Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6a348c51-c7ef-3d48-b949-aa6eb5eac6e1.roa
File:                     6a348c51-c7ef-3d48-b949-aa6eb5eac6e1.roa (raw, json)
Hash identifier:          yPjASbjKd+z0xPFfpRYyc271k/A5k0HUBgI3hLfmQKY=
Subject key identifier:   7D:70:5D:FD:11:09:5E:3A:E8:89:58:A5:2A:46:E3:1A:0D:A5:F7:94
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584E94EA60E99DD1413096F100E6
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6a348c51-c7ef-3d48-b949-aa6eb5eac6e1.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     393653
IP address blocks:        104.128.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:60:e9:9d:d1:41:30:96:f1:00:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=01b55f57-2775-4e2c-92bc-16f84e52849d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:90:fb:21:37:d1:f1:5c:2a:fc:9c:e6:51:
                    ce:73:d0:2d:d1:e9:a7:da:67:80:14:75:d5:a8:99:
                    a6:c3:1d:a3:a0:78:70:41:a1:67:1b:90:41:50:cb:
                    7d:4b:c8:3d:00:e4:c4:52:f6:94:07:6d:47:44:f0:
                    a8:ed:49:aa:03:9a:ff:26:44:33:cf:fc:41:51:f3:
                    73:ef:3e:25:6d:3d:bb:35:be:7c:82:1f:6d:67:31:
                    28:5b:0c:d1:2d:9c:56:01:a3:b0:57:ca:57:8b:38:
                    0b:01:60:c4:d4:a1:2f:27:77:2a:8e:61:30:73:f7:
                    f3:d9:4d:5e:d7:79:1d:f6:07:24:6c:17:17:63:af:
                    2d:a1:0c:11:27:b0:d8:be:f1:6e:c8:6d:a0:26:7e:
                    e8:65:0e:8b:9f:b5:d0:2f:7f:e0:18:29:b4:17:1b:
                    03:cf:05:98:42:9e:61:41:90:db:e6:f7:7c:4a:9d:
                    ec:0b:ef:4b:42:ac:be:6b:93:ab:cd:d3:e1:cf:51:
                    bb:7c:7a:1d:45:05:d8:f8:de:23:aa:41:b3:d0:1d:
                    ea:f9:dd:f1:9c:3a:0c:b7:b5:79:ec:ca:ea:04:96:
                    f5:88:24:d2:08:e7:c3:1b:18:e0:c7:d3:ec:d3:03:
                    84:c5:4e:7a:cc:83:42:bc:53:df:f7:64:59:56:c5:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:70:5D:FD:11:09:5E:3A:E8:89:58:A5:2A:46:E3:1A:0D:A5:F7:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/6a348c51-c7ef-3d48-b949-aa6eb5eac6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a1:bc:3f:13:71:73:29:a0:91:13:cd:cf:d3:a5:7e:e6:dc:
         6d:04:a4:3f:e9:8c:3e:06:e4:c8:45:40:4b:02:c6:c4:97:c9:
         ea:39:cd:2f:2e:a2:e5:af:6f:1c:86:83:d5:3e:9b:64:19:02:
         0e:51:98:ea:14:5a:f6:fe:2d:93:e6:2d:f7:10:f8:04:3a:89:
         b4:ff:42:d5:81:b7:89:02:ed:e7:61:95:c2:e0:bf:bf:e7:3a:
         86:af:4d:dd:0f:e6:4a:fc:5b:74:25:48:49:30:db:4d:2e:94:
         32:0a:66:9a:e4:bf:6e:99:2b:b7:64:2d:3f:dc:2a:ae:13:af:
         ce:7e:0f:a7:2a:b3:b9:22:ce:d6:41:ff:95:60:36:6d:27:7e:
         7e:04:a9:42:50:48:e7:a9:85:8b:1c:1f:f6:27:70:f6:cc:d1:
         98:fd:4e:09:0d:19:d5:42:af:1e:f9:69:96:19:6b:7d:53:70:
         fa:cb:c7:19:78:ea:42:ad:ca:d8:26:90:a9:9a:40:5c:b9:bc:
         e9:62:ce:45:1d:d8:56:64:90:a1:9c:9b:26:f3:d3:51:f1:b5:
         af:86:b6:58:ce:ca:47:80:14:7b:f0:01:3c:4f:17:e0:5d:72:
         d9:f4:f5:14:85:7d:93:ca:a4:23:57:d8:2b:68:7b:85:3b:75:
         98:34:89:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6mDpndFBMJbxAOYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm
ODFjMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
MDFiNTVmNTctMjc3NS00ZTJjLTkyYmMtMTZmODRlNTI4NDlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLGQ+yE30fFcKvyc5lHOc9At0emn2meAFHXV
qJmmwx2joHhwQaFnG5BBUMt9S8g9AOTEUvaUB21HRPCo7UmqA5r/JkQzz/xBUfNz
7z4lbT27Nb58gh9tZzEoWwzRLZxWAaOwV8pXizgLAWDE1KEvJ3cqjmEwc/fz2U1e
13kd9gckbBcXY68toQwRJ7DYvvFuyG2gJn7oZQ6Ln7XQL3/gGCm0FxsDzwWYQp5h
QZDb5vd8Sp3sC+9LQqy+a5OrzdPhz1G7fHodRQXY+N4jqkGz0B3q+d3xnDoMt7V5
7MrqBJb1iCTSCOfDGxjgx9Ps0wOExU56zINCvFPf92RZVsWV2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1wXf0RCV466IlYpSpG4xoNpfeUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy
ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvNmEzNDhjNTEtYzdlZi0z
ZDQ4LWI5NDktYWE2ZWI1ZWFjNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi
ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl
ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4
ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOhvD8TcXMpoJETzc/TpX7m3G0EpD/pjD4G5MhFQEsCxsSXyeo5zS8u
ouWvbxyGg9U+m2QZAg5RmOoUWvb+LZPmLfcQ+AQ6ibT/QtWBt4kC7edhlcLgv7/n
OoavTd0P5kr8W3QlSEkw200ulDIKZprkv26ZK7dkLT/cKq4Tr85+D6cqs7kiztZB
/5VgNm0nfn4EqUJQSOephYscH/YncPbM0Zj9TgkNGdVCrx75aZYZa31TcPrLxxl4
6kKtytgmkKmaQFy5vOlizkUd2FZkkKGcmybz01Hxta+GtljOykeAFHvwATxPF+Bd
ctn09RSFfZPKpCNX2Ctoe4U7dZg0idk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:10 2026 by rpki-client