Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/1c546b48-3aa0-3de4-aa7b-6482aa00a219.roa
File:                     1c546b48-3aa0-3de4-aa7b-6482aa00a219.roa (raw, json)
Hash identifier:          h8CS8P4xewKm9GkTBAQWJSkAXXhUdmgArmP6Jwu0nTQ=
Subject key identifier:   3F:CF:37:9D:FE:02:4C:5E:98:C2:88:13:23:8D:98:0F:6C:03:AE:C8
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328584D59EA71917565AE53C1EB4460
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/1c546b48-3aa0-3de4-aa7b-6482aa00a219.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     400329
IP address blocks:        136.175.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:71:91:75:65:ae:53:c1:eb:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5ac54f5d-a292-499f-84c6-846fc66f4490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b2:2c:66:0a:4f:91:87:2c:e5:7a:de:05:64:
                    dc:44:25:34:f7:f4:27:e5:22:ce:a0:30:60:98:d1:
                    62:28:1b:8e:a4:67:2f:fd:95:72:25:0f:8e:47:56:
                    29:67:1e:7a:df:1d:f5:1a:70:2f:16:30:0d:f2:04:
                    d5:22:c1:a6:0c:59:68:4a:80:f1:71:70:1c:4f:72:
                    ab:08:f5:40:83:a9:7c:88:dc:7d:3f:88:12:3a:14:
                    f6:f8:e0:2c:dc:4f:ff:b6:f6:be:30:8e:8d:e6:d7:
                    88:bd:51:39:fb:a4:c4:39:a5:f3:19:d5:f9:01:36:
                    9f:38:04:79:9b:5f:bd:e0:f9:d0:95:c5:13:06:2f:
                    05:b4:96:d2:a7:9a:a7:53:01:68:ff:54:5e:98:da:
                    89:06:fa:ab:e6:64:84:31:b2:71:43:67:c3:17:d8:
                    3b:75:cf:dc:e4:45:18:6e:46:56:5e:33:c7:40:17:
                    14:03:dd:e5:88:dc:78:0d:a7:bd:82:d8:61:2c:66:
                    83:ba:b8:f1:ac:91:9d:04:ac:a9:7a:00:61:60:e9:
                    43:a0:06:20:95:41:48:4c:16:a7:bb:6c:57:d3:e5:
                    b5:97:c8:55:df:d9:e2:56:38:dc:74:d8:08:92:fc:
                    4a:ca:bd:bd:bb:84:3f:5a:d5:52:f7:21:18:e8:09:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CF:37:9D:FE:02:4C:5E:98:C2:88:13:23:8D:98:0F:6C:03:AE:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/1c546b48-3aa0-3de4-aa7b-6482aa00a219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:7c:47:59:ff:b7:d9:5e:e7:37:1d:2d:96:9f:b7:5d:5a:8e:
         d8:bc:3f:f8:62:d6:2a:85:53:d7:51:aa:98:0b:0c:4f:93:1c:
         f1:47:a5:c6:5e:a1:f5:b8:ef:48:8f:0d:4c:71:3f:78:9a:e7:
         4b:7a:8e:91:20:2e:2f:85:df:a8:2c:16:85:1f:9c:f8:7d:3d:
         94:21:cb:b5:82:2f:54:92:db:13:80:19:8e:59:4d:a5:13:75:
         14:6e:28:ca:60:43:b1:22:a6:e0:13:7c:aa:d9:c4:a7:a2:50:
         0a:4a:91:e4:40:bf:4c:e8:c3:9e:fa:f6:88:09:d9:1d:26:21:
         f1:e4:72:2a:76:a6:d3:e3:16:a7:12:7d:34:79:78:27:1e:21:
         96:00:9d:d5:dd:41:9c:19:27:78:28:3e:fe:dc:9a:3e:cb:a3:
         7c:6b:bc:8b:dc:9c:55:f4:6a:42:c3:65:dd:1f:5e:ec:42:1e:
         1b:f5:a2:e1:63:ba:88:28:03:ab:e5:09:f7:6e:ee:c5:e4:3c:
         1e:b1:7b:60:fe:1d:87:72:c4:dd:65:b1:1e:9b:72:6a:b4:e2:
         2a:df:16:57:d1:43:c4:0b:c1:55:fb:e1:cb:2d:95:f0:45:20:
         da:ea:40:0f:0d:b9:0c:e4:e9:a8:d3:12:37:ed:59:8a:81:1d:
         ba:a1:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:54:14 2026 by rpki-client