Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa
File:                     5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa (raw, json)
Hash identifier:          Zo0hRjz64nSgyFNHp0Soh0QFa2Ta+qAEwSFDPSKiS6o=
Subject key identifier:   A0:8D:9C:B2:67:26:60:FE:D4:DD:91:1B:2B:30:89:8F:61:BB:72:67
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584D55BA48BC09919827969E8E60
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     3477
IP address blocks:        192.153.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:48:bc:09:91:98:27:96:9e:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=3fce077f-e7bd-4ea3-a6b3-e1e522d1f6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:c6:e2:67:a5:06:c5:4e:56:0d:30:22:9c:
                    e6:e8:f5:24:d7:42:c0:90:e3:b0:ca:25:14:25:ac:
                    68:b3:b0:5c:4a:36:e4:ff:62:36:ae:ac:f1:01:78:
                    00:17:36:6d:5d:d8:44:8e:74:95:78:e0:c0:f6:da:
                    75:41:12:63:30:a5:f6:4c:88:af:a4:0f:67:de:7d:
                    1d:db:17:5c:b3:fb:fc:f7:6a:ed:3a:99:f4:f4:e5:
                    ae:a2:be:78:df:13:06:4f:6b:ee:7e:cf:ae:b2:5e:
                    49:83:d8:31:8c:72:ae:bc:91:1b:d0:66:19:ac:a2:
                    95:80:78:03:f2:5b:01:98:e6:af:86:51:4b:fc:1d:
                    79:27:e3:32:3b:2d:4a:84:98:86:1f:51:a6:d2:51:
                    da:2f:71:05:d4:70:65:4f:93:d6:a3:32:16:cf:da:
                    34:4e:3f:de:68:3c:55:1b:44:32:80:80:20:56:2d:
                    0f:9d:d4:b8:8a:0d:89:79:7e:85:6b:07:da:06:97:
                    5b:2b:40:f8:7e:18:e8:87:62:54:ce:74:0f:80:87:
                    d0:99:6b:1e:a4:f1:a4:53:d5:76:dc:d9:72:f5:0d:
                    2d:8f:c9:80:8d:88:05:26:61:7b:bd:15:df:5c:dc:
                    0e:87:02:14:dd:58:9a:a8:8e:01:a4:68:1e:78:f4:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8D:9C:B2:67:26:60:FE:D4:DD:91:1B:2B:30:89:8F:61:BB:72:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5d0010c5-d69c-3d30-bc61-dcaac5579e0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:10:d8:c8:4c:75:8b:59:d0:00:44:82:fa:be:c0:db:b7:f8:
         7a:eb:57:08:1b:14:b4:28:87:12:ab:82:68:f8:f9:d8:87:63:
         69:47:c9:4e:65:3d:68:0b:ce:29:f4:6e:13:bf:c3:6d:f9:c1:
         09:1e:95:78:98:41:a8:2b:75:8f:94:90:81:50:88:3e:52:1d:
         c8:35:ef:f9:aa:bd:c6:eb:62:fa:1a:6b:86:ce:33:68:27:e7:
         3d:63:e0:87:8a:de:76:3a:b2:1f:01:f9:5a:2d:fc:c1:12:c8:
         b0:f7:04:0c:37:17:1f:d2:c8:0b:d0:f6:eb:0a:17:3f:f2:24:
         8d:40:b2:28:61:55:b0:97:d7:0c:3a:8b:79:fc:c5:8f:3d:0a:
         ff:c2:f0:58:80:d5:42:ed:25:6f:bf:20:bb:c8:6f:c8:c7:f7:
         94:38:14:e7:c7:90:9d:85:64:22:f5:eb:ad:b8:52:af:2d:d5:
         a5:c6:02:5c:07:8e:66:e1:f8:b7:0b:b5:5a:ef:52:db:7f:d1:
         cc:af:84:db:3f:80:50:33:3a:f6:6b:ae:a3:07:87:99:05:20:
         a1:5b:20:ff:82:8b:45:43:03:01:fe:bc:30:20:9a:fd:06:3c:
         b0:bb:8f:b6:8f:73:d6:6c:d0:ba:32:06:24:d3:f0:fe:4c:5a:
         88:eb:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:56:18 2026 by rpki-client