Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa
File:                     d1fb6743-6930-3219-a256-da13d772b588.roa (raw, json)
Hash identifier:          uj8Q+owCjDEOILlng96wp8QXO0AOKNIExcLz3lYMH1M=
Subject key identifier:   6F:1E:90:61:38:0B:5E:F2:E8:2D:62:FA:0F:85:2A:03:3A:74:A4:CB
Certificate issuer:       /CN=22a2b00e-11a0-4c50-abf7-a74adfea69e4
Certificate serial:       010D0C9F4328584D0D42653EAC4C556759E97B00
Authority key identifier: 8E:DC:20:EF:33:21:29:1E:50:62:9A:DC:C8:EC:B1:59:A6:6E:CD:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     32156
IP address blocks:        192.75.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:65:3e:ac:4c:55:67:59:e9:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a2b00e-11a0-4c50-abf7-a74adfea69e4
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=278b09ad-2c18-4e61-9b70-6f3e6c0cca55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:c9:50:b0:17:bc:55:2f:bb:ef:0d:39:b5:
                    2a:d7:83:27:76:85:2e:a2:1d:e5:fd:10:a2:64:a7:
                    70:11:69:70:79:f9:aa:b0:19:bb:5c:4d:8e:ec:b4:
                    01:2b:0c:2e:cd:19:f2:47:8f:32:f4:a8:e4:06:bb:
                    22:cf:65:57:77:e0:2f:78:40:8a:37:bb:f1:5e:e5:
                    f8:ce:87:89:f3:ca:50:48:3b:1a:0a:59:2d:71:00:
                    5b:34:bc:cc:9e:ef:8c:9d:c0:40:bd:73:d8:20:48:
                    5f:85:03:d4:d2:12:d8:af:c2:d6:7f:2b:a1:09:2a:
                    6f:e4:79:25:c0:03:8d:01:8a:32:53:0a:2b:fb:34:
                    5b:82:09:d8:73:a3:51:0c:8c:11:c1:5e:0a:01:60:
                    aa:8a:4d:3b:8d:7f:08:1d:60:54:1b:6e:75:22:04:
                    97:43:d6:88:9b:b4:36:6a:c7:ef:ed:82:4e:be:24:
                    f6:89:3a:96:6f:b6:af:6f:55:3d:d2:8d:ed:e4:82:
                    3a:e1:11:89:bb:e0:10:44:9a:00:e9:95:67:38:b7:
                    c5:66:f6:4f:a8:dd:6e:48:68:72:f9:ae:0c:38:2a:
                    37:bd:1d:01:f0:6b:99:17:70:1c:5d:91:f7:5b:0c:
                    29:3a:0c:7e:4d:0b:dd:9e:4c:54:74:5a:5d:88:0a:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1E:90:61:38:0B:5E:F2:E8:2D:62:FA:0F:85:2A:03:3A:74:A4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.crl

            X509v3 Authority Key Identifier:
                keyid:8E:DC:20:EF:33:21:29:1E:50:62:9A:DC:C8:EC:B1:59:A6:6E:CD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:2c:5f:fb:e1:de:53:86:e0:11:c7:98:f5:b6:5d:7d:7d:
         bc:83:9e:43:84:6a:92:d8:c8:e4:a9:83:9f:c7:58:24:d3:81:
         e0:05:b5:63:f8:fc:89:67:02:31:7b:bb:d3:fa:60:d7:b0:ed:
         a9:52:43:8c:7e:aa:8f:8e:97:d8:e1:2e:c2:23:d9:d1:23:b1:
         1f:1c:d5:80:e7:5e:aa:24:7a:a0:c6:bd:5e:65:57:44:f1:71:
         cb:17:82:cb:12:23:35:d8:77:87:a4:07:8d:39:0a:d2:17:6d:
         4b:bb:ea:b1:7e:b4:bc:97:d0:7f:e7:c3:3d:d4:4d:1f:33:99:
         d9:c0:1f:f1:0f:06:2d:2e:d7:37:6a:cb:5b:a3:21:17:9a:73:
         cc:f3:9a:12:75:26:b0:61:85:43:5c:e2:3f:4c:c5:d4:c5:4a:
         eb:1e:ba:8b:b9:66:4b:86:d7:48:cd:34:2f:89:11:b1:9e:02:
         d0:08:59:b2:cd:5b:d2:ef:29:e0:45:3e:d9:c4:bf:5d:f0:f8:
         f9:ac:6d:75:ae:38:a7:51:1c:fb:6c:8d:b4:e6:b2:66:07:0f:
         df:36:10:34:7b:d6:de:40:0f:5b:3f:fa:2c:bc:06:35:7a:90:
         85:93:4f:0d:cd:5d:be:7a:9e:56:93:db:27:46:39:9b:06:c3:
         30:b1:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:05 2026 by rpki-client