Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa
File:                     06765d03-abf5-30c6-b110-2caa00fd6a3c.roa (raw, json)
Hash identifier:          gmCT7vjC2Q2CKBKnZMooyGctlOV70ua2yi9EogB6Z4k=
Subject key identifier:   85:67:DB:41:66:EE:54:30:3B:21:DE:B1:06:FA:FA:45:FF:F2:0B:4E
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584DB4A58B115BFB4A27069FF100
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     393653
IP address blocks:        104.128.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:8b:11:5b:fb:4a:27:06:9f:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=d9586752-cad8-4776-8923-b143fec69670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:79:b6:d0:7d:43:8b:f1:bb:a4:a5:88:ec:
                    90:8a:7d:02:f7:60:e7:67:7a:55:9f:ef:8d:d2:bd:
                    2d:60:86:6b:a5:b3:d5:38:f6:cc:d6:fe:e2:65:53:
                    98:98:e3:89:8a:13:75:0b:9f:b6:4b:f6:bc:34:39:
                    0d:1a:bc:7c:5e:c0:e6:24:26:f3:ab:eb:1b:e3:18:
                    cc:0e:a3:3d:f5:9e:65:5b:82:73:bc:c1:18:9f:5e:
                    63:f6:46:e0:e9:b2:3d:09:32:f8:bd:e2:2e:0d:58:
                    3a:c6:fe:94:db:ec:3b:de:ab:77:e9:e3:a2:5e:ac:
                    08:cb:27:d5:58:0a:90:fa:1a:a4:b4:45:97:6c:79:
                    a0:39:df:66:cd:6e:3f:68:81:c0:bc:88:b2:4a:cd:
                    9e:61:38:02:9e:78:a4:03:a7:4c:4f:e0:e4:c0:77:
                    56:36:58:0c:f9:46:42:cc:a0:ea:ef:c6:c6:8d:51:
                    ae:c3:72:0e:a1:5c:2a:7f:43:3a:41:37:2a:ca:03:
                    36:22:09:60:b0:74:22:50:ed:63:06:a5:1c:46:c0:
                    88:35:de:0e:1c:bc:da:bf:7e:1c:6e:a2:6e:5d:6d:
                    7a:f1:76:19:24:f0:42:57:25:fe:8e:6e:b4:94:1e:
                    c8:38:38:d1:1d:b5:79:03:14:2b:8f:5b:29:c3:db:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:67:DB:41:66:EE:54:30:3B:21:DE:B1:06:FA:FA:45:FF:F2:0B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/06765d03-abf5-30c6-b110-2caa00fd6a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e0:e1:c0:c3:f9:33:a5:de:ae:3a:4f:e0:57:a1:e9:14:1d:
         96:b4:bc:04:85:bf:d9:76:fb:d5:82:22:3b:47:55:2d:62:59:
         98:be:ad:c2:2c:e4:08:b6:c5:66:c3:57:53:aa:bc:e2:1a:54:
         51:96:69:19:0a:8d:8b:ac:c0:18:76:11:73:c2:ec:90:9f:bf:
         d4:09:76:73:17:02:5b:4f:61:03:0f:e8:9e:3c:ea:26:64:52:
         c8:e4:0e:ef:c2:dc:2a:07:4d:0b:fb:0b:d1:ed:de:03:0c:ce:
         5b:a6:23:c5:af:44:66:08:c6:9b:c3:bd:c9:91:26:af:de:d6:
         a5:ba:6c:02:a3:e9:54:6a:e3:52:fb:21:82:34:0d:65:17:25:
         6d:72:bb:b0:7c:c3:c4:fd:59:b0:ee:41:4e:6e:b0:6b:ca:a7:
         0d:90:a4:d4:ad:b7:51:88:8b:05:71:c8:00:c5:a5:26:d0:d8:
         89:14:f1:41:d9:ee:24:10:dc:17:28:32:72:49:f6:f5:1d:dd:
         ca:c1:83:a1:b5:7b:a9:6f:2a:4f:61:b0:40:03:72:c5:4b:91:
         ff:7a:fb:63:54:c0:f9:fb:8d:52:6d:6b:49:40:f9:25:2e:e8:
         29:be:4c:6c:a1:85:60:d2:6d:d5:07:e6:bc:62:83:b5:7a:7c:
         c1:7c:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:54 2026 by rpki-client