Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
File:                     75c9ae00-3895-385c-8913-67c442d2f4e6.roa (raw, json)
Hash identifier:          7U3N1Myr6zFlEx25JmihzomsZUnbZglEqz2YFyMDTNY=
Subject key identifier:   08:7D:DE:22:8E:BC:7B:B2:6F:4E:80:14:1A:A3:FE:2F:D4:B6:10:23
Certificate issuer:       /CN=3a975a5d-2307-4688-a186-4a355ff45581
Certificate serial:       010D0C9F4328584EA786EEE0EA9A167772690740
Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32473
IP address blocks:        64.52.21.0/24 maxlen: 24
                          67.158.61.0/24 maxlen: 24
                          69.72.30.0/24 maxlen: 24
                          137.83.90.0/24 maxlen: 24
                          141.193.149.0/24 maxlen: 24
                          172.86.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:ee:e0:ea:9a:16:77:72:69:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df086443-95b5-41de-afd4-071fcc603e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:16:24:b8:cc:49:35:f0:40:5b:73:2c:44:
                    14:46:cc:4e:16:f1:db:fa:c3:67:65:35:37:9f:9a:
                    0b:c0:83:b7:9d:fb:9d:d5:ae:1c:2a:4d:b8:4c:6e:
                    1c:22:ff:92:89:4a:fb:c0:fc:67:08:df:6c:92:88:
                    de:ae:fc:32:b4:3d:e7:a2:d2:2d:f9:ff:7b:d9:a0:
                    dc:dc:c7:d7:cc:15:a3:00:4a:22:83:26:91:f8:c5:
                    85:bb:f0:27:98:06:9c:66:92:31:6a:d8:6b:11:bb:
                    19:e9:88:64:82:be:05:7f:29:10:37:4f:37:a4:ef:
                    dd:c3:4d:06:b2:4d:f2:3a:69:8d:4e:ef:48:29:41:
                    c7:33:29:00:fe:a6:27:3c:44:8d:90:cb:f0:9f:ee:
                    f7:62:19:65:79:12:8e:c7:e3:12:08:da:7b:37:3a:
                    26:71:df:51:0f:76:b3:9f:68:c5:ee:9d:c1:4a:0a:
                    8c:6c:75:20:57:3d:5d:5a:45:24:99:5b:14:2e:7d:
                    13:14:e3:79:41:7d:54:11:b9:e4:28:b8:96:4a:2f:
                    88:c3:4c:3b:38:d4:b0:9b:57:71:16:3a:4d:43:23:
                    cd:23:dd:d9:b8:b9:82:92:de:2f:55:a7:cf:9b:e6:
                    b4:19:d6:2b:e4:f6:56:36:f5:08:00:3b:67:15:d9:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7D:DE:22:8E:BC:7B:B2:6F:4E:80:14:1A:A3:FE:2F:D4:B6:10:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl

            X509v3 Authority Key Identifier:
                keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.21.0/24
                  67.158.61.0/24
                  69.72.30.0/24
                  137.83.90.0/24
                  141.193.149.0/24
                  172.86.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:c5:05:13:95:82:dd:31:7c:4b:93:12:a8:97:33:d8:41:
         11:d0:6a:6b:79:f6:46:f3:ff:32:b9:52:51:53:8c:4e:10:44:
         49:7e:83:7d:6c:26:44:fa:50:ea:03:fa:08:c9:37:c5:45:7d:
         95:b2:4a:e9:a8:d5:16:06:90:08:a6:07:c2:d8:81:ef:a4:aa:
         37:e3:8e:4d:57:da:e7:8d:a9:fa:b4:a3:14:2c:d2:d2:cf:c6:
         d6:11:f9:4b:84:48:ad:9e:cf:65:7d:7f:a3:f7:49:e6:b4:a6:
         68:81:51:04:42:27:bd:5a:af:6b:de:85:be:6c:52:61:68:ac:
         2a:1f:ae:b0:ae:70:3d:40:d7:e3:4d:a1:d3:a8:8e:2f:c2:bd:
         ca:ee:74:47:c3:d6:01:b8:8c:0d:44:54:79:a3:31:0a:db:6e:
         a6:15:fd:30:bc:75:c7:25:ff:da:df:3c:35:30:02:37:6e:14:
         6a:b4:0c:b0:40:e0:64:c3:f1:46:78:cd:52:2f:b6:c0:2f:96:
         3b:a3:f7:8f:f3:2f:ba:4e:9e:39:11:b4:53:c6:75:d9:41:fc:
         cd:38:3c:4b:0a:7d:b9:c8:4d:ad:aa:a3:0c:3f:07:62:be:ed:
         16:03:4b:38:c3:73:2f:52:3d:73:22:dc:78:22:9f:c6:a9:71:
         5a:3f:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:41:48 2026 by rpki-client