Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa
File:                     f9776a7f-225e-3ef8-9666-75077fc17b3e.roa (raw, json)
Hash identifier:          p4VMsRwSmYDGWQDh0/BdTt1zoZs7aIKlBRVuSYZ7upA=
Subject key identifier:   C7:6B:04:D9:F0:E3:8E:A7:9D:C1:08:BB:DF:7E:ED:2D:0D:53:3C:D1
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584CD407650CFAC96256F25D9580
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     0
IP address blocks:        192.42.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:65:0c:fa:c9:62:56:f2:5d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=4607e443-9c96-4981-be8a-244d299c891e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:43:a0:ae:83:39:af:a2:75:de:51:fb:62:db:
                    93:52:62:af:3c:c9:88:9b:d1:4f:be:38:45:73:90:
                    d9:03:7c:43:be:d6:57:ca:13:81:f5:3c:62:44:60:
                    9c:3a:fd:cd:be:e8:cf:b8:99:53:bb:5e:39:87:a5:
                    d4:e4:6d:5d:73:5c:56:a9:19:43:53:0f:8b:07:37:
                    63:37:2f:8c:71:86:95:f6:3f:74:ab:78:7c:a5:ee:
                    1b:dd:5a:94:fc:73:0e:af:28:92:46:ef:82:e0:5c:
                    f3:aa:e1:16:d4:46:d8:19:7e:27:80:0a:a2:85:05:
                    a8:b9:80:e7:0f:b0:7b:c3:b3:f7:cf:30:69:ac:6c:
                    6e:f2:28:cb:2e:a8:08:6f:1f:49:cc:e6:c4:3f:8b:
                    07:c6:3b:6b:f7:8b:4f:65:11:fd:73:0c:7c:0c:ca:
                    de:92:48:07:4f:e3:1e:9c:bd:40:27:1b:17:63:ac:
                    8e:8e:d6:3f:95:0c:2e:b7:43:38:70:cd:8e:12:84:
                    28:05:0d:ec:ee:36:5a:bd:75:c7:1f:25:e6:55:4f:
                    97:37:48:f2:6a:d5:c8:40:b7:3b:3f:01:3e:80:12:
                    f2:fd:a9:32:bf:b5:e6:1e:b8:f6:52:b8:a7:93:fa:
                    aa:b4:98:7f:87:2e:1a:99:c2:30:93:8e:ca:5a:1f:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:04:D9:F0:E3:8E:A7:9D:C1:08:BB:DF:7E:ED:2D:0D:53:3C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f9776a7f-225e-3ef8-9666-75077fc17b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:8a:d0:d0:09:a6:63:d7:3c:2a:9d:39:93:d2:a9:2a:28:
         33:9d:6c:41:0b:30:1e:38:13:c8:19:0c:2b:e8:f9:8c:9a:7a:
         71:c6:38:16:ea:71:ba:6a:d2:5c:ce:08:26:c0:99:a1:df:11:
         ed:e1:19:72:cc:42:0c:88:2f:da:62:01:da:a7:df:21:96:37:
         36:0f:fe:59:06:e9:c9:77:36:01:a7:9f:21:10:29:5f:05:cc:
         8b:7d:a7:05:0f:92:6f:cc:10:64:f1:1d:ee:4c:64:14:76:46:
         43:fe:b7:f4:54:3d:c1:02:62:ae:8a:c4:71:4a:91:68:20:c9:
         23:bb:3d:41:20:c5:47:59:61:9d:86:56:7f:d0:ab:c6:35:07:
         13:9f:31:62:b9:aa:f7:90:ff:be:9c:12:7a:c0:b0:9d:e2:b3:
         c2:3a:74:00:40:67:38:de:e8:42:c0:8a:bf:ce:db:a0:02:69:
         7e:f7:f2:ec:07:fc:c5:bc:9f:d8:2d:eb:04:07:19:cf:d8:30:
         b9:ab:9e:8d:c6:95:1a:a8:fb:1a:b1:2d:f8:a7:90:07:e0:07:
         37:19:bb:bd:b7:32:2b:b8:b5:b3:6d:04:59:c5:68:f8:94:10:
         2f:59:53:18:fa:56:fd:05:bd:96:c3:b4:e9:0d:3a:8e:c8:bb:
         09:93:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:23 2026 by rpki-client