Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb4a0cc-2819-3b6e-99ad-fcd217446a22.roa
File:                     efb4a0cc-2819-3b6e-99ad-fcd217446a22.roa (raw, json)
Hash identifier:          PF0iKjnTco40EM0Tz4+f9P2TBkm8xcs9KV+3HneC65s=
Subject key identifier:   85:09:C1:47:9E:00:3E:A6:A3:65:B0:7F:01:8F:06:F1:5D:75:29:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA789241FF3EACDA0CEE37A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb4a0cc-2819-3b6e-99ad-fcd217446a22.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7725
IP address blocks:        75.147.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:24:1f:f3:ea:cd:a0:ce:e3:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0c593f87-b30b-428f-949e-3cb93ac1bf61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:02:63:fe:9b:8b:e5:e7:cd:34:87:14:5e:
                    ad:f0:d4:e0:ea:be:04:d0:36:33:3b:6d:74:c8:de:
                    37:49:2d:2c:b8:f4:e0:68:70:b1:fc:17:06:94:68:
                    4d:45:f8:62:2d:95:83:ed:62:21:31:b1:ff:eb:10:
                    c8:e0:5d:1b:2a:d4:f7:a6:82:d8:f3:98:5b:a6:46:
                    be:41:7a:ff:95:52:00:6f:8f:b6:e0:b9:79:86:7f:
                    39:fd:54:19:29:75:d0:ca:44:92:9f:1a:08:16:47:
                    52:da:33:e1:f6:ad:92:09:ca:52:6e:dc:fa:7c:70:
                    f4:15:03:c8:2c:5c:52:01:fb:60:a8:e5:dd:e9:17:
                    6c:80:62:50:00:d3:e3:63:0f:4b:d5:89:29:eb:6d:
                    e7:2a:f7:e9:c2:d6:34:29:fe:03:79:21:82:2b:65:
                    3d:99:99:ab:72:a3:c5:8d:e7:2e:ec:df:65:44:b1:
                    f3:9b:49:6f:e2:5a:a7:08:31:a8:e0:ca:1a:9d:c9:
                    77:e4:89:46:15:aa:f9:33:c9:8d:cc:50:6c:dc:49:
                    ba:10:80:ee:fc:8c:b9:d8:eb:8f:fc:0d:41:59:aa:
                    76:c5:62:dd:e0:70:b7:3e:42:21:15:30:b3:79:26:
                    1d:69:8f:de:64:51:f8:8f:5c:4a:ae:01:c3:a9:72:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:09:C1:47:9E:00:3E:A6:A3:65:B0:7F:01:8F:06:F1:5D:75:29:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efb4a0cc-2819-3b6e-99ad-fcd217446a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.147.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:e6:b1:e1:89:f8:56:f1:ae:a7:7f:03:43:43:26:77:19:64:
         6f:fc:48:9d:b0:f5:4b:61:80:89:03:1f:0d:a7:fa:a1:0c:a0:
         79:51:52:83:d8:3a:41:cc:fb:e2:ed:75:79:01:3e:51:5f:57:
         86:62:5d:86:b6:86:67:e2:f0:db:05:4a:91:26:43:8c:3e:c1:
         9c:97:2e:bf:ab:01:8f:da:d8:14:49:b8:42:07:50:6d:f8:36:
         f2:21:fc:26:3d:d3:58:67:39:7e:ac:46:75:4e:67:d8:d4:f7:
         35:16:d2:39:2c:d4:03:69:02:a3:a9:42:8e:b2:6a:2d:36:77:
         47:3a:5f:fd:c7:4a:30:6a:b9:d8:92:bd:d2:2a:fa:bd:f3:fa:
         75:92:e5:88:e9:c3:a7:18:71:dc:50:4f:3a:16:32:72:18:ca:
         2a:1a:8b:82:77:3a:28:eb:6d:ee:26:ac:38:33:a1:09:4d:13:
         87:e8:24:20:bf:f4:89:86:75:af:03:67:b4:58:56:88:95:67:
         1c:c1:eb:5a:49:06:4e:fc:3d:ce:07:bf:d0:9a:59:4c:3d:0a:
         37:c9:21:19:46:30:0d:88:95:7c:71:7a:8d:ab:56:00:fd:9c:
         60:64:74:7a:09:ff:19:29:47:3d:1a:88:23:1d:8d:67:dc:d5:
         0b:35:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:36 2026 by rpki-client