Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/05b37b9b-a029-3347-b046-c9aa34a2995e.roa
File:                     05b37b9b-a029-3347-b046-c9aa34a2995e.roa (raw, json)
Hash identifier:          aJCsc1X38LaDUiZ79T7t5mTam5Wt+yoBkXqjtR09KmU=
Subject key identifier:   8B:52:BE:61:FE:AE:A0:AF:CF:26:D8:A4:1B:AA:EE:82:43:89:D3:A4
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584E94EA6077C7182F7462929408
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/05b37b9b-a029-3347-b046-c9aa34a2995e.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     393653
IP address blocks:        104.128.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:60:77:c7:18:2f:74:62:92:94:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=b1479a4d-e0fb-4fd4-b6f1-105c0fc539c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:96:43:c3:23:ec:49:23:f5:28:4f:28:fe:25:
                    a3:8c:5f:fb:59:a8:38:e6:0a:dd:4c:98:28:c1:48:
                    f1:91:3c:3f:b1:71:e3:f9:be:bb:95:5f:fb:d3:6b:
                    5e:2d:28:3a:a8:5b:af:d4:35:f3:76:e7:8e:cf:c2:
                    75:0e:fe:68:e5:f1:ba:d8:20:16:34:34:9d:e5:48:
                    1d:23:43:4b:7a:fd:ff:10:b6:84:c1:c8:d3:c4:03:
                    00:53:f0:65:90:5f:e0:66:f3:32:ae:31:80:fb:84:
                    da:66:98:63:5c:5e:1b:72:e9:53:6e:50:5a:fd:53:
                    ef:43:d6:f5:0e:1d:fd:b1:d3:65:7e:4c:84:2c:3b:
                    8f:d2:4f:40:b6:06:7c:8a:6e:0e:b3:d8:aa:d8:b3:
                    26:15:d5:c0:39:ae:b7:a8:f5:eb:4a:29:7e:22:c2:
                    35:f8:44:c1:8d:88:c1:a1:86:75:64:e2:90:3d:12:
                    92:6f:a7:c7:ec:57:b4:70:16:d8:ab:f6:77:19:6b:
                    9a:a4:0b:d7:1f:af:d8:60:0b:c4:1c:63:19:5b:ab:
                    21:54:1f:3e:d0:fe:74:86:37:94:a4:df:39:49:c7:
                    0f:58:ae:07:01:b9:9e:3a:d3:02:14:dc:7e:09:92:
                    5e:91:11:be:b7:47:5e:8b:ac:c4:0b:1e:7d:c4:ca:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:52:BE:61:FE:AE:A0:AF:CF:26:D8:A4:1B:AA:EE:82:43:89:D3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/05b37b9b-a029-3347-b046-c9aa34a2995e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:d7:28:e2:58:db:1c:cd:99:14:4e:1d:e6:2a:00:10:39:
         34:8f:c3:c8:1e:f8:7a:62:56:83:c9:40:79:ed:46:87:0f:89:
         a5:9d:4f:3d:e6:3e:a4:85:ad:80:ae:77:0e:14:eb:81:9d:94:
         d9:b9:42:56:96:c2:fc:7f:e7:a2:ac:89:d9:27:43:be:11:fc:
         0f:ed:06:d8:50:23:bc:83:c2:c4:d3:99:92:85:90:8c:c5:fe:
         0b:5f:76:84:1e:5b:7d:f6:1d:1b:2f:d7:b5:7a:04:27:8e:c4:
         e3:91:db:f5:14:57:81:e4:ed:ca:1b:a6:fd:69:e9:4b:a3:e6:
         da:cd:f1:52:90:36:54:d7:bb:38:63:ec:1a:4d:8e:ed:3d:a2:
         d3:ca:3f:82:f2:82:9b:66:db:79:fa:d3:a2:7d:7d:dc:a6:4a:
         c0:98:0e:bd:7f:75:a2:4d:93:ee:64:54:30:b5:ab:34:33:78:
         78:9a:56:18:5d:37:77:d3:98:aa:db:37:aa:c2:96:9f:be:b7:
         03:23:8e:97:f6:fd:84:ef:93:08:a2:29:56:d0:ca:07:80:8d:
         4c:98:d6:51:d2:c0:1d:7d:6e:82:b1:62:c0:0b:85:d9:41:56:
         42:bd:3a:ef:e6:ae:56:3a:9b:74:05:c8:5c:b1:6f:9f:d1:e9:
         c7:1c:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:24 2026 by rpki-client