Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9053efa6-8692-3060-8397-b262b84bd7f3.roa
File:                     9053efa6-8692-3060-8397-b262b84bd7f3.roa (raw, json)
Hash identifier:          Cvsx03OWi/xfjrS1j2muMDPygZsC0U5zeVMkcLm07UU=
Subject key identifier:   6F:D8:E0:3C:6E:AA:76:B4:21:1A:6F:3D:8A:DD:36:E2:54:57:D6:A2
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584CDDCCEDD38816E974C9E7F770
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9053efa6-8692-3060-8397-b262b84bd7f3.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     0
IP address blocks:        192.58.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:ed:d3:88:16:e9:74:c9:e7:f7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=19597aa9-e120-441f-912a-a920a0cabaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:c6:0d:42:9f:a5:a5:4e:f5:ee:93:6b:d5:
                    79:13:da:f0:4f:a2:1f:a3:1d:a5:96:27:c8:38:6f:
                    8f:44:d0:ac:e9:96:5f:1c:21:2e:4a:08:5c:f8:49:
                    c5:e7:63:d6:c2:30:e7:12:7d:67:b5:27:12:15:0f:
                    cf:40:c0:74:c1:1d:63:4c:4d:d1:35:5c:58:24:32:
                    87:08:c6:b4:82:5a:ae:22:1b:69:6b:74:a9:da:e1:
                    9a:5e:d2:bd:6b:d4:1d:62:86:03:0c:b9:3a:f4:77:
                    62:92:c9:a1:6a:da:40:fe:54:48:3a:11:51:7b:05:
                    1f:a7:77:d0:21:11:e7:c1:98:91:c0:a3:81:1d:07:
                    78:ca:79:23:7f:94:be:01:5d:b2:59:90:cb:aa:2e:
                    b5:e7:63:dc:05:8a:ab:ff:9c:1d:2e:12:6d:f5:2f:
                    47:4e:af:fc:01:34:b0:b0:8f:12:06:4f:ba:39:b2:
                    b1:ed:c3:dd:f7:5c:79:9b:3c:31:27:15:12:8c:0d:
                    50:04:e6:14:9a:b3:af:d2:60:6a:b8:1b:6a:2c:75:
                    41:03:b0:93:a5:78:75:f1:d2:74:07:8d:4a:ed:e9:
                    4b:5a:20:a6:3e:42:d5:aa:04:3a:fa:1c:9a:71:1c:
                    24:b9:9d:29:96:c6:c2:6b:d6:d3:40:c0:a0:70:09:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D8:E0:3C:6E:AA:76:B4:21:1A:6F:3D:8A:DD:36:E2:54:57:D6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9053efa6-8692-3060-8397-b262b84bd7f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:14:18:40:41:ee:da:eb:30:80:4a:70:6f:fb:1d:2e:51:fc:
         43:1d:c1:7e:90:ae:d6:22:d7:1a:c1:13:6f:4c:6a:14:35:7d:
         58:6f:92:e0:04:a2:8b:4a:0e:2d:cc:64:11:1f:91:63:12:77:
         4a:33:a5:b1:96:fa:ba:32:79:02:51:04:4e:2a:63:97:b2:52:
         7f:a2:bd:1d:95:04:8a:6a:42:ca:be:20:02:63:b1:56:b7:fa:
         9e:88:23:a5:1d:10:59:6c:e8:ec:08:f9:40:5c:71:79:0c:11:
         86:b1:2b:91:91:63:dd:8b:72:10:08:7f:81:51:ed:a2:87:fd:
         ea:e4:db:4f:1b:8a:97:78:20:eb:cd:3a:13:14:ee:74:ec:4a:
         81:3b:e6:9d:46:ed:05:74:7d:9d:ea:0f:cd:c1:d3:8f:ba:e1:
         63:ef:8b:b4:01:dc:09:2d:2b:14:dc:7f:15:7e:6a:25:0c:29:
         95:a2:c2:34:96:79:13:e1:80:0a:c8:8e:37:8e:f8:88:dc:20:
         5d:5f:41:10:b4:68:3e:a9:bc:b3:f5:2f:24:91:c8:ce:56:f9:
         6a:40:f9:21:2e:2c:7a:32:32:21:7a:7b:ac:c6:62:9b:86:92:
         19:4b:7c:53:ac:b2:f3:bd:13:06:72:b5:7b:14:45:4c:a0:ec:
         1f:d4:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:53 2026 by rpki-client