Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e0abd7a7-2301-3c55-a56e-9b81560b1e24.roa
File:                     e0abd7a7-2301-3c55-a56e-9b81560b1e24.roa (raw, json)
Hash identifier:          cQKS5HlqxIsHJmh2K7lTlxasvH/7IDM3vsMr+qdYbUQ=
Subject key identifier:   C1:4D:47:CE:1E:7D:3B:40:D3:BB:00:31:E2:D1:E2:0D:AC:CC:9A:37
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584F761D7CA52BA9541CC6559A40
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e0abd7a7-2301-3c55-a56e-9b81560b1e24.roa
Signing time:             Sun 11 Oct 2026 01:00:13 +0000
ROA not before:           Sun 11 Oct 2026 01:00:13 +0000
ROA not after:            Sat 09 Jan 2027 02:00:13 +0000
asID:                     7764
IP address blocks:        148.129.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:76:1d:7c:a5:2b:a9:54:1c:c6:55:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Oct 11 01:00:13 2026 GMT
            Not After : Jan  9 02:00:13 2027 GMT
        Subject: CN=f2adab83-35ca-43bd-96e6-58aa0cf1ffe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:af:33:77:5e:79:56:56:91:0e:1f:dd:da:
                    cc:a3:6f:09:01:fc:d8:22:78:b3:d2:e6:b8:d7:4a:
                    a1:f6:36:b2:c8:2a:0d:e8:c7:4d:22:7e:ec:0e:78:
                    a2:db:db:f0:08:55:ab:81:34:1e:33:70:25:02:45:
                    51:d6:d2:35:a4:5a:e3:f2:45:c4:57:76:fd:e3:fb:
                    46:e0:4e:32:37:69:05:47:38:01:0c:35:91:1d:c9:
                    94:42:12:b1:40:3e:29:97:c2:9d:cc:e7:bb:0d:4f:
                    13:6c:26:98:57:06:e3:93:77:e3:97:b4:60:3f:1e:
                    00:1f:30:33:4a:88:62:76:3d:2c:04:c9:ce:ab:2f:
                    a3:55:98:ce:16:9f:46:3b:c9:89:8d:56:4e:c8:c9:
                    44:6c:df:6c:e7:2e:f9:ac:fb:bd:7b:0f:e0:76:41:
                    e4:1a:44:1a:d0:50:f8:8b:b2:2f:3c:46:99:00:6f:
                    e5:a4:d0:ab:52:9c:af:c8:ec:72:1a:41:ca:65:44:
                    6f:bd:78:af:ac:1f:12:e3:00:28:63:2b:9b:d9:e7:
                    31:8f:46:14:65:d4:84:f0:33:f6:3b:3a:ec:bf:25:
                    ad:dd:cd:e1:2a:28:0a:6b:e6:81:b3:d1:d6:9e:80:
                    79:8c:54:e7:dc:e3:74:93:cd:e9:fa:7a:96:dd:30:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:47:CE:1E:7D:3B:40:D3:BB:00:31:E2:D1:E2:0D:AC:CC:9A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/e0abd7a7-2301-3c55-a56e-9b81560b1e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9d:f2:38:ea:12:70:ff:b9:c7:f5:7f:90:38:19:fa:46:0e:
         8d:a0:f8:83:c2:5e:a1:8d:c1:ea:37:ba:4f:58:3e:46:d2:bd:
         52:db:09:a6:de:94:d0:85:8f:fc:74:c7:84:47:81:2c:2f:36:
         7a:1d:60:c1:72:9c:d0:73:f9:47:b1:c0:f6:45:0b:2a:bd:cd:
         b7:7a:bb:10:d4:51:49:95:dd:1f:2d:6a:3e:aa:cf:a0:62:5f:
         66:80:f3:82:45:e6:bd:ab:4a:e3:85:4a:3e:e5:b5:75:24:18:
         13:9d:85:2d:b1:e4:d9:f3:f7:17:83:32:87:17:5d:7d:34:d7:
         09:bc:73:3d:f9:4b:a9:45:1e:1e:54:81:eb:b6:b9:17:31:cc:
         62:63:23:67:3f:b8:0a:60:a9:c7:5b:e7:c4:77:d0:f8:ce:d6:
         7f:76:c5:8e:fe:53:27:3d:bc:cd:98:90:f8:36:2a:5d:6c:e5:
         c5:f9:89:c0:d1:d9:c3:b5:81:66:f0:28:8d:71:17:f1:c8:3a:
         58:2d:13:5e:80:56:3f:c9:bf:e5:00:11:91:6e:6c:29:98:7d:
         28:58:a3:20:49:b5:59:cc:00:a2:7b:1d:29:82:b0:8b:73:aa:
         23:98:80:d0:6e:9d:d4:e7:63:d4:04:11:00:80:ad:71:b8:09:
         78:1f:a6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:17:45 2026 by rpki-client