Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa
File:                     b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa (raw, json)
Hash identifier:          nqvNej/mLZzHAFcQXEsrFRl5EcaKWl72nNKWkvEe3EU=
Subject key identifier:   5C:04:88:B7:80:FC:8D:BB:93:FC:D4:51:F7:85:46:B6:55:3F:6E:3D
Certificate issuer:       /CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
Certificate serial:       010D0C9F4328584D6C0FB1A29E1E274E9AF937C0
Authority key identifier: E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        195.85.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b1:a2:9e:1e:27:4e:9a:f9:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=ee4a6736-7aad-4d82-b4ff-10b6210411ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ba:6a:1d:90:94:11:b5:57:fb:59:0e:9b:b1:
                    a5:12:79:48:1c:88:a3:f0:4a:6d:73:68:84:a2:fd:
                    da:50:ab:32:55:03:90:e5:23:c5:71:bd:b4:96:e4:
                    e4:3a:ec:0f:51:ed:01:bc:8c:20:7a:09:36:01:8e:
                    f3:2c:a6:32:08:b8:9f:32:db:b7:53:99:18:04:47:
                    45:03:08:70:a8:d4:ae:1a:a3:f4:39:d7:2f:ab:b3:
                    93:b3:f3:f5:4d:5f:58:c7:a4:53:1d:9a:05:54:fb:
                    20:d1:eb:72:b3:9e:bc:83:6e:8c:70:84:da:dc:41:
                    ac:50:b7:fa:d6:16:11:95:7f:9a:a9:14:d9:67:3c:
                    8a:38:15:57:6d:fd:57:c9:1d:36:b5:2f:76:95:8e:
                    87:4a:56:43:73:b8:27:e8:24:43:b2:61:4f:d0:48:
                    f9:3f:55:a1:a6:ee:a2:02:d4:80:83:83:9e:4a:0c:
                    54:ae:14:07:a5:15:72:0d:be:cf:94:42:41:be:db:
                    17:4f:70:b8:68:e3:e8:18:c5:9d:85:63:a4:2d:e8:
                    e0:a7:8c:50:b3:22:71:d7:4a:b3:a8:b3:f7:58:7d:
                    28:ef:ea:46:ff:4d:0d:56:ec:af:5b:2e:a9:f6:d6:
                    64:5d:fe:c5:84:cd:48:ea:8f:30:cf:b9:77:fd:ba:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:04:88:B7:80:FC:8D:BB:93:FC:D4:51:F7:85:46:B6:55:3F:6E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/b2ae92da-c79c-3cf1-8bfd-21ed9691db6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:2e:f2:ec:88:4f:89:d5:79:71:62:68:e4:67:a4:2d:b9:
         bb:22:bc:f3:89:fd:70:dd:1e:c5:6d:98:49:5e:5f:c7:5e:28:
         a1:ff:f5:83:a5:9e:ab:86:89:a4:ce:c3:4a:c5:e4:c0:f1:b2:
         bf:e1:de:07:3e:0f:e6:8c:54:18:4b:cd:b2:a2:3a:f9:4a:27:
         3b:03:24:ba:3a:00:b5:0b:f4:a6:f5:6b:12:41:3a:38:06:b2:
         92:d2:51:f3:3e:ac:c6:d5:ae:c8:7d:30:38:10:75:50:8f:7e:
         5c:ce:f3:48:80:a9:96:8c:40:07:bc:12:01:6d:e0:fe:d0:b2:
         19:fa:c4:ff:fc:26:ab:28:88:dc:87:0f:c4:f5:b4:b9:1d:3d:
         eb:97:ce:3f:97:eb:7a:99:3a:79:5f:28:6a:69:91:de:4e:5b:
         0e:0f:ce:f0:02:1d:22:f2:33:c2:b0:46:67:bf:13:09:d2:9f:
         a6:e8:bc:80:33:d5:74:70:42:05:a9:62:0b:7e:2f:49:84:49:
         7f:4f:ae:5a:0f:5d:fb:b3:94:9b:8e:d6:27:72:cc:48:51:13:
         d1:ba:6a:9a:1f:c3:d8:47:4a:e0:88:78:d1:0f:b3:91:fa:11:
         97:c6:12:cf:cf:1d:de:79:21:9e:7e:18:29:e5:70:d5:d3:b3:
         14:e3:ae:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:08 2026 by rpki-client