Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c52c86c7-479a-363b-b54c-798e12125985.roa
File:                     c52c86c7-479a-363b-b54c-798e12125985.roa (raw, json)
Hash identifier:          Ye5AXshgBvMqQX7TqACJE4N8JUyr7wqwFaYfE/x/g1k=
Subject key identifier:   C1:BF:09:ED:63:1A:26:30:91:E3:CD:8E:54:17:96:43:0B:3D:51:C8
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E9EAFE9C2A520FC79E6658AC0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c52c86c7-479a-363b-b54c-798e12125985.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     0
IP address blocks:        192.58.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e9:c2:a5:20:fc:79:e6:65:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=01735cd2-6f08-42ed-931e-fadb5721beb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:7f:08:58:0a:cc:f0:9e:d0:b6:32:b8:5c:
                    a8:28:b8:2f:bf:ee:db:82:31:e1:32:28:d0:61:d8:
                    8d:1c:5c:c8:ef:cb:75:37:b6:2b:f1:a7:ed:96:32:
                    c3:9c:0a:93:ca:b8:a1:36:8f:d3:93:6a:3a:60:cb:
                    2f:07:58:81:b4:3f:5f:64:ef:5f:24:0f:ea:67:18:
                    dd:73:ad:c6:ea:94:0f:59:ad:89:f9:d5:38:b3:95:
                    df:85:51:50:ac:5a:d4:7c:0b:53:67:36:8e:19:d2:
                    7e:a5:3d:2a:73:66:ed:77:e7:95:49:31:09:18:1b:
                    3a:19:67:9a:6f:91:2e:81:c4:a9:25:e8:2f:88:cd:
                    3e:cd:15:2f:01:a4:c7:47:de:87:20:f1:e2:f0:a6:
                    62:b3:55:b0:1a:d8:57:a2:42:7a:2f:36:09:00:94:
                    ff:0d:38:a3:a8:35:39:f8:5c:96:fd:9a:a8:2e:25:
                    b1:91:27:4e:b1:4c:05:ad:8f:d2:ad:2a:cb:25:6b:
                    3a:52:7d:ac:b9:78:fb:28:18:79:b3:3a:b3:cc:b8:
                    50:c5:6b:b5:cd:99:7f:ec:fa:f6:11:7b:b7:56:01:
                    01:e7:2f:45:e4:2b:ac:38:81:db:e1:eb:b6:8f:bd:
                    3d:7b:aa:0e:4a:77:aa:dc:7d:5c:20:ec:89:05:26:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BF:09:ED:63:1A:26:30:91:E3:CD:8E:54:17:96:43:0B:3D:51:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c52c86c7-479a-363b-b54c-798e12125985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:ab:e7:b5:b5:9a:cc:31:69:26:fe:82:c2:00:fd:c6:9c:
         be:42:c3:4d:62:d2:99:db:bc:f5:b7:50:ad:38:1c:5c:2f:d2:
         8c:6e:b3:2e:ce:68:8d:0f:22:1f:52:ed:74:12:e7:77:5e:be:
         e0:ee:c6:6d:57:81:72:0f:d6:45:01:b1:a1:85:21:c0:0b:aa:
         0d:59:47:22:d9:b9:a5:88:e3:8f:eb:fa:84:06:90:9e:b5:37:
         79:fd:2d:ae:b4:44:5a:c9:ea:8f:45:54:af:79:f9:8d:53:e7:
         34:e1:dd:43:c1:94:1c:09:9b:bf:bf:5c:8a:0c:dc:83:1b:9f:
         70:8d:4a:56:ca:bb:b7:23:80:dd:c1:b1:22:14:c7:c8:9e:b1:
         0d:c1:5a:7b:5a:df:64:3f:89:d0:85:03:b3:f9:b1:a0:a2:cd:
         63:d3:0d:82:30:5b:49:5f:b3:6c:62:d8:b7:55:c6:01:cf:23:
         b9:8e:9a:e3:46:6a:97:ef:5a:3e:b6:cf:6c:ba:2d:f0:48:b2:
         11:c6:d9:80:ad:ba:ac:5b:84:ff:35:cf:33:fc:c8:6a:f1:02:
         69:36:a3:15:1f:05:8c:80:fa:9f:89:1a:59:09:23:b5:bb:9f:
         2b:d2:63:3b:de:56:ea:58:30:8a:48:9f:1f:7d:fc:34:05:02:
         f0:4e:03:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+nCpSD8eeZlisAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MDE3MzVjZDItNmYwOC00MmVkLTkzMWUtZmFkYjU3MjFiZWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNF/CFgKzPCe0LYyuFyoKLgvv+7bgjHhMijQ
YdiNHFzI78t1N7Yr8aftljLDnAqTyrihNo/Tk2o6YMsvB1iBtD9fZO9fJA/qZxjd
c63G6pQPWa2J+dU4s5XfhVFQrFrUfAtTZzaOGdJ+pT0qc2btd+eVSTEJGBs6GWea
b5EugcSpJegviM0+zRUvAaTHR96HIPHi8KZis1WwGthXokJ6LzYJAJT/DTijqDU5
+FyW/ZqoLiWxkSdOsUwFrY/SrSrLJWs6Un2suXj7KBh5szqzzLhQxWu1zZl/7Pr2
EXu3VgEB5y9F5CusOIHb4eu2j709e6oOSneq3H1cIOyJBSYEZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMG/Ce1jGiYwkePNjlQXlkMLPVHIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYzUyYzg2YzctNDc5YS0z
NjNiLWI1NGMtNzk4ZTEyMTI1OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrJq+e1tZrMMWkm/oLCAP3GnL5Cw01i0pnbvPW3UK04HFwv0oxusy7O
aI0PIh9S7XQS53devuDuxm1XgXIP1kUBsaGFIcALqg1ZRyLZuaWI44/r+oQGkJ61
N3n9La60RFrJ6o9FVK95+Y1T5zTh3UPBlBwJm7+/XIoM3IMbn3CNSlbKu7cjgN3B
sSIUx8iesQ3BWnta32Q/idCFA7P5saCizWPTDYIwW0lfs2xi2LdVxgHPI7mOmuNG
apfvWj62z2y6LfBIshHG2YCtuqxbhP81zzP8yGrxAmk2oxUfBYyA+p+JGlkJI7W7
nyvSYzveVupYMIpInx99/DQFAvBOA5M=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:04:40 2026 by rpki-client