Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9d7b0cd9-e0c1-3f4d-9b94-ba9a1dfcc027.roa
File:                     9d7b0cd9-e0c1-3f4d-9b94-ba9a1dfcc027.roa (raw, json)
Hash identifier:          7N6WVPUeAtAwWByIuqXtsYGFsZunTL+WwC8mGZUSztY=
Subject key identifier:   2A:FC:92:5D:9F:CA:FF:19:D3:40:C2:1C:63:FB:E1:D3:E1:1A:E2:A6
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E059B5450EE7DEE7CBCDF1480
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9d7b0cd9-e0c1-3f4d-9b94-ba9a1dfcc027.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     3477
IP address blocks:        137.75.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:54:50:ee:7d:ee:7c:bc:df:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=865281bc-6166-42bf-ac1c-647e7c6b64e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:15:83:75:04:95:49:07:b5:73:f6:37:06:99:
                    97:58:69:8c:30:95:aa:3f:a8:02:6b:d8:55:1b:fe:
                    83:13:ef:07:6d:6b:aa:99:44:bb:ee:8c:fd:8c:f4:
                    10:f0:57:83:f3:a0:5d:78:a8:a8:84:b7:ee:70:6b:
                    47:2d:5b:98:88:f4:57:55:63:91:3b:a3:af:c0:05:
                    c7:7f:c0:5b:9a:87:0e:aa:22:d9:6f:ea:5d:86:77:
                    61:13:50:13:dd:45:e4:70:88:d0:68:78:9d:54:eb:
                    3c:6b:fc:05:75:0f:4e:f2:15:2a:15:c6:50:b3:c1:
                    b0:62:b4:27:72:6e:03:8b:cd:60:43:2b:5f:37:e5:
                    a9:1c:05:23:32:dc:23:8c:c5:02:96:14:32:d4:b1:
                    7c:39:96:cb:72:7e:c5:5d:95:dd:88:98:61:f4:d8:
                    dc:7a:9a:10:32:ee:18:39:86:aa:e6:c6:43:31:11:
                    3f:24:94:c1:87:a0:d1:6b:cf:ce:82:d0:61:e3:48:
                    c1:5c:49:ff:82:16:ac:51:9c:b6:2a:ea:59:e0:2d:
                    ac:97:4c:0e:5b:2e:2b:5c:b9:9e:01:31:63:6a:9d:
                    59:fb:8d:22:1d:dd:ce:6e:29:f7:2b:e4:d8:48:bf:
                    ad:6d:79:2f:e1:b9:32:51:d9:e8:1c:94:73:5e:18:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FC:92:5D:9F:CA:FF:19:D3:40:C2:1C:63:FB:E1:D3:E1:1A:E2:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/9d7b0cd9-e0c1-3f4d-9b94-ba9a1dfcc027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:44:5d:91:58:6f:27:c6:6b:bf:be:54:f7:8d:de:52:91:97:
         5e:30:2a:f1:a6:5c:c4:26:13:ad:38:3a:db:fb:42:56:f6:3a:
         cc:b9:b3:c8:c6:2a:3c:b7:aa:56:97:60:ee:0b:be:29:ae:63:
         de:e2:6e:e3:98:c5:9d:70:6b:8a:40:b2:53:22:4d:c0:5b:dd:
         b3:ff:21:dd:55:96:32:5d:ba:c2:ca:a0:db:ef:49:a3:aa:d2:
         bf:34:56:2b:63:b0:92:82:5b:7d:0d:d9:c0:df:2c:2d:43:c7:
         b8:f4:1d:0c:70:5c:03:56:0f:56:26:b9:8b:f7:61:c3:6b:bf:
         f2:9e:8a:8a:04:cd:5b:48:4a:94:cb:a1:35:37:d1:c1:4c:6b:
         b4:d8:9e:d8:69:49:80:99:56:af:c8:b5:9d:cd:53:65:31:5a:
         d5:71:44:31:4e:28:0f:a3:e8:f6:a6:9d:87:f4:ec:ca:ff:1e:
         43:5d:3b:33:da:14:d1:f7:04:9b:2c:e7:7b:75:fe:2c:a9:ac:
         7b:3c:47:3c:85:85:e5:81:8e:98:3f:9a:ae:f6:80:45:85:ac:
         b9:1e:e7:81:3c:76:ee:3a:ff:a4:98:71:91:f7:46:88:53:6d:
         16:ba:15:98:2c:1f:c0:22:25:fd:34:30:07:68:ff:97:1b:91:
         cf:f3:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:42 2026 by rpki-client