Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/b75e9789-d89d-3bf9-833d-1c8d79b74f60.roa
File:                     b75e9789-d89d-3bf9-833d-1c8d79b74f60.roa (raw, json)
Hash identifier:          hfs3jXGJASsFny7hyiudQ9mEKz94UAFp2QMrcapYHA4=
Subject key identifier:   C2:7D:D7:08:FB:DA:2E:69:FB:CF:E3:6C:31:F1:F6:7F:B0:4F:C4:BF
Certificate issuer:       /CN=97ba4c39-c242-4d94-905d-4f71d6178f79
Certificate serial:       010D0C9F4328584D91C0202F2A046F18C31A7800
Authority key identifier: A9:FF:FA:20:07:D8:F7:04:33:B2:3B:A8:35:44:31:F7:BA:6C:06:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/b75e9789-d89d-3bf9-833d-1c8d79b74f60.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     8075
IP address blocks:        162.253.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/97ba4c39-c242-4d94-905d-4f71d6178f79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/97ba4c39-c242-4d94-905d-4f71d6178f79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:20:2f:2a:04:6f:18:c3:1a:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ba4c39-c242-4d94-905d-4f71d6178f79
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=bd5c94b9-5307-4653-8030-92fe9e6377fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:96:16:0c:ac:f8:d8:d0:a6:b2:7f:53:db:
                    f2:dc:a1:db:d5:38:c8:02:0c:a6:4b:30:ab:88:fb:
                    68:1a:9a:00:40:9c:fd:50:a2:7c:b9:d2:ab:60:59:
                    f6:ad:be:d3:9b:b8:e2:88:6a:ca:26:57:92:82:94:
                    8f:18:23:23:fd:08:0d:7a:5c:ce:c0:ca:1a:a7:47:
                    49:6a:54:20:22:d1:dc:2e:d1:2a:23:4b:e8:73:e8:
                    8d:2e:44:8c:1e:42:40:51:ed:3e:24:03:d0:4b:63:
                    3c:6b:d1:92:18:de:a3:00:43:2a:ae:5a:1c:4e:2e:
                    d4:9a:8b:ea:d2:a8:95:a7:9e:8f:8c:f4:97:36:fa:
                    b7:a9:4d:39:eb:98:2b:2b:68:c8:32:47:6b:c9:28:
                    11:cf:84:12:26:74:fe:ae:b2:cc:4c:7e:58:f2:c1:
                    91:b2:7a:e8:e9:5b:62:cd:a2:95:af:13:11:36:ef:
                    fd:f7:81:4a:96:49:f0:9e:b6:9e:2c:55:4b:85:1b:
                    94:a5:5b:07:42:10:f9:58:44:56:88:ad:67:c4:63:
                    1a:4a:60:8a:af:55:b6:a3:c1:7a:95:02:ed:bf:3e:
                    18:67:1b:9f:39:06:8a:49:f6:cd:0a:9a:c4:54:46:
                    6c:37:a3:de:a5:a8:31:e0:6e:dc:18:be:55:89:36:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:D7:08:FB:DA:2E:69:FB:CF:E3:6C:31:F1:F6:7F:B0:4F:C4:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/b75e9789-d89d-3bf9-833d-1c8d79b74f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/97ba4c39-c242-4d94-905d-4f71d6178f79.crl

            X509v3 Authority Key Identifier:
                keyid:A9:FF:FA:20:07:D8:F7:04:33:B2:3B:A8:35:44:31:F7:BA:6C:06:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:16:61:1e:94:54:75:6d:79:13:99:2d:ff:3a:0c:6a:b3:
         b1:07:57:bb:56:1a:7f:d4:0b:4c:b9:1e:69:ed:78:c8:eb:4f:
         36:ef:b1:58:c2:3c:a7:c2:f1:74:fd:5c:64:17:98:a8:bf:b4:
         ba:b8:52:53:ce:86:2f:c2:e7:2f:5a:cb:7b:85:a1:2c:0a:63:
         b8:ce:fe:ea:22:71:41:cb:33:88:ef:2b:b9:1e:ea:68:db:c6:
         31:65:2d:dd:96:6e:ba:f5:80:05:85:78:c5:ae:4f:61:77:85:
         99:47:f2:34:3b:a2:42:cc:e2:c4:79:5e:f1:68:82:8d:01:02:
         f0:fd:00:9c:74:91:0f:34:fe:a1:4e:50:71:7f:3f:d0:07:c7:
         74:da:29:66:bc:a4:6a:67:0b:c6:53:f5:92:9e:c4:e5:f9:e6:
         7d:29:8f:83:28:62:bc:8d:fb:7e:5c:47:04:2a:cd:1f:f9:62:
         d5:ee:b1:eb:2e:e8:bf:61:09:95:fe:e0:fa:b1:26:41:fe:83:
         39:1f:08:18:ab:c3:37:47:ef:59:63:9a:d3:1d:2a:33:e6:42:
         11:dc:df:6a:88:b3:a4:85:41:ae:62:ac:73:8f:6a:2b:e2:4e:
         b0:d6:83:3c:1d:23:09:64:93:d7:4c:96:6a:14:70:66:6c:cd:
         c5:a5:60:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:25 2026 by rpki-client