Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa
File:                     06765d03-abf5-30c6-b110-2caa00fd6a3c.roa (raw, json)
Hash identifier:          CHHR2OHZb1F46sgxidmkzzu0rplBeoyWVD1F4QZ/6yY=
Subject key identifier:   0B:E4:5B:1D:05:01:3C:7C:5A:70:77:25:83:3A:95:5E:79:89:0D:EA
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584E94EA60D3F687F78A6067BE00
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     393653
IP address blocks:        104.128.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:60:d3:f6:87:f7:8a:60:67:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=3b597536-cdc0-4957-afd5-7865c31a85b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:48:1d:c6:30:cd:31:99:00:81:21:59:ca:20:
                    15:eb:b9:88:68:57:c6:de:63:e7:e2:0a:e6:dd:f1:
                    3f:58:20:38:b8:82:19:b7:65:2e:13:39:b2:8b:b4:
                    92:81:ae:9b:ba:8a:dc:73:28:82:2c:dc:7e:79:a6:
                    c3:aa:47:df:ae:67:87:18:c1:70:3c:2a:a6:30:2d:
                    a4:29:24:07:3a:76:ae:ab:90:9f:af:e8:85:39:5a:
                    68:a3:1b:c9:cc:71:88:39:53:d0:aa:8c:dd:70:dc:
                    80:01:d5:51:3f:fe:b3:df:70:ab:b4:08:cb:ed:60:
                    9f:90:5f:99:60:10:1c:4d:c2:2c:0f:1b:54:9d:3c:
                    81:3a:e6:17:6b:a0:ec:a5:33:da:27:f8:e6:78:99:
                    9a:73:0a:68:4f:77:a0:e8:fe:32:1d:4d:1e:fd:a0:
                    b1:b1:ed:a8:5e:69:66:c1:12:a0:83:4b:97:8a:72:
                    a8:ca:59:77:25:76:7e:ed:d0:65:9a:2c:c2:2c:89:
                    38:13:a4:b6:63:05:d4:b8:1f:a7:9d:05:7e:f7:53:
                    8f:24:3c:b4:76:99:d9:15:67:ed:db:58:07:74:3b:
                    2f:9a:74:b2:fb:2f:d7:4a:28:12:07:95:3d:bf:1d:
                    d4:61:e8:26:71:5e:7f:6f:66:50:8c:30:b4:a2:2b:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E4:5B:1D:05:01:3C:7C:5A:70:77:25:83:3A:95:5E:79:89:0D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:96:57:c4:ec:31:88:c5:04:52:28:2e:93:42:e1:08:78:
         7a:26:e9:2d:93:99:bf:4b:d3:a1:52:83:64:6e:44:41:3f:d7:
         8f:fb:30:a5:10:ac:15:4f:b3:11:c8:b9:5a:a5:8a:94:51:7c:
         65:4d:64:4f:38:4a:fa:11:45:d3:53:8e:e4:83:a3:c6:53:4c:
         58:ea:f0:26:27:d7:61:d5:42:81:28:70:fb:19:a5:e5:13:41:
         c2:db:a8:06:b0:fd:7a:49:fd:41:c8:7b:ab:03:09:e8:05:80:
         fd:2f:02:82:3e:b0:15:d7:97:c3:e7:47:58:03:fc:e4:f6:af:
         90:ac:34:e0:71:42:2a:2f:6b:6d:0c:85:1c:de:5c:9e:8f:da:
         79:15:de:fb:20:40:09:74:8e:fa:77:c1:3d:0d:08:b3:2e:c0:
         37:ef:c1:53:22:6c:b1:74:bb:75:f3:c5:e6:0b:eb:1b:7e:ab:
         0d:e5:c7:ce:19:97:2d:fa:41:19:9d:4a:55:a6:33:79:c3:3d:
         45:ae:ad:c8:57:98:51:3c:ef:6d:ae:a6:33:dd:d0:7c:70:31:
         8d:be:15:e3:a9:3f:33:58:b2:05:87:cb:18:a9:b3:dd:4c:b0:
         db:be:5c:af:8f:c7:67:8b:98:15:c6:1a:63:47:9f:c9:12:25:
         94:fd:e9:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6mDT9of3imBnvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm
ODFjMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
M2I1OTc1MzYtY2RjMC00OTU3LWFmZDUtNzg2NWMzMWE4NWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUgdxjDNMZkAgSFZyiAV67mIaFfG3mPn4grm
3fE/WCA4uIIZt2UuEzmyi7SSga6buorccyiCLNx+eabDqkffrmeHGMFwPCqmMC2k
KSQHOnauq5Cfr+iFOVpooxvJzHGIOVPQqozdcNyAAdVRP/6z33CrtAjL7WCfkF+Z
YBAcTcIsDxtUnTyBOuYXa6DspTPaJ/jmeJmacwpoT3eg6P4yHU0e/aCxse2oXmlm
wRKgg0uXinKoyll3JXZ+7dBlmizCLIk4E6S2YwXUuB+nnQV+91OPJDy0dpnZFWft
21gHdDsvmnSy+y/XSigSB5U9vx3UYegmcV5/b2ZQjDC0oiv6gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAvkWx0FATx8WnB3JYM6lV55iQ3qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy
ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvMDY3NjVkMDMtYWJmNS0z
MGM2LWIxMTAtMmNhYTAwZmQ2YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi
ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl
ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4
ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIaOllfE7DGIxQRSKC6TQuEIeHom6S2Tmb9L06FSg2RuREE/14/7MKUQ
rBVPsxHIuVqlipRRfGVNZE84SvoRRdNTjuSDo8ZTTFjq8CYn12HVQoEocPsZpeUT
QcLbqAaw/XpJ/UHIe6sDCegFgP0vAoI+sBXXl8PnR1gD/OT2r5CsNOBxQiova20M
hRzeXJ6P2nkV3vsgQAl0jvp3wT0NCLMuwDfvwVMibLF0u3XzxeYL6xt+qw3lx84Z
ly36QRmdSlWmM3nDPUWurchXmFE8722upjPd0HxwMY2+FeOpPzNYsgWHyxips91M
sNu+XK+Px2eLmBXGGmNHn8kSJZT96eM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:00 2026 by rpki-client