Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1dabdef9-f02f-3ae3-8244-e9933c4663eb.roa
File:                     1dabdef9-f02f-3ae3-8244-e9933c4663eb.roa (raw, json)
Hash identifier:          7XyIp3gi4uxeZhYWQtLuf6/RpVfHcf9CcQvraO7zN5w=
Subject key identifier:   C5:BD:EC:BA:63:CA:DE:F1:05:01:B3:5E:52:9D:7A:00:78:87:9F:49
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584F5E62DD6C8958F1CED1A96800
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1dabdef9-f02f-3ae3-8244-e9933c4663eb.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     14618
IP address blocks:        137.175.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:dd:6c:89:58:f1:ce:d1:a9:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=1fa3e6ca-733d-4c0f-9e12-f6b5638a9cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:18:80:8d:53:e2:d7:cd:cf:86:20:1d:38:
                    64:94:b6:40:c2:57:03:19:72:dc:85:b4:8a:4d:a1:
                    03:14:cd:68:50:65:a6:88:43:88:7a:6e:58:d7:f6:
                    bd:98:4f:d5:b9:78:98:53:b7:56:a2:5b:6e:91:1e:
                    7b:c8:d9:58:7f:0c:f8:16:6e:11:1f:33:2e:7f:0f:
                    7a:df:a5:33:a1:77:47:ed:3e:d3:56:60:fc:ee:aa:
                    19:06:90:2e:67:b4:ab:f4:e1:76:57:22:27:65:20:
                    6f:fe:a5:24:16:7c:db:dc:8f:66:e4:8b:2a:46:3e:
                    ff:28:09:53:59:3d:13:20:0e:ae:17:a3:58:aa:c9:
                    c7:f4:c4:37:76:fe:27:71:9a:e8:1f:53:28:d2:24:
                    0c:9c:52:8e:91:5c:2a:a7:fd:1a:cd:9a:aa:6f:e8:
                    8c:7f:95:14:23:42:2f:7b:df:23:14:b8:92:2f:f6:
                    92:a9:a1:7a:a0:7f:51:18:11:67:af:39:2d:f3:63:
                    95:51:41:f2:24:e0:e7:3b:5d:9d:a4:71:a6:dc:a2:
                    63:8a:40:22:7c:54:cd:7c:65:08:3f:e7:7c:80:11:
                    86:97:49:0f:ba:af:a9:d0:eb:27:97:b7:4b:df:a9:
                    19:65:6f:57:f7:d4:41:6d:f6:af:a2:49:01:16:57:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BD:EC:BA:63:CA:DE:F1:05:01:B3:5E:52:9D:7A:00:78:87:9F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1dabdef9-f02f-3ae3-8244-e9933c4663eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.175.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:76:bc:a1:06:ce:0c:70:ec:bd:d0:01:5e:56:ca:89:5d:df:
         67:c0:46:0f:93:20:5c:4c:df:8a:79:c7:ff:51:64:38:3b:f1:
         c4:ce:e7:11:b0:32:da:5b:9b:2f:a1:cb:57:b6:f2:62:82:77:
         b4:ab:01:11:66:9d:ca:80:d7:c5:30:78:4b:5f:57:cc:19:01:
         ca:b6:48:c6:dc:01:55:b9:8f:69:cc:93:aa:bc:05:0d:d4:50:
         ba:8e:57:b7:30:c0:d1:44:ff:45:c6:2e:1c:dc:4a:6c:ff:34:
         17:cf:f9:35:28:9e:c6:ab:54:df:e8:98:55:5b:43:f2:fd:0b:
         40:31:98:cc:45:aa:dc:95:69:b2:ca:38:96:16:1f:aa:2d:81:
         29:5a:79:e3:76:96:b9:0d:08:ad:69:92:07:c4:a6:6e:44:e2:
         22:27:a6:e3:1e:df:29:5c:40:aa:47:d7:cb:3c:dd:86:57:22:
         64:a3:b4:cf:66:32:b0:6f:98:d6:2d:f5:08:8a:e9:c8:38:52:
         a6:47:34:68:67:e5:6a:ba:13:43:e2:41:2a:15:cb:c6:fc:4c:
         2d:40:f7:ee:73:e8:b2:c3:43:d7:89:f2:e6:f8:03:c3:d3:08:
         a7:df:fc:20:39:92:99:0b:72:79:c4:36:ae:d0:f8:3c:f3:17:
         ca:7d:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:39:13 2026 by rpki-client