Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/61692188-6b78-3592-830a-8b49ca5bd176.roa
File:                     61692188-6b78-3592-830a-8b49ca5bd176.roa (raw, json)
Hash identifier:          iJzEaBxAU+jOpBJb8EHVV8NPiRQMdHD5eXi+MWNLpdA=
Subject key identifier:   C6:39:AE:3D:B0:DA:6E:57:46:B7:AB:D9:DF:4F:B7:32:9B:CE:F4:0E
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F4328584CD407732CC81A87687EF2E3C0
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/61692188-6b78-3592-830a-8b49ca5bd176.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     393653
IP address blocks:        104.128.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:73:2c:c8:1a:87:68:7e:f2:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=ec1a8841-2c5e-4c59-95f9-da9d18314bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:a0:67:94:ff:da:2a:40:70:d6:f6:98:f7:
                    00:1c:ef:81:33:72:7c:d1:6d:bf:0e:a1:62:a2:50:
                    09:76:ea:d3:49:b1:6b:ca:b6:ca:36:35:98:ea:91:
                    a6:50:7a:c4:10:3a:b9:77:da:5d:1f:c9:6f:74:c0:
                    c2:8c:c0:cb:aa:11:ff:e4:be:ff:73:9c:fb:bf:82:
                    bd:08:f2:86:3b:9c:46:6a:7d:98:0c:7c:1d:5e:ae:
                    b2:a5:c7:50:e9:34:5f:9f:42:a4:17:b8:07:67:45:
                    24:17:63:fe:18:3b:8d:52:9e:48:ef:82:b7:7d:9f:
                    53:36:18:df:4d:6f:04:85:bd:05:9d:0e:ac:d0:da:
                    aa:d3:2f:8f:df:79:56:c1:3f:03:2a:1f:e2:11:01:
                    f9:32:13:d0:83:fe:14:3b:44:a6:28:16:d7:4d:15:
                    04:81:14:21:23:e2:5f:a4:c1:9c:0b:6e:03:8f:f8:
                    d1:4e:5e:8b:96:79:55:ed:ba:24:fb:23:d7:a3:da:
                    0b:f6:40:81:c1:89:40:4d:9c:fc:78:99:1a:4b:0a:
                    61:4d:91:e0:02:38:b1:c0:66:ec:5d:31:2a:63:4b:
                    57:27:05:03:64:f9:7d:3b:71:dc:23:1d:74:55:17:
                    54:7d:a1:17:2b:5d:32:aa:8a:5b:b2:2e:e5:2c:cf:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:AE:3D:B0:DA:6E:57:46:B7:AB:D9:DF:4F:B7:32:9B:CE:F4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/61692188-6b78-3592-830a-8b49ca5bd176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:2d:68:d2:c8:2a:74:0e:b4:f9:b1:74:2b:a7:98:36:d4:98:
         cb:eb:64:4b:e3:fa:39:8e:99:c3:e0:90:6a:72:7c:d2:b5:fe:
         f3:e5:74:1c:ff:64:36:6b:84:7b:47:6b:a0:86:b6:03:1a:f3:
         c7:8d:df:71:ab:2a:ae:3a:42:8b:89:5d:8d:6d:e0:c7:cc:1f:
         6f:86:e1:42:5d:f5:c9:12:82:cb:30:87:70:60:46:0f:61:3b:
         21:6d:04:82:c0:35:ee:b4:ee:fc:29:54:97:9b:7c:ba:1c:09:
         5f:1a:22:96:a1:13:c5:81:07:62:e9:a6:86:cf:32:95:9d:33:
         d0:40:9c:4b:63:14:86:d9:0f:da:55:80:71:47:ac:64:88:a4:
         e5:2c:84:d6:d7:82:2a:c9:8a:1d:ea:cb:81:f5:10:19:69:e1:
         e9:1a:3b:b7:f7:03:ec:ed:63:8c:52:c3:aa:fb:62:68:e7:f6:
         50:71:47:6d:ac:35:ba:2c:8c:58:6b:2e:fd:2f:b9:8f:b2:3c:
         64:44:28:f6:6f:f8:e8:3e:59:ab:4d:1c:45:47:be:15:fd:1a:
         2d:48:b3:e7:7c:88:dc:ea:94:01:c0:29:f3:5a:83:47:6d:6d:
         95:f5:2e:ec:89:bc:37:c3:03:33:a4:90:ac:55:8e:2c:fc:e8:
         d2:7c:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:34 2026 by rpki-client