Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9d7b0cd9-e0c1-3f4d-9b94-ba9a1dfcc027.roa
File:                     9d7b0cd9-e0c1-3f4d-9b94-ba9a1dfcc027.roa (raw, json)
Hash identifier:          9PC8nOrKy/nhDXko6JPuic2wZqE8iXuVyo5wpuOqS4M=
Subject key identifier:   F4:45:DE:CE:56:C5:A1:3C:1D:B0:42:BC:19:57:89:54:4F:C5:76:A0
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584EA79D490CCA5A80F079274380
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9d7b0cd9-e0c1-3f4d-9b94-ba9a1dfcc027.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3477
IP address blocks:        137.75.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:49:0c:ca:5a:80:f0:79:27:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=13f93b0e-76a3-47f1-8247-de0c80801b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3d:e0:b1:47:64:0b:8d:95:e5:b4:1f:32:d8:
                    db:5c:b1:f3:2c:e5:5e:d1:c3:be:b6:05:96:e7:6e:
                    31:7d:c3:b6:5d:bc:e4:b1:92:1a:09:ef:74:a2:26:
                    01:64:ef:e7:a8:fb:de:be:80:02:0b:70:f5:94:23:
                    19:c4:f4:b0:52:b5:09:0b:e6:b7:8c:26:f5:ad:40:
                    03:b0:48:6a:fc:db:8a:29:a9:60:05:0e:80:bb:0e:
                    ef:a9:55:ff:ff:de:6f:a6:a8:31:02:c1:08:9d:4d:
                    ad:59:35:83:e4:e7:5f:65:89:1e:07:9a:54:36:54:
                    58:33:88:08:be:4e:e4:08:74:2d:d1:99:c6:1f:dd:
                    31:f8:fd:d8:66:e0:50:fa:09:b6:c3:23:2c:6b:51:
                    f0:8a:82:b4:00:39:60:95:48:cd:f5:3d:73:54:26:
                    09:b5:ad:54:9b:eb:3c:eb:1a:13:2b:4a:27:e1:7a:
                    e0:8a:67:bb:ff:be:a4:f9:b9:98:2e:74:fb:70:9c:
                    33:2b:81:0a:b8:a1:09:c3:03:eb:b8:82:87:f6:f4:
                    f8:ae:c7:f5:4d:22:b9:8b:07:fd:30:a9:cb:28:ac:
                    ef:7c:f9:8c:74:02:14:e2:27:51:8c:30:d1:a9:75:
                    be:86:a3:6f:77:7f:a5:32:25:18:a7:68:79:83:52:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:45:DE:CE:56:C5:A1:3C:1D:B0:42:BC:19:57:89:54:4F:C5:76:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9d7b0cd9-e0c1-3f4d-9b94-ba9a1dfcc027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:a4:48:c1:e8:d9:ac:04:fa:d0:84:e9:84:4f:72:82:b4:
         57:ef:23:c1:a0:e7:7c:9a:25:73:24:39:91:16:93:e9:5f:6e:
         e3:ea:98:31:8b:15:9b:b6:23:5a:2a:f2:4e:0c:ab:86:69:a3:
         75:df:57:24:08:55:59:3f:e2:d7:da:79:0b:e8:20:da:3a:b5:
         7b:cc:4e:2f:60:89:a0:d9:92:d9:86:fa:1c:5e:54:aa:b9:9b:
         a3:60:c8:7e:48:02:cf:1d:74:dd:b7:d6:e4:59:a7:8e:cc:36:
         5b:43:0a:78:01:7e:3d:fc:62:a1:ab:af:da:d9:39:51:3d:27:
         82:88:1c:f0:a9:ca:fa:52:b5:f3:fe:f2:a4:09:20:89:35:7a:
         f7:92:2f:14:0f:58:4d:d8:82:48:5c:bd:9b:06:ab:4b:71:e5:
         36:e6:72:01:c9:b4:9e:c2:17:0c:2e:23:f9:bf:19:68:7e:77:
         60:fc:a3:d5:3d:32:5e:2e:28:1d:5a:02:4b:9c:2d:9a:5d:19:
         f2:7c:83:f7:5d:10:3c:6d:45:43:2b:58:72:0c:f1:73:d5:71:
         83:96:a7:37:1d:09:f5:6f:c2:e0:c8:71:f8:5f:97:cb:98:bd:
         a2:f1:df:b6:a7:da:09:95:ed:04:c2:74:67:1d:8b:bd:e6:18:
         0e:51:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:20:52 2026 by rpki-client