Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa
File:                     a8e77fbf-65a9-3d56-9ef5-046562143f67.roa (raw, json)
Hash identifier:          Na5a/8HyYSoyBEPwUYjGHeC5SpVLcPjZnhzIU573fp0=
Subject key identifier:   A2:58:0B:77:85:D0:FD:F3:C8:DA:E6:F4:EA:F0:42:5B:89:5C:78:A9
Certificate issuer:       /CN=0a387fbb-813d-452e-8a43-3425e95bbecc
Certificate serial:       010D0C9F4328584D89D10628B2908F80A498ECC0
Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa
Signing time:             Fri 17 Apr 2026 16:48:29 +0000
ROA not before:           Fri 17 Apr 2026 16:48:29 +0000
ROA not after:            Thu 16 Jul 2026 16:48:29 +0000
asID:                     401333
IP address blocks:        75.98.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:d1:06:28:b2:90:8f:80:a4:98:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc
        Validity
            Not Before: Apr 17 16:48:29 2026 GMT
            Not After : Jul 16 16:48:29 2026 GMT
        Subject: CN=b7ab837e-be16-4c5b-90e7-edb2fe55060e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:79:0e:f1:77:0c:f4:38:a5:b2:c6:64:2b:
                    0e:b2:dd:88:34:66:68:79:36:77:73:18:4a:05:07:
                    b1:e0:e6:d8:df:8c:32:be:0f:d7:66:b7:cb:19:e7:
                    94:e3:e7:f5:91:e7:fe:81:85:f8:78:27:d0:fe:20:
                    a2:71:b2:2c:85:d2:7f:c5:53:0b:17:e8:3b:94:ff:
                    10:f3:d4:2e:d9:ef:98:77:c0:39:68:83:6f:ca:d4:
                    f6:55:9b:00:0e:01:32:5b:e5:0f:29:85:f2:d0:5e:
                    9f:dc:70:97:b2:c0:0f:ad:28:ef:a8:d7:2f:ab:35:
                    9a:89:cc:3f:cf:bd:9f:76:c4:86:10:af:ec:dc:b5:
                    c5:3f:66:ad:7d:e0:78:3c:2d:81:03:f2:5f:59:94:
                    64:28:35:7a:08:44:b2:af:04:90:d6:5c:1c:68:06:
                    b3:e8:d2:26:81:a8:81:cb:e3:73:db:28:ce:41:dc:
                    7f:48:7d:31:2b:7e:2d:cb:c1:ee:52:bb:9a:df:17:
                    da:8d:61:04:56:27:c1:23:d0:11:53:aa:ab:55:5b:
                    20:90:a4:7b:28:91:54:f7:94:a2:e0:72:60:f4:52:
                    2e:a5:40:e0:79:9b:38:72:6f:71:8a:7e:97:13:21:
                    09:a7:bf:a5:7c:89:5e:11:64:c9:99:a2:00:5a:30:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:0B:77:85:D0:FD:F3:C8:DA:E6:F4:EA:F0:42:5B:89:5C:78:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/a8e77fbf-65a9-3d56-9ef5-046562143f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:44:3c:b6:eb:83:48:73:00:f7:e0:06:e7:12:66:bb:2c:2c:
         6d:fe:21:b6:08:bd:9d:a4:f4:c4:5c:aa:3d:f6:6a:82:a0:82:
         bb:2a:e3:7c:da:fc:b6:66:a7:5f:73:a0:40:8c:01:c4:2e:2f:
         b9:84:ab:f4:c8:82:72:ae:d6:c8:d3:cf:a2:e0:62:71:a5:fe:
         0f:c9:b1:d2:5d:f7:1a:f9:f7:c8:d8:50:81:ea:be:24:41:80:
         e0:66:d6:d6:31:92:3f:b5:db:1b:e6:57:79:0d:c4:33:d8:55:
         43:ba:c4:23:3a:60:7d:92:b0:e5:05:5b:26:11:ee:0d:3b:e0:
         29:94:90:f1:89:51:48:36:3a:81:02:73:b6:d3:3c:e8:3f:79:
         c6:4c:4e:35:b2:76:58:23:d0:27:6f:75:89:cc:fa:57:f0:51:
         77:32:45:d1:c5:1c:c2:4d:29:b3:06:94:5f:2f:c4:93:23:d6:
         7a:8d:16:59:72:de:fc:61:83:ad:11:77:fe:4e:42:46:61:fb:
         67:e5:4d:ca:13:bd:8b:56:93:fc:ac:38:0c:93:e4:ea:70:e3:
         7a:99:5d:78:f8:de:c5:58:3c:d1:dc:3e:2d:23:1f:78:a4:c2:
         52:71:3a:9b:6f:14:79:67:0b:03:a0:dd:2a:36:ee:c6:d3:6e:
         4b:a5:fb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:04 2026 by rpki-client