Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/faf68898-e2f0-315d-81b6-c00975b047e1.roa
File:                     faf68898-e2f0-315d-81b6-c00975b047e1.roa (raw, json)
Hash identifier:          8Cz0+quj6SyOtr+YdptAQt6GstYiQZH2ME+Pe4PmX5U=
Subject key identifier:   50:D6:90:81:04:BF:3D:D6:BD:3A:0E:A5:FA:36:BE:BD:B7:2F:7B:93
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFBD0CD5B5B14802D40100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/faf68898-e2f0-315d-81b6-c00975b047e1.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        75.112.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:bd:0c:d5:b5:b1:48:02:d4:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=8ad12fc5-e205-4d1c-8b27-deb3c6776a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:b0:0c:da:82:20:d8:de:7f:83:ca:6a:00:
                    2b:4c:66:be:e8:94:65:ca:e2:27:8c:ea:54:35:9a:
                    6d:a3:28:60:9c:8e:3b:a8:48:82:25:6c:61:db:cb:
                    20:3b:fd:d9:cd:d9:88:f3:bb:66:e1:b2:d4:86:33:
                    f8:55:c4:d8:f1:64:20:65:a1:93:ee:e3:53:35:06:
                    0a:30:db:63:c7:49:c1:0c:0b:2d:30:c1:b8:df:3c:
                    0c:bb:0f:4c:81:37:a1:c3:b5:0a:10:fe:90:f9:d3:
                    75:ef:f7:f3:b4:7d:2b:89:f7:d4:bf:72:c8:26:33:
                    73:c2:b0:5a:2a:97:37:7a:ce:c0:65:fd:19:97:82:
                    a4:9e:b5:3c:36:5e:43:49:5a:71:7d:e0:29:14:0d:
                    4f:e8:ff:5c:14:df:0b:38:db:24:ea:33:55:19:4d:
                    7a:f1:f1:a8:fd:7a:44:ea:5a:a0:5a:63:3a:57:b7:
                    38:ff:bb:42:2c:00:ed:30:ce:ed:37:4d:7a:45:d0:
                    5d:7b:5f:00:08:f0:b1:18:16:64:0c:80:8a:f7:b3:
                    70:0b:61:55:9e:05:88:ae:a0:0d:95:48:5d:fc:28:
                    f5:54:f9:56:e4:ea:dd:be:9e:27:a1:de:bb:6e:3a:
                    ef:ec:bc:e0:db:b5:f3:c6:a8:33:ef:f9:1e:03:1e:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D6:90:81:04:BF:3D:D6:BD:3A:0E:A5:FA:36:BE:BD:B7:2F:7B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/faf68898-e2f0-315d-81b6-c00975b047e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0f:40:cd:0e:b7:9e:c6:1f:e4:17:63:47:be:49:0c:11:a6:
         4c:c9:23:76:ae:1e:4a:0a:ee:1f:a3:5a:18:c9:5c:a6:5f:4e:
         9b:72:77:5e:5c:ea:fa:e3:2f:d3:b1:7e:5b:ac:de:26:b0:ce:
         57:ea:96:0a:f1:67:9a:25:06:0c:65:0e:52:9c:7d:a0:4e:ab:
         9b:ad:ea:c8:78:21:b9:fa:32:53:d3:5d:97:ca:54:54:9f:12:
         60:b0:3f:20:d9:70:84:f2:64:c2:75:38:32:93:1c:05:31:8b:
         87:0f:53:d4:90:4b:95:b6:8d:a4:fe:f7:4e:f8:c5:6b:73:82:
         54:87:32:57:b0:21:42:bb:8f:34:f9:4c:3d:62:d2:81:f2:f0:
         4d:37:fc:1c:8c:96:21:15:f1:41:58:95:19:a3:3b:e9:27:2f:
         b2:41:f3:eb:a4:49:49:fd:61:17:61:af:1f:4f:94:1f:55:66:
         a4:db:c6:99:03:d7:62:e3:37:94:3a:ee:d9:18:8a:ee:3e:01:
         ca:25:16:b9:79:d6:c7:a7:6f:c2:a7:54:e6:cb:e2:67:af:73:
         a5:7b:0d:6f:39:6b:5f:20:f7:55:e7:ea:28:13:57:4d:98:5a:
         cf:7c:3a:6d:cd:58:9a:6e:66:b1:d5:ee:10:5d:e0:89:f1:39:
         e7:53:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:27:41 2026 by rpki-client