Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa
File:                     2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa (raw, json)
Hash identifier:          xD9H1YC37nlITld3no0ks/o+2MSntThOt7Ofo/BQoxs=
Subject key identifier:   1A:B3:62:72:8C:23:88:14:CF:09:B4:46:BC:B4:91:49:70:7D:9A:3A
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584CD407651BA058C991E9EF8100
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     0
IP address blocks:        192.129.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:65:1b:a0:58:c9:91:e9:ef:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=318c97f8-40e5-474c-8dfe-504293767d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:ca:bd:31:80:ca:44:f4:6a:36:03:82:48:
                    88:bd:bb:b3:20:a0:c7:ab:24:7e:7c:75:da:d6:ea:
                    53:79:49:0e:11:81:7a:75:3a:d3:ca:ae:ca:e8:d0:
                    2d:5f:4e:03:ce:3c:a3:94:fa:67:6b:14:08:63:b8:
                    99:22:57:48:d9:21:a6:c1:77:c7:13:55:67:03:6b:
                    a6:7c:66:f5:6d:7c:cc:31:28:a3:a4:49:b5:81:cc:
                    b7:99:09:10:de:0c:4b:d0:44:5b:60:31:97:e4:ee:
                    74:30:0a:76:ed:88:b2:94:48:91:95:96:22:14:38:
                    d5:dc:7b:a3:f5:3a:20:d3:23:c9:b2:94:89:33:b5:
                    fb:b2:84:dc:49:12:dd:2f:f4:81:ea:f3:ea:e6:41:
                    77:49:eb:0f:be:24:f3:22:3c:23:83:49:7a:18:06:
                    8b:14:06:c8:43:17:92:e0:0a:b8:24:56:95:91:dc:
                    34:59:40:a5:de:77:c5:8f:7a:09:2c:d3:8c:2d:db:
                    09:da:9f:44:43:2c:29:e6:e7:dc:a4:b9:35:fa:20:
                    ff:08:46:8a:c3:bf:2a:c5:e9:35:69:8b:43:e0:46:
                    f5:da:e0:91:2f:7c:83:92:c4:1d:6c:70:e2:5e:d8:
                    ef:ec:93:6b:d2:b5:c1:c0:15:fd:35:59:53:1f:f5:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B3:62:72:8C:23:88:14:CF:09:B4:46:BC:B4:91:49:70:7D:9A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/2a0d1dff-0975-31cf-9bcb-b0d087409a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.129.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:b5:69:39:0e:a5:5d:87:70:28:1a:a9:c2:91:5e:5e:19:
         4d:44:c8:3b:74:3a:85:e0:89:ae:35:55:a1:f1:ab:08:9d:0d:
         75:d9:dc:28:c2:03:fe:6c:f5:97:2b:b6:84:5a:46:11:3a:ba:
         5e:9a:fb:00:8a:71:99:6e:a6:cf:58:dd:90:68:73:73:0f:aa:
         27:e9:87:c1:ed:61:b7:c8:df:d3:3d:2a:05:17:94:1f:f5:0b:
         eb:1c:7c:f0:dd:75:76:12:90:d8:9b:08:d0:0c:db:a1:fe:1b:
         7d:b8:99:83:5e:92:31:32:66:25:67:60:65:19:c2:71:30:d8:
         0d:f5:75:92:5d:f7:17:2b:b2:a7:12:98:d4:06:85:df:27:d5:
         3a:45:4b:35:ee:86:71:e2:50:23:2c:4f:0a:25:40:d1:19:4e:
         7e:a9:2e:57:78:f3:1a:21:07:be:07:77:95:af:09:b8:31:fb:
         16:83:63:67:44:2a:cb:1a:ea:1b:89:2d:8f:93:0c:7a:7c:93:
         8e:c2:56:b5:7b:36:89:92:53:8e:47:d2:8e:1a:24:20:46:12:
         3a:a3:b3:8d:79:60:93:59:d3:f4:be:99:5e:c8:ac:43:a3:aa:
         2f:46:25:ef:31:b1:7a:14:9f:cb:37:a3:e2:8a:cd:d7:3a:fe:
         e5:62:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:53 2026 by rpki-client