Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c4e23dc7-8b20-3346-92c6-151bb488aa08.roa
File:                     c4e23dc7-8b20-3346-92c6-151bb488aa08.roa (raw, json)
Hash identifier:          fsaXL7CnNFv6sTAyU67jxS+sYYKyypJ1Z9M5HF08aF8=
Subject key identifier:   BB:83:29:5D:48:9A:1B:F8:DA:23:FE:2C:75:AC:A4:02:6F:3C:C4:55
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584D746FC3BED7E2ECD02B7CBB00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c4e23dc7-8b20-3346-92c6-151bb488aa08.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     0
IP address blocks:        192.64.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:c3:be:d7:e2:ec:d0:2b:7c:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=da2346af-7556-4aa4-a8b4-adefcedc356c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:a6:5d:4a:90:ec:12:10:42:6b:1d:41:1a:
                    be:28:d4:1c:fd:de:ea:27:d7:32:ea:eb:90:a7:70:
                    13:c9:9d:74:1d:0c:a2:5c:8f:9c:5e:01:4f:00:62:
                    f9:06:d7:f0:e4:da:f4:8e:08:b2:b0:d4:36:8a:b1:
                    b6:9c:b8:0a:d5:ee:4d:e3:d1:35:3a:47:76:a5:bf:
                    3d:05:c0:b5:28:f3:b2:c7:41:1d:75:6f:67:c6:ec:
                    8c:60:51:8f:af:f4:c4:fb:95:17:40:3f:14:a8:b0:
                    71:51:a4:68:22:22:69:95:b2:90:a4:05:a2:87:2e:
                    20:2d:c4:71:9b:98:49:14:bb:f1:34:4e:37:a1:41:
                    23:7b:d5:2b:1e:35:14:8f:97:c3:31:84:f3:8f:f2:
                    44:fc:4b:41:a6:31:7a:8c:36:0f:68:1f:a1:27:bd:
                    71:af:1f:05:57:91:af:ec:a0:8d:95:d5:0e:5a:b2:
                    be:89:54:cc:3f:d0:b4:a4:e4:bf:c5:95:1c:48:b0:
                    e1:05:e5:83:ef:b7:42:48:6c:17:d0:5c:fe:a8:42:
                    a7:8f:54:59:6a:4d:2b:93:ab:e9:7b:61:fa:c3:4f:
                    6c:90:df:ae:f2:56:ed:1a:a4:c1:08:c6:a9:4f:c0:
                    f9:b8:af:46:d9:f8:d4:b3:54:8b:b4:10:95:98:9a:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:83:29:5D:48:9A:1B:F8:DA:23:FE:2C:75:AC:A4:02:6F:3C:C4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c4e23dc7-8b20-3346-92c6-151bb488aa08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7b:84:69:2a:e7:ec:76:3a:e4:45:17:7d:62:35:47:d9:9a:
         44:38:28:04:ba:e3:2f:ea:54:8b:22:f0:ef:d2:67:3c:f2:7c:
         51:07:7a:ad:90:cd:0b:a2:f4:4b:3c:b6:17:22:f3:35:b8:13:
         99:a5:b8:04:ce:26:b9:31:4d:f7:39:0f:cc:40:86:09:d5:b1:
         71:17:49:6c:e2:ab:70:44:48:81:85:e9:7c:d9:b3:dc:86:f7:
         fc:0d:54:31:e7:56:73:4c:55:ac:e1:bd:f0:f4:cc:cb:ec:16:
         7c:76:c8:a0:49:7c:ce:93:67:f6:c1:f8:36:76:82:21:8e:83:
         e2:af:59:44:a8:f6:52:59:bb:ea:18:bf:a0:4a:e2:e7:9b:67:
         74:f7:c5:94:6d:ce:6a:36:79:d5:4c:9f:6f:43:65:8c:15:1a:
         45:30:e4:f8:43:4f:82:4d:8e:23:fe:92:3f:1d:71:a4:f0:01:
         34:ad:67:5d:99:40:6c:31:98:51:84:1e:f2:5d:d3:c7:1a:83:
         50:01:e0:bd:24:f3:df:70:22:a6:2f:e8:36:eb:0a:c2:c9:01:
         f7:05:1c:51:d8:c8:b3:bb:90:10:08:61:0e:3b:dc:34:de:35:
         87:f0:5f:4a:8d:0b:fb:8f:7f:1d:d7:47:c7:2b:19:f0:c9:96:
         88:05:0c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:37:48 2026 by rpki-client