Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/54c7a6df-589e-3891-ab59-373d49a0a752.roa
File:                     54c7a6df-589e-3891-ab59-373d49a0a752.roa (raw, json)
Hash identifier:          XZG94kuHOXaZtTbCmjsEa1505+fbM1DIz1TQZEBwPaQ=
Subject key identifier:   00:C1:BC:12:0B:A2:19:DF:C5:A7:2B:92:71:D4:8E:24:BC:7D:8A:3E
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584D571F920B2E35753434061940
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/54c7a6df-589e-3891-ab59-373d49a0a752.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     3477
IP address blocks:        192.35.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:92:0b:2e:35:75:34:34:06:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=7aec3c60-a1dd-43f2-8129-a1c19188bbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:03:ea:db:f8:38:64:1d:57:67:ae:e2:a7:
                    da:f2:c1:36:37:a1:93:18:2b:50:63:63:e8:82:51:
                    42:9f:a5:27:f3:a8:b2:6f:ed:00:2a:8c:52:41:a8:
                    0c:c2:e4:61:0c:ca:00:49:81:27:15:77:8b:a1:a2:
                    76:63:9d:20:40:6a:98:59:00:18:30:ee:86:2e:25:
                    70:d8:0d:ed:25:c2:b5:9c:cf:58:5e:9a:4f:0a:60:
                    48:ef:cc:a6:04:f0:75:b2:cf:72:4f:47:3b:d1:a4:
                    3f:15:a0:7a:07:54:01:0f:12:68:2d:28:17:e8:4a:
                    16:b1:fa:f2:3c:9b:74:4a:6b:c1:6f:b6:04:77:9f:
                    94:a4:a0:9e:de:65:8e:70:1c:42:bb:5d:99:44:4a:
                    9b:00:02:3c:08:35:33:87:97:60:b4:05:66:d2:65:
                    bf:13:0f:57:c5:3c:a4:81:6b:87:6c:0e:14:f3:62:
                    ce:78:1f:cf:54:29:52:99:8c:4a:e0:a2:65:bc:91:
                    ef:cc:60:79:1f:65:bd:d9:1a:b7:33:43:f2:6a:95:
                    a7:b6:45:6d:50:45:82:ae:97:1d:6a:a7:80:97:b7:
                    3a:31:00:05:54:f2:13:ef:3c:ea:a8:92:3f:0f:53:
                    e0:b4:21:61:ae:08:e4:a8:5d:f2:af:f4:ce:bb:09:
                    48:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C1:BC:12:0B:A2:19:DF:C5:A7:2B:92:71:D4:8E:24:BC:7D:8A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/54c7a6df-589e-3891-ab59-373d49a0a752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:59:8f:72:55:30:2b:ec:43:e8:e1:3a:4c:e6:9c:84:0e:
         fd:de:98:99:73:a5:86:47:23:cf:98:3d:4f:dc:34:fe:7c:79:
         8b:bc:ca:00:65:13:69:bb:33:82:5c:c4:56:8e:cd:a4:00:15:
         d4:f3:9f:5e:0b:e3:7d:fd:f9:78:63:b0:69:dc:69:ac:18:33:
         d8:1a:06:ed:80:4a:bc:c4:12:17:cc:44:54:9f:3b:e9:4a:57:
         ea:4f:e7:a3:c0:ef:d1:4f:a1:fd:39:6f:58:5d:0b:72:41:88:
         6a:09:3b:8c:54:84:10:01:9a:ce:93:bf:3f:63:f5:3e:fb:80:
         be:46:d1:62:39:21:5b:2e:ba:df:9d:6a:b5:e0:0c:a0:c3:69:
         27:bd:ec:e9:4f:07:45:9f:c2:9b:44:1b:e0:89:bf:ff:87:75:
         7d:18:39:b2:4f:1e:df:72:8a:d0:8f:d6:e9:9a:01:91:83:fc:
         c1:35:85:86:3b:d0:35:b3:ef:72:2e:d7:95:5b:21:39:8a:d4:
         e2:0a:ab:b4:39:35:af:89:57:d7:63:2a:c3:bd:06:6c:db:a3:
         5a:f2:13:8b:f5:8f:8b:8c:51:aa:43:19:f2:be:a2:ea:93:c8:
         bc:a3:de:0d:25:69:be:ed:73:47:eb:17:a8:76:06:84:e6:a5:
         01:0d:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:06:04 2026 by rpki-client