Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f717579-7257-31df-8e15-72a5f78faf1f.roa
File:                     4f717579-7257-31df-8e15-72a5f78faf1f.roa (raw, json)
Hash identifier:          DcCaKWNnmk9HtbIbrXwHzHVnleElAEAWAQOrvmMdS/g=
Subject key identifier:   75:C2:25:CD:7B:E9:23:45:DE:94:1C:8B:0C:5B:D7:60:26:05:FD:00
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D57323BF9F9F433A67B1D7D78
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f717579-7257-31df-8e15-72a5f78faf1f.roa
Signing time:             Mon 30 Mar 2026 13:38:07 +0000
ROA not before:           Mon 30 Mar 2026 13:38:07 +0000
ROA not after:            Sun 28 Jun 2026 13:38:07 +0000
asID:                     29802
IP address blocks:        137.175.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:32:3b:f9:f9:f4:33:a6:7b:1d:7d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Mar 30 13:38:07 2026 GMT
            Not After : Jun 28 13:38:07 2026 GMT
        Subject: CN=995f0ddd-b3c2-4ad4-b093-3563a9f20c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:2c:20:48:31:2e:38:dd:20:68:24:c4:4c:
                    39:6f:18:30:f1:c1:c0:87:34:1c:a4:b7:f5:2d:03:
                    97:be:f3:84:b3:09:0e:37:d4:6f:64:48:21:aa:e5:
                    ac:f9:03:58:e9:f3:fa:63:21:d8:69:47:6b:ea:9b:
                    33:52:59:d6:5e:ae:57:47:4d:29:be:fb:41:d4:94:
                    5b:e3:87:e7:01:50:44:f9:fb:7e:59:79:d9:46:9f:
                    c5:06:d8:2b:cf:d0:9c:31:41:92:b5:d4:61:50:62:
                    57:91:f7:9d:48:18:23:63:46:ec:a0:63:52:ed:0d:
                    c8:04:e3:d3:31:60:b4:c2:0a:dc:f7:6c:96:94:4a:
                    a0:9b:66:bd:31:55:33:66:33:25:75:69:50:d5:cc:
                    ef:5d:ca:ac:71:43:4d:4c:c4:7f:4e:ef:b6:62:6c:
                    b0:dc:17:35:05:61:b2:6a:4a:5d:a1:df:8a:28:0e:
                    db:61:e7:f6:9b:26:65:22:f6:86:08:9a:53:a0:d8:
                    ee:02:a9:c5:6f:3b:56:17:f4:86:89:84:7d:6a:24:
                    d7:4d:1b:7a:3f:61:55:ad:a9:fe:da:20:ad:9f:ba:
                    fa:b0:de:66:00:01:1c:99:7c:0d:2a:60:9e:29:0a:
                    88:9b:5f:9d:07:2b:f0:bf:96:d3:8c:37:18:ab:8f:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C2:25:CD:7B:E9:23:45:DE:94:1C:8B:0C:5B:D7:60:26:05:FD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f717579-7257-31df-8e15-72a5f78faf1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.175.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:8a:5e:99:f0:dd:63:f6:e6:76:cf:6f:ab:b7:4a:75:10:
         74:bf:d4:68:4a:22:73:6a:84:9d:d6:21:02:70:f5:b9:e6:10:
         d2:6a:7d:dd:a2:1b:9f:73:17:fa:ab:84:a5:51:4a:7f:75:f6:
         ab:3c:7e:88:4c:ad:cc:d3:43:92:ae:24:00:d8:d7:6f:fe:3b:
         b1:80:f7:7f:8c:fc:4f:62:70:1d:a5:12:95:8b:a7:22:ca:c8:
         30:b3:6b:89:d4:d2:e1:1f:37:af:fa:74:8a:14:ca:38:86:4b:
         99:7f:3d:cf:69:3b:b9:68:37:d7:21:74:77:46:3e:8d:0a:1e:
         86:32:dc:d2:0d:e2:45:56:77:a7:62:27:26:16:b7:91:b5:a0:
         dc:81:b6:5f:9f:fb:3f:9a:be:b7:f9:95:4f:eb:b6:21:32:50:
         c3:8a:98:c6:db:8d:da:7a:d1:22:b1:ef:27:7b:9d:88:fc:30:
         78:54:fd:4a:1d:70:79:6e:92:e0:d6:20:da:56:e9:87:a9:36:
         45:f5:36:e0:af:48:b1:92:2a:03:9c:d0:65:35:c6:41:9b:10:
         f1:bf:f5:f1:f4:bb:7e:59:e1:c8:21:62:8d:a3:99:03:73:95:
         0e:10:6e:18:ec:a9:05:13:56:b9:f2:5c:63:1f:42:a4:71:c3:
         a8:8f:86:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:58 2026 by rpki-client