Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/176a46a2-0ba6-3428-8880-4e0bb860b31c.roa
File:                     176a46a2-0ba6-3428-8880-4e0bb860b31c.roa (raw, json)
Hash identifier:          ES20Na/OJQ3NWH93EWOd1px5E2AZfpTuDfHHrw905do=
Subject key identifier:   91:04:5C:95:F7:2F:74:95:F0:00:26:51:C4:C1:69:52:B9:83:83:45
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584D2BDA236DA96DB6F073AD36C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/176a46a2-0ba6-3428-8880-4e0bb860b31c.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     7764
IP address blocks:        148.129.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:23:6d:a9:6d:b6:f0:73:ad:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=56d21d73-049a-449b-b160-be29a86c7707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:fa:4c:3f:bf:e0:e9:2a:cc:92:cb:8f:2f:
                    db:b0:ca:75:56:58:5d:d3:02:5c:b7:84:fa:ed:b4:
                    31:e4:ea:92:41:5d:3d:8b:1b:1a:90:1f:4b:56:5d:
                    3e:c6:a4:31:9f:5f:e9:22:e4:5b:7c:68:e9:de:1b:
                    08:1a:f4:69:4d:84:d9:f3:4c:94:f6:cf:95:79:75:
                    55:d1:a5:d0:07:11:87:76:37:28:49:a2:30:db:de:
                    86:72:94:ad:80:01:15:ff:6a:39:bc:9d:7a:05:8e:
                    ba:a1:08:ad:8e:5b:ab:46:5c:bb:ab:7c:97:53:6a:
                    ba:a8:ea:5f:f5:68:fe:80:e1:80:13:60:a6:25:67:
                    d4:bb:98:18:5b:ab:47:12:8d:f2:b7:4b:99:22:d7:
                    76:4c:4b:05:64:c2:0d:36:45:e2:89:c2:e9:72:8a:
                    fa:82:d5:91:a7:d5:2f:b8:84:05:b5:94:0e:59:d8:
                    e3:a5:22:dd:f5:be:1c:f0:0f:04:e6:a4:6f:a1:05:
                    26:dd:13:f3:b9:de:13:66:66:ad:12:48:b2:57:2a:
                    fa:c4:a1:df:ab:18:f3:2f:23:fc:3d:49:08:3f:46:
                    27:33:aa:dd:7e:f9:e4:a1:2c:17:ac:56:c6:3a:10:
                    cf:81:66:da:f7:b1:fd:58:6d:f9:52:cd:db:10:78:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:04:5C:95:F7:2F:74:95:F0:00:26:51:C4:C1:69:52:B9:83:83:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/176a46a2-0ba6-3428-8880-4e0bb860b31c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:bb:9d:f7:ff:1d:49:0c:19:7a:e9:f8:d6:d4:60:83:c1:
         a3:5b:09:e1:4d:88:8c:b7:34:cc:56:2f:96:d7:c7:e3:5d:9c:
         bb:d5:92:cb:74:86:1f:69:47:c6:63:e9:0c:05:03:0e:e0:60:
         45:9b:e0:ae:07:ed:e7:3f:ca:c4:d1:a7:33:f6:96:6e:34:52:
         95:85:2b:1f:2c:f4:0e:c6:ce:38:6f:ba:ad:6a:ac:a0:d0:bc:
         24:5e:2b:0d:ae:59:f0:d3:1a:78:92:1d:c3:37:07:b8:26:40:
         f5:15:78:e4:82:ad:f0:80:65:6a:9d:b2:33:0d:12:b6:63:75:
         62:c7:a2:7d:b7:6c:51:03:b6:1e:51:c3:cf:e5:dc:c8:6c:13:
         5f:b5:ed:05:4c:c2:f6:65:37:ad:ad:35:02:ae:b3:19:35:ec:
         5b:3b:d5:43:24:da:2a:3d:7f:fa:66:cb:8d:7f:65:87:7f:a1:
         62:7c:1d:d3:1f:1b:a3:e3:44:a8:2f:f8:06:82:3f:8a:22:61:
         c5:ac:54:fc:50:cc:77:43:83:a1:81:1e:da:1e:a2:b3:87:04:
         dc:a8:6f:dd:c1:02:a0:6f:ce:b3:c8:15:8a:3a:ed:68:72:b8:
         08:0f:a4:66:3e:9a:f9:b8:1a:d9:18:95:01:23:18:3b:fa:a4:
         79:2e:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 12:51:57 2026 by rpki-client