60:b2:79:ac:4f:
         5b:61:a1:b5:1a:64:29:23:d6:e5:65:a1:c7:61:b8:0c:f7:b2:
         48:d1:74:58:b9:22:e6:5c:2d:df:de:7b:18:0e:0f:c1:2a:2f:
         ea:5d:d5:e5:5f:d8:5a:f2:38:e4:07:b7:1e:ec:22:81:92:29:
         8d:c9:f6:e8:a8:c8:38:30:12:88:24:98:47:ed:67:e9:59:72:
         1d:2c:23:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:43:30 2026 by rpki-client