Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/75ead424-c69d-353d-b0f7-7cd744a7117e.roa
File:                     75ead424-c69d-353d-b0f7-7cd744a7117e.roa (raw, json)
Hash identifier:          uDllj/3gMM1Idngsp7buNluNp/NaQ7xEIYskPkDbHww=
Subject key identifier:   AF:48:A2:F5:21:FE:0F:1B:6A:60:C4:5D:DE:4C:87:D0:7F:66:DF:6A
Certificate issuer:       /CN=a895e462-e3f7-4517-baf9-17cc027d673c
Certificate serial:       010D0C9F4328584D5F7FA33F5867B8FE180D1BB0
Authority key identifier: 2B:30:6E:4E:A0:93:AF:FA:78:94:14:6B:D4:18:29:C8:F4:FA:57:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/75ead424-c69d-353d-b0f7-7cd744a7117e.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     152117
IP address blocks:        204.74.125.0/24 maxlen: 24
                          204.74.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/a895e462-e3f7-4517-baf9-17cc027d673c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/a895e462-e3f7-4517-baf9-17cc027d673c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:a3:3f:58:67:b8:fe:18:0d:1b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a895e462-e3f7-4517-baf9-17cc027d673c
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=9b933c3d-f828-4df7-9ba4-37b1a58d49d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:d6:f5:2d:cc:b1:2c:a2:e3:18:96:c0:77:
                    c6:16:fc:e3:0c:fe:bc:94:d7:1a:7a:a1:a1:4f:3b:
                    50:af:e8:61:b8:f0:fc:84:05:a5:af:49:ab:b3:c6:
                    1e:47:d5:d9:c1:b1:d2:f9:2d:a7:ff:93:50:f3:ea:
                    9d:59:79:a4:db:b1:6d:49:0d:9f:05:25:99:7a:62:
                    6a:6e:a3:29:a4:78:4c:73:03:23:f3:0b:c6:1c:98:
                    83:8b:9c:73:ef:ca:a9:d9:5f:23:e6:7d:9d:a6:fe:
                    89:72:59:a2:85:84:22:12:d5:e8:e7:fe:f7:0b:01:
                    d2:02:13:24:cb:75:f4:60:9d:9e:20:fc:60:8c:1b:
                    27:8b:1f:d1:0a:09:88:58:36:31:7e:35:90:fb:0f:
                    9b:dc:aa:fd:bb:8f:bc:48:f8:cb:44:04:9d:3b:c1:
                    87:10:b0:9e:43:03:39:da:87:10:1b:30:bc:af:1d:
                    c9:cd:02:66:d1:eb:d4:3b:50:45:d6:27:82:17:39:
                    07:bc:23:7e:a4:7c:98:6e:4d:c2:c7:77:ff:bf:79:
                    6e:f4:c8:65:15:d1:97:6a:89:54:ec:0d:35:78:2a:
                    7a:ef:5a:18:3b:88:18:3b:6d:4f:5c:6b:70:98:67:
                    b3:50:59:d1:35:2d:9e:97:c5:b9:78:84:dc:1a:38:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:48:A2:F5:21:FE:0F:1B:6A:60:C4:5D:DE:4C:87:D0:7F:66:DF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/75ead424-c69d-353d-b0f7-7cd744a7117e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/a895e462-e3f7-4517-baf9-17cc027d673c.crl

            X509v3 Authority Key Identifier:
                keyid:2B:30:6E:4E:A0:93:AF:FA:78:94:14:6B:D4:18:29:C8:F4:FA:57:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.125.0-204.74.126.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:6c:0b:bc:29:82:b4:a9:77:af:6d:6f:98:95:c4:26:d1:
         28:7d:ff:a3:79:e3:11:7a:86:3f:63:51:8a:96:17:48:e6:6c:
         a7:44:51:82:1d:2c:7e:1c:8c:69:d3:f6:3f:56:7f:bf:86:56:
         a6:a0:0d:20:9f:68:ce:92:21:15:0a:59:a7:4d:58:71:44:50:
         0b:3c:7c:cc:79:35:d1:37:0c:97:16:6f:54:d7:d7:50:da:69:
         83:bf:d9:da:17:29:19:bb:1b:4e:4b:72:30:51:d3:39:51:27:
         16:2e:1b:45:1b:d7:c3:e3:e6:3c:23:67:19:0f:e4:37:42:21:
         b3:76:69:6f:77:04:5e:3e:a2:93:5f:81:f5:97:ff:ba:c0:3f:
         d7:6c:13:58:01:e2:ae:d6:15:3d:26:99:7d:1f:d7:1d:86:5e:
         fe:ad:09:66:99:5e:91:3d:b3:3a:16:0f:98:c5:d7:52:ab:45:
         52:11:6c:2a:c3:19:72:87:04:10:c8:a8:90:4f:c7:74:68:8d:
         40:ac:3f:63:c6:62:cf:1b:99:24:c4:7f:a8:09:fa:67:56:be:
         3f:ff:3c:36:a9:0f:6a:bd:9a:c3:1a:54:e3:d7:bc:8d:4e:30:
         02:26:d4:df:b2:04:8c:8d:93:ac:59:c1:99:c7:d2:62:4c:7e:
         48:da:ef:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:28 2026 by rpki-client