Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa
File:                     eae45858-8801-3371-b8aa-053a42b2e3ee.roa (raw, json)
Hash identifier:          9/6dQMfyPFdvkBGzTzDReZkOd6TsI3Z8rMLqZMAWXz0=
Subject key identifier:   CC:83:96:21:79:98:EC:49:DC:1D:CC:8F:21:3C:2C:AB:9D:E8:24:8F
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584CDDCCF4CCAD9DF7ACD9179B60
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     3477
IP address blocks:        192.58.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f4:cc:ad:9d:f7:ac:d9:17:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=4fd0aa42-1727-4424-a960-b85bab0cd3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:2d:16:32:cc:40:45:46:c0:19:39:21:68:
                    9e:48:70:4a:40:3c:36:80:20:a9:dd:05:f4:c8:a8:
                    23:1e:d0:b1:2d:04:d9:0f:aa:00:5f:2d:16:fa:69:
                    d4:f7:6b:9f:2e:26:fb:7b:f0:36:eb:7c:aa:4a:96:
                    a9:99:07:e7:2f:7f:bd:42:4a:30:5b:a7:53:a0:c9:
                    0b:3e:63:df:37:6c:8a:96:ca:53:06:30:14:ad:d6:
                    25:0c:ec:55:0f:6b:95:28:1c:8a:3e:78:04:f1:f6:
                    27:0e:26:06:8b:30:f0:89:29:ce:03:87:07:08:b8:
                    07:bd:dd:57:8f:fb:5c:29:a7:86:56:ce:51:96:51:
                    a4:f0:3f:8f:59:74:55:1d:fe:f4:c4:d4:8a:00:25:
                    3f:50:f7:9d:e9:5c:7b:cd:78:a2:f2:24:c5:79:26:
                    e5:db:71:19:e9:4c:75:9e:56:60:f7:50:0c:9b:79:
                    95:6d:a5:5a:4b:93:81:d1:81:40:87:b7:4c:8b:7a:
                    d7:ea:a7:e3:0d:06:1c:0c:39:2c:e4:56:6c:d5:8f:
                    0e:37:10:6d:f7:bc:ac:77:03:24:77:f3:05:fa:a7:
                    01:a0:12:47:20:d9:2c:0e:09:da:01:62:ce:d3:8c:
                    58:e2:89:da:24:57:ca:c5:a4:6f:b0:a1:24:e2:f7:
                    ba:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:83:96:21:79:98:EC:49:DC:1D:CC:8F:21:3C:2C:AB:9D:E8:24:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:bd:7c:9b:96:e2:80:03:3c:dd:66:89:5f:f0:3d:a4:ef:
         9e:eb:4e:c6:11:38:07:50:b1:f7:45:ba:8c:22:45:31:77:9b:
         62:47:d8:cf:19:20:cd:f9:66:f1:2a:08:9e:3b:8a:09:0b:48:
         7d:e9:51:83:75:db:1f:83:1c:ce:cb:ea:e8:97:09:88:fa:c4:
         3b:fc:81:b6:b8:d7:0c:97:95:5a:41:41:53:76:05:ff:17:ab:
         63:bc:d5:3f:78:ae:d3:15:c7:33:3f:67:2b:68:b7:b6:0a:fd:
         9c:da:96:33:3d:44:51:1c:92:0a:a3:67:07:c0:e9:40:b0:97:
         83:2a:a0:d5:be:22:c2:45:0b:58:b2:42:55:22:75:e4:40:98:
         5f:e8:b2:b8:a2:a5:4d:9c:02:8f:03:68:51:aa:cf:8e:42:20:
         49:c4:47:d7:ac:8e:d5:ed:93:1e:d8:ee:85:d9:e6:38:cc:b6:
         34:f7:9d:f3:bb:18:f7:e8:9d:74:14:c9:d6:48:d5:d5:ac:9c:
         74:3f:d5:77:1e:25:69:80:4d:e9:70:a7:3b:de:dd:75:ad:46:
         c1:6c:98:78:3b:1b:9f:be:79:fd:69:4a:25:ba:d6:ee:7b:f7:
         f6:3d:2b:0f:d1:f8:ff:4f:de:40:32:34:8d:41:49:8c:d1:99:
         be:26:12:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:00 2026 by rpki-client