Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75282f19-c29f-3698-94c2-19f36dd1a8c0.roa
File:                     75282f19-c29f-3698-94c2-19f36dd1a8c0.roa (raw, json)
Hash identifier:          VmQdCPkcwIhMRdat7fyO8pxggQ2iNes9FYh1uNsgO9Y=
Subject key identifier:   22:89:B1:80:C5:5E:47:06:E2:D9:E1:66:B7:05:48:9B:12:28:42:D7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F498A2BF18F8B92478F88F220
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75282f19-c29f-3698-94c2-19f36dd1a8c0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3257
IP address blocks:        128.121.64.0/18 maxlen: 24
                          128.241.128.0/18 maxlen: 24
                          131.103.192.0/18 maxlen: 24
                          157.238.0.0/18 maxlen: 24
                          168.143.0.0/18 maxlen: 24
                          192.204.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:2b:f1:8f:8b:92:47:8f:88:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b6299523-c8b7-4052-b5bb-4d683ce93ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:82:f7:ab:d7:8b:95:21:42:85:71:84:f8:
                    5e:ad:73:3b:a8:51:da:cd:8b:a3:4b:0a:b7:b1:bc:
                    d0:81:e8:03:e0:e6:66:47:cd:4c:f6:e2:63:02:d8:
                    d8:e2:52:fd:9e:60:bb:94:e3:8b:f6:71:cd:95:ae:
                    fc:6e:c9:ac:58:3c:a1:21:fd:fa:95:10:e4:9b:67:
                    3f:6a:0c:da:6e:20:ad:ea:1a:1e:c3:e8:68:a7:b9:
                    a9:86:c8:61:1b:3d:d7:2f:56:c7:02:57:b8:15:7a:
                    26:10:2a:9e:34:78:79:ea:62:d2:d5:c5:79:23:c5:
                    aa:fc:ad:9b:ca:54:f7:26:47:59:81:a6:4e:88:bc:
                    e3:7f:28:0c:38:fa:0c:95:74:e5:f2:85:53:1d:6c:
                    08:23:e0:3b:e9:17:a1:d4:f7:1d:e0:0e:38:0b:45:
                    08:26:b7:a3:14:f1:10:ac:bb:cd:38:73:f2:eb:5e:
                    c2:8f:f0:48:98:03:52:ca:95:f1:6c:94:23:9b:72:
                    dc:b6:9e:cc:d5:7c:56:68:37:1c:fc:41:17:61:66:
                    da:e9:4a:b6:37:46:2b:df:51:a8:ad:ae:78:dd:67:
                    42:38:19:6f:13:e9:db:89:07:24:b8:54:53:67:1e:
                    49:e7:dd:bf:20:05:d0:cc:54:b0:33:bc:66:23:c3:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:89:B1:80:C5:5E:47:06:E2:D9:E1:66:B7:05:48:9B:12:28:42:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75282f19-c29f-3698-94c2-19f36dd1a8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.64.0/18
                  128.241.128.0/18
                  131.103.192.0/18
                  157.238.0.0/18
                  168.143.0.0/18
                  192.204.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:f1:67:b6:5d:4f:d5:cb:23:5f:73:96:e0:39:39:07:29:2b:
         e6:66:5e:ff:1d:e6:ac:ac:d3:28:e6:83:5c:f9:e4:58:fc:ea:
         3d:b1:76:8a:0d:91:bc:26:84:ad:17:b0:bc:b8:ea:22:f2:ba:
         46:a8:77:0d:a7:a2:e4:6d:9e:6f:7a:2b:74:63:d7:7e:6e:d8:
         42:59:1a:5c:e0:ae:1f:2e:1e:8a:61:dd:6b:30:a2:87:7e:db:
         1c:f6:c0:9a:86:b1:24:90:dd:31:e9:87:e8:55:d8:40:b1:09:
         b0:4a:9e:7f:dd:d2:ba:8b:9b:87:dc:15:cd:7a:1d:d2:ad:37:
         90:33:45:53:61:2b:cf:ec:5e:63:d7:7e:ef:4a:0d:e6:1a:c9:
         be:55:c5:07:af:a1:56:06:be:41:8d:56:75:c5:5e:71:16:dd:
         1b:7c:8f:94:0c:58:6a:25:7a:10:ef:9e:1a:a7:5a:6f:db:b2:
         ee:0f:f5:9f:95:a9:6a:bc:1b:3c:94:5f:01:9a:c3:10:89:3d:
         f8:ba:bb:fe:31:76:3b:ec:f4:04:7d:1b:98:39:cd:9a:79:2d:
         64:39:8b:6b:61:12:3b:5c:f5:04:ef:b8:e7:40:c1:d5:19:4a:
         e3:af:eb:ff:fc:4e:36:47:cf:9a:c7:de:05:33:76:b7:03:4b:
         9a:2d:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:06:14 2026 by rpki-client