Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa
File:                     56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa (raw, json)
Hash identifier:          BdyiQyQ4a9SJMLKirTYTmcCkCVIwPT7pYpF+jv3rq1c=
Subject key identifier:   5C:84:1B:6C:E2:6B:4C:E6:D6:86:E6:BC:FB:B1:2F:F8:A0:F6:8F:FB
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584CDDCCF480D0D42D1C3BE63A00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     3477
IP address blocks:        192.58.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f4:80:d0:d4:2d:1c:3b:e6:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=946a879b-46d0-4597-b100-05b4b64787f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:64:e8:83:5a:be:57:cb:9e:33:56:54:3f:48:
                    ca:4c:bd:b4:44:17:0e:6d:3e:cc:f3:95:52:bd:ed:
                    1d:db:9a:6a:07:78:2d:06:e4:00:aa:a0:79:30:75:
                    d0:9e:26:94:b5:2b:02:fe:f3:1a:c0:43:38:20:ad:
                    6b:d1:99:a8:37:21:7b:3c:8c:b2:ef:df:f6:0b:6f:
                    a3:0b:90:89:3a:a4:54:fe:f4:e3:a6:26:74:f3:a7:
                    d7:10:08:ef:ad:fa:3c:59:dc:de:88:50:6e:84:08:
                    dc:e3:da:3e:4c:fb:e1:d2:28:3e:34:08:ab:58:57:
                    db:47:d3:98:23:34:16:d9:f5:7f:89:06:0c:cf:d3:
                    93:7a:88:61:9e:9b:d4:1c:90:bd:64:e9:0a:c8:74:
                    17:9e:70:12:93:d2:9d:2a:ae:68:2f:8d:18:2f:61:
                    42:51:07:05:05:3e:59:43:43:e4:74:fb:7d:62:83:
                    92:09:d0:3f:f0:c2:c5:16:b9:5b:5c:18:6a:a4:89:
                    27:1c:82:e6:bf:7a:72:b2:82:8d:83:f5:91:17:e3:
                    14:24:a7:6a:f7:80:02:5f:d9:bb:bf:3f:09:48:11:
                    f2:ae:39:22:50:66:3c:18:51:d1:a6:ea:5e:29:5e:
                    3e:fb:46:fc:00:dd:0e:15:16:4e:07:b4:9e:8e:ec:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:1B:6C:E2:6B:4C:E6:D6:86:E6:BC:FB:B1:2F:F8:A0:F6:8F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/56441bb8-aac2-3cdc-b31b-0e8486fb7da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:aa:97:33:40:56:8e:1c:31:e4:1c:d6:d2:3b:0b:4f:4a:
         68:fc:6f:b5:dd:5a:34:60:c1:dd:3b:50:54:1f:5f:ec:86:a1:
         39:18:52:73:23:6a:d8:7f:0b:2d:33:44:2c:56:fa:2c:3f:01:
         0a:8a:cd:9a:ae:6a:35:19:a9:bf:6f:46:4d:7e:97:5a:0a:e5:
         19:0d:e0:35:9a:39:dd:ab:f3:c0:86:9b:33:28:d3:fd:80:0d:
         6e:05:c4:fc:b7:cf:f6:8c:27:da:3a:e3:ce:7a:59:f9:37:b3:
         ee:2c:37:34:73:ca:de:c5:4a:59:48:50:ea:ab:aa:34:a8:e7:
         d8:02:64:0a:9a:3a:59:2b:5b:da:69:9b:68:17:4d:b1:5a:3d:
         c8:13:c5:1d:0e:c8:d6:57:79:8f:ba:5a:81:0b:d4:9d:19:38:
         b2:39:a1:7d:1c:3c:6f:e1:e6:c0:7c:74:a7:b3:46:6a:20:60:
         5c:5f:ec:68:b5:b4:04:67:d3:ec:6f:c4:08:33:2e:84:a2:81:
         90:6d:f2:5e:38:d5:40:7d:31:7f:73:30:91:c1:10:90:33:e3:
         ff:e4:f0:cc:f8:75:18:28:23:e6:7e:24:4f:a5:1f:dc:63:5d:
         e4:68:85:cc:7c:61:00:d5:f8:c8:21:4d:18:93:73:77:0e:2a:
         bb:c3:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:39 2026 by rpki-client