Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa
File:                     d1fb6743-6930-3219-a256-da13d772b588.roa (raw, json)
Hash identifier:          r0vCLo2FFLb3GzckLRFa/RR+3spNfAI8zZSIzWYYewM=
Subject key identifier:   3B:0C:F2:C5:38:F8:13:D7:BA:01:03:D3:A3:A4:10:02:AC:82:1C:CE
Certificate issuer:       /CN=22a2b00e-11a0-4c50-abf7-a74adfea69e4
Certificate serial:       010D0C9F4328584EA7942894DDB6B8E04B653320
Authority key identifier: 8E:DC:20:EF:33:21:29:1E:50:62:9A:DC:C8:EC:B1:59:A6:6E:CD:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32156
IP address blocks:        192.75.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:28:94:dd:b6:b8:e0:4b:65:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a2b00e-11a0-4c50-abf7-a74adfea69e4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=90b64d16-9854-46f3-9aa5-90c9e8b5b39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:31:d0:34:c7:83:3c:f5:00:16:17:0f:49:
                    5c:d3:6b:24:f7:fe:50:fc:82:c3:1d:4a:dd:29:f5:
                    b1:65:aa:cd:2a:aa:4c:34:fd:79:70:55:c1:25:c1:
                    7f:4d:28:91:b1:46:28:f3:a3:79:ec:8b:47:60:ce:
                    b0:e3:88:e7:10:29:a3:9c:37:52:01:63:3c:05:4c:
                    c1:09:c7:97:58:7f:cc:46:2a:36:f2:83:bc:36:6a:
                    31:de:0b:6b:8a:ad:bc:60:85:5a:bf:d2:e4:27:95:
                    9a:38:a4:2e:34:18:12:ec:17:ad:83:68:d5:7f:95:
                    f3:8e:c1:c1:39:02:fa:15:7e:43:ca:f2:a4:31:93:
                    6a:32:35:90:7d:26:9a:ca:43:40:c9:28:da:44:9a:
                    1b:1a:db:c7:d4:b6:6d:ea:69:75:ab:bb:87:8a:1e:
                    fe:86:30:48:aa:6a:58:2c:3f:54:65:d6:bd:e1:79:
                    ea:31:c5:5e:be:70:73:a1:e5:8b:b8:74:be:57:dc:
                    04:d6:2a:b6:b0:d1:f8:92:80:19:47:09:54:34:d5:
                    76:b6:9f:74:a4:ff:61:22:96:08:15:6b:2c:af:fa:
                    67:3f:90:5e:93:2e:73:26:15:14:e5:f9:95:63:44:
                    aa:05:a2:73:ba:49:eb:4d:6e:98:31:a1:17:55:11:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:F2:C5:38:F8:13:D7:BA:01:03:D3:A3:A4:10:02:AC:82:1C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/d1fb6743-6930-3219-a256-da13d772b588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4/22a2b00e-11a0-4c50-abf7-a74adfea69e4.crl

            X509v3 Authority Key Identifier:
                keyid:8E:DC:20:EF:33:21:29:1E:50:62:9A:DC:C8:EC:B1:59:A6:6E:CD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22a2b00e-11a0-4c50-abf7-a74adfea69e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:82:37:f6:87:dc:b5:81:e8:fd:cb:fe:d3:e1:03:c2:5a:ca:
         2f:08:68:b1:ce:6b:9e:b7:e2:d7:f6:3e:bd:40:82:a2:a6:b2:
         e4:bd:53:aa:30:8f:ca:5f:e3:a6:7f:79:2b:87:cf:bb:14:1d:
         c0:71:df:ca:72:c3:1e:e4:bf:3e:7a:03:2d:5d:31:02:6a:f2:
         bb:73:1a:28:8e:bd:da:fe:cf:01:9b:13:f1:1f:da:12:bf:56:
         33:8b:29:cd:f4:08:25:c9:f4:1d:00:89:b3:74:96:6c:15:95:
         45:fb:df:39:61:c9:85:f3:45:ed:4e:1e:61:2c:73:63:2e:bb:
         d9:e6:6a:15:45:5d:23:7d:27:36:c5:c0:07:11:19:9c:ff:f4:
         c6:ff:ba:7b:bd:5e:00:16:b8:15:ec:d4:19:88:99:e2:f0:1b:
         42:79:6a:82:65:a2:48:2c:69:18:6e:fb:a5:61:1d:01:c6:39:
         93:16:e0:d3:b7:ef:51:62:0d:00:5a:1c:31:e7:17:81:21:f6:
         7b:b7:8b:d8:16:1c:f1:ef:90:43:0f:d2:9d:f0:49:e5:e7:e9:
         8b:34:df:4c:04:60:0a:55:c9:e7:8e:0e:6e:05:99:b2:b9:ad:
         7a:2c:d5:63:5f:25:f4:23:90:61:d1:7a:5b:86:df:88:b4:60:
         f1:25:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:53 2026 by rpki-client