Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/599bc078-5d3b-3144-ac9b-d5cec72f4062.roa
File:                     599bc078-5d3b-3144-ac9b-d5cec72f4062.roa (raw, json)
Hash identifier:          dRvxeEi/0IgPrcMIjLUNYgxbImrqDqDec6tx7YgcOIg=
Subject key identifier:   C1:68:B7:80:15:61:DA:F3:6D:6C:76:43:C9:BE:60:F2:A7:89:37:90
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E9EAFE575A745972611C58640
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/599bc078-5d3b-3144-ac9b-d5cec72f4062.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     0
IP address blocks:        192.67.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e5:75:a7:45:97:26:11:c5:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=2d9cb667-c19a-4fbc-8a7c-86bb6e7f2bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e0:01:e6:ee:59:3f:2b:b0:27:00:c6:7c:d8:
                    dd:3d:8d:ef:63:f5:ac:84:73:cb:79:8f:e5:7d:8a:
                    72:fe:da:8a:c2:cd:7e:32:5a:b4:e4:c2:a5:e6:2a:
                    b1:84:98:83:b1:e3:07:e0:60:81:ea:bc:e5:bb:5c:
                    7d:de:63:5d:60:1b:50:a0:a6:e7:d3:f2:5e:c7:b3:
                    07:14:6d:e5:2d:34:57:93:1d:84:2c:5b:af:64:8d:
                    60:6a:79:1a:bd:ff:37:f0:5b:79:15:d6:ba:fb:7a:
                    10:31:b8:61:31:98:fc:c3:56:f3:2e:1c:ef:af:f1:
                    b6:39:57:9b:90:40:3b:8d:37:31:0a:a1:29:35:c7:
                    eb:6c:70:b9:b9:db:33:87:56:92:ed:bf:57:e5:7b:
                    16:77:ec:c8:61:57:ad:e2:ec:00:37:34:1c:76:b3:
                    24:2c:3e:eb:6b:15:48:c3:ad:4f:7d:f3:29:18:86:
                    35:65:40:cf:c9:f4:d2:ea:d8:26:55:8b:12:2b:6b:
                    3e:ca:bf:8a:b4:ce:30:95:12:13:85:04:92:31:b9:
                    ea:3c:88:a6:97:cd:c8:00:d6:0a:4d:2b:5e:54:e0:
                    fc:c6:eb:80:a5:b4:40:31:83:11:6b:34:3b:0f:41:
                    f9:ee:f1:3c:1b:b0:25:81:01:fb:54:cd:00:b3:60:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:B7:80:15:61:DA:F3:6D:6C:76:43:C9:BE:60:F2:A7:89:37:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/599bc078-5d3b-3144-ac9b-d5cec72f4062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:75:54:e9:9d:0f:49:70:2c:cb:49:35:4d:74:a9:da:a1:
         04:c9:b7:69:5c:30:64:c6:a5:4d:1e:cb:67:a5:b6:3a:43:81:
         ea:8d:f7:9b:db:34:cd:49:0e:b9:2d:a2:c4:f7:c8:9b:d8:ec:
         63:73:b9:b2:30:62:10:70:0e:40:4d:0a:ef:7a:cd:93:48:71:
         d1:11:77:83:2f:df:75:97:ef:be:7d:7b:69:a8:20:ce:cc:1a:
         22:d6:a8:e4:40:fe:3c:33:2d:bc:0d:85:28:8b:09:2f:0f:07:
         a8:72:ee:9e:a2:8d:2a:ac:28:ef:11:11:b0:e1:bf:76:9f:f7:
         66:2a:18:28:55:9a:70:c4:0b:97:39:d4:13:1f:4a:d9:f9:8b:
         89:42:88:5d:b7:48:e1:a5:f7:3b:0b:cc:ee:8e:a4:89:f2:61:
         82:52:50:8b:2d:7f:f9:7e:d2:7d:5a:2c:7d:03:60:8e:d4:d3:
         ff:f5:f3:b3:f3:07:2c:6f:a1:22:dc:0c:03:ce:44:c2:bf:fa:
         0e:fc:d9:de:35:ff:e2:18:db:0e:24:2d:71:d0:92:19:74:e1:
         b3:3c:84:fd:06:1f:2b:11:96:6a:76:86:6f:58:a2:fe:5b:bd:
         37:ab:a1:e5:ac:14:26:06:e6:3e:07:0f:f8:91:8a:ea:04:b5:
         c9:c6:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:47:18 2026 by rpki-client