Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa
File:                     658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa (raw, json)
Hash identifier:          IXzuZ3+VC1dQmcNQZ14LixWy3ilz+EQkpiUAu08cVdQ=
Subject key identifier:   51:AD:E2:C8:5A:89:B0:0D:11:7B:68:0C:A5:78:CD:B5:26:F8:BC:C2
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4974023C3A6592DBE0844020
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        75.152.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:02:3c:3a:65:92:db:e0:84:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2263b4db-e6c7-4fd8-99c4-1bfa465cd740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:48:fc:1a:23:23:0b:6a:38:7f:64:c0:fe:7e:
                    b5:c6:d2:6c:5e:0d:36:b4:42:8a:f8:d9:10:d6:50:
                    57:ee:92:23:77:3e:0d:0e:e2:19:23:02:70:73:9b:
                    1f:6c:39:04:75:05:a0:64:da:02:5a:a2:14:06:19:
                    44:2f:32:dd:35:9a:8e:64:1c:bc:b3:24:41:c2:6c:
                    f6:1c:1c:be:eb:e5:ee:13:0f:50:da:00:f9:d7:d3:
                    bf:7d:87:56:7d:c3:23:b2:d0:26:a5:d2:32:1e:2a:
                    db:94:6e:f2:fa:da:67:4d:e2:bf:d4:c0:83:14:0d:
                    7a:8a:46:ad:58:b9:00:16:e6:25:93:8c:af:24:bb:
                    37:d4:f8:1f:77:b1:c6:f4:16:5e:db:17:9d:ff:28:
                    0f:e5:0e:62:bc:3d:91:a3:e2:52:eb:b1:1d:a4:61:
                    40:76:f7:1c:d4:b7:c6:33:09:82:09:18:ca:ff:5c:
                    d9:3e:bc:68:f8:cb:d4:cf:9e:82:86:3f:e2:08:b8:
                    ad:5b:46:26:20:66:58:5d:dc:67:2c:19:fb:f4:82:
                    a3:9f:d5:41:33:41:ca:34:4f:86:50:60:63:5e:1f:
                    11:e5:d8:0a:57:c4:e5:a1:21:a8:df:66:24:75:57:
                    a7:15:e6:b7:e2:67:0a:30:de:2a:b7:f4:ad:86:df:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AD:E2:C8:5A:89:B0:0D:11:7B:68:0C:A5:78:CD:B5:26:F8:BC:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/658d4b54-37a5-3db1-8aa0-8b2d91d6e9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.152.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:81:ae:cb:1a:20:65:39:b0:4f:3d:63:d1:8a:85:cb:83:1c:
         5d:3c:fe:f4:06:f8:9e:86:21:58:a5:18:e7:9b:e2:30:4f:34:
         60:8e:7b:80:c8:d4:45:8f:0e:91:f4:e3:bc:6b:1a:50:8f:59:
         57:d9:8a:53:e2:86:c3:84:85:72:a5:95:7a:52:ba:84:2f:d5:
         c8:76:f0:79:31:7c:85:1c:07:ce:fe:42:61:af:da:ba:8b:09:
         2f:ce:27:d4:61:6f:8b:16:35:6c:95:cd:41:32:c5:cd:28:00:
         bb:78:74:de:9a:fa:ad:4b:21:d2:08:ae:37:75:78:3d:dc:56:
         a1:55:31:0e:00:9e:c4:48:14:44:0b:b3:e5:d4:7a:a1:26:f6:
         18:fb:d8:91:8f:3e:90:21:cf:b4:88:08:fe:0d:c0:51:6e:0d:
         c1:05:e7:8a:01:83:ea:f0:19:8a:90:59:fd:8c:2a:6b:36:d5:
         63:b8:bc:3e:4d:08:41:5a:3f:c2:92:66:85:83:16:d1:bb:db:
         72:e5:1d:e8:fa:93:27:52:3a:d4:c6:b4:22:ff:01:ef:5b:b9:
         bb:c6:80:cf:b0:56:37:e4:b2:cb:9e:a1:7e:1c:fe:75:5f:f7:
         93:88:3b:49:a7:d1:95:f6:1f:13:ed:2a:8f:fe:c1:ec:d2:04:
         87:df:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:23:21 2026 by rpki-client