Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa
File:                     5856eae9-9332-3fd4-b7c9-f243db302cc8.roa (raw, json)
Hash identifier:          ddVzLLFjUnthi9vkijbcoGEZL6cquK/AUi5FAojCRlg=
Subject key identifier:   A8:0D:F0:20:D5:6B:4B:12:3A:74:46:2A:7D:EE:73:E9:35:07:8C:77
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584D2BDA23C834C2B1C2AC21B880
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     7764
IP address blocks:        148.129.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:23:c8:34:c2:b1:c2:ac:21:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=762862f4-f2db-45ef-b947-cc0e45dc8893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9a:d2:6d:7c:09:49:d8:67:60:bc:10:9e:a0:
                    86:2e:f1:eb:11:46:d0:62:29:40:bb:4d:0c:94:f4:
                    27:75:89:6d:8b:19:5e:0e:cb:e1:7a:7a:0e:6a:bf:
                    0e:3c:4d:ee:0a:d8:4c:60:d7:93:ea:03:35:23:49:
                    e3:fe:cd:74:c8:6a:fd:0e:26:52:4c:20:bb:b3:e5:
                    d5:31:f0:67:bf:26:6c:5b:76:1a:e9:18:69:b1:a2:
                    aa:34:c4:aa:3a:32:9d:da:d0:43:44:d4:8b:c8:d8:
                    6a:b8:6e:96:62:3d:d7:7e:b7:ac:e3:89:ac:f8:63:
                    f2:40:b9:0b:4f:27:8f:6c:f4:9b:99:a6:e2:04:f6:
                    d8:a6:9f:f3:68:e4:4d:00:da:d5:9e:ae:7e:70:48:
                    55:81:b9:cc:b2:52:76:4c:b3:46:d4:83:c6:fa:33:
                    ae:57:2e:e4:2d:4a:59:6b:42:2d:8c:94:3e:00:e2:
                    31:cb:d2:7c:14:07:9e:5e:b8:d4:5d:3c:02:52:c6:
                    0a:fb:e2:51:7f:bb:dd:ec:b0:9d:0c:c0:57:9a:8a:
                    ab:47:aa:e1:a0:30:c5:f9:dc:fe:a4:63:f2:39:ce:
                    b6:7d:6c:ce:16:44:90:22:df:d3:89:cd:a8:37:c4:
                    b8:4e:de:27:0e:d8:82:86:fa:0c:5b:b9:61:bc:8f:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0D:F0:20:D5:6B:4B:12:3A:74:46:2A:7D:EE:73:E9:35:07:8C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:77:82:4d:7f:38:f2:36:22:1e:18:a5:aa:5b:95:92:7c:02:
         b4:6e:ce:76:d4:64:50:eb:4a:7a:34:27:e7:e9:39:ec:e3:8d:
         6b:4a:99:d0:e9:b5:08:3b:13:0b:4d:3d:c7:a9:af:00:33:1f:
         c2:8f:b0:c8:6d:b0:76:08:02:e3:6f:46:ea:af:cb:ae:8b:9b:
         e0:af:a5:76:f2:ae:f0:b2:fd:32:88:ba:80:7a:a8:ae:38:ae:
         71:47:73:8a:10:87:13:1b:dc:8a:11:20:a6:26:41:94:fd:5c:
         4a:de:8d:12:b6:ae:3e:68:56:41:8c:10:1e:fc:4a:1a:68:f8:
         46:10:8a:70:08:a0:bb:f0:9f:db:52:f0:03:31:2f:b3:64:01:
         b8:db:d2:3f:51:23:35:62:ac:22:b6:8a:6c:29:1a:0c:88:25:
         ee:b8:28:53:8f:be:69:66:28:56:6d:b6:72:3d:5e:9f:61:57:
         2a:3f:1d:93:69:15:3b:3b:49:67:c8:91:5f:b1:38:fb:bc:69:
         c8:2d:46:c7:ea:f8:97:26:32:1c:e2:88:25:d2:09:2a:77:98:
         0f:b4:11:c7:fd:42:2d:c1:60:b6:31:6a:0c:82:4d:e7:c6:7a:
         3a:e0:d5:5f:dc:e1:91:83:88:6a:4e:bf:cf:f6:dd:1d:9d:ad:
         fc:a8:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 12:49:44 2026 by rpki-client