Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b26e0c0-499d-3530-acfa-44c145846cb8.roa
File:                     5b26e0c0-499d-3530-acfa-44c145846cb8.roa (raw, json)
Hash identifier:          61fw4t9HsSXV3SqVtn8gWntgvIvY1GsUKb1zgSfUfGE=
Subject key identifier:   B1:C6:E2:B7:43:6C:C6:FB:35:F7:6E:6D:7C:0F:79:88:4F:EB:78:77
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E9EAFE9AA49160C9DE46F3300
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b26e0c0-499d-3530-acfa-44c145846cb8.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     0
IP address blocks:        192.133.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e9:aa:49:16:0c:9d:e4:6f:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=d328f800-217a-4b18-a39b-66318d7c8abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:97:9e:67:35:44:4c:4c:64:38:8c:65:d9:
                    46:31:0e:9d:04:c6:27:dc:e3:09:20:42:cc:fb:45:
                    20:7a:89:ec:8b:29:32:54:73:ad:0d:7e:0a:9a:73:
                    36:e0:ad:92:77:26:7e:ec:e1:11:42:0e:0f:35:3a:
                    cc:e2:0c:d4:13:26:30:df:61:7e:85:08:5f:19:49:
                    59:15:ee:fb:a6:d0:2f:f5:d1:92:40:cc:8d:de:15:
                    5b:0d:d5:71:a3:4e:39:c5:b1:e4:30:43:c1:5b:3d:
                    09:81:96:33:25:af:ce:01:27:6b:a0:1f:d7:79:17:
                    22:b5:d3:2c:2d:1e:a7:02:dd:c2:97:ba:30:b4:96:
                    72:0f:34:6b:2a:5d:75:cd:98:69:c5:5c:4a:d0:2c:
                    dd:9e:7b:89:62:a2:d8:72:48:d4:7c:8b:1c:76:a3:
                    41:e7:36:be:bc:5d:e8:bb:b4:b4:98:39:81:e6:c6:
                    60:29:6d:1b:a9:32:d8:5a:e5:8b:3d:93:1b:0e:1c:
                    47:3c:fd:e5:ee:97:07:dc:78:70:f5:d3:8b:f5:47:
                    0d:04:1e:16:10:2a:3e:78:48:97:8d:c7:d2:15:5c:
                    6b:d2:09:a0:18:e5:74:4b:08:36:1f:e1:31:ec:85:
                    fa:fe:b6:01:18:56:95:76:0b:33:f1:72:93:bf:62:
                    e8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C6:E2:B7:43:6C:C6:FB:35:F7:6E:6D:7C:0F:79:88:4F:EB:78:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5b26e0c0-499d-3530-acfa-44c145846cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:11:b5:91:81:e5:b5:a4:9f:f9:ce:6a:c7:77:cc:81:e2:1a:
         9d:d3:d8:ce:a4:1c:ad:72:a8:ce:ab:6d:db:0c:be:79:33:c7:
         73:d7:1e:a5:55:af:43:15:89:30:1c:bb:ca:20:52:0f:a9:32:
         62:15:7a:00:5a:a4:6c:5f:d8:80:b7:ea:8c:35:96:db:49:5e:
         e7:0e:e1:50:4d:9b:f0:2e:e1:93:65:39:87:55:ba:70:46:48:
         d1:c4:34:6b:e2:c5:ea:e0:2c:ec:fe:04:ba:fd:75:2d:e7:37:
         50:ce:17:21:e6:fd:22:25:b7:45:0f:d1:03:fa:8b:28:2e:95:
         63:18:4d:ce:53:3d:8a:bb:5d:19:63:1d:d4:25:f1:eb:c7:26:
         8b:f8:10:11:38:ad:2c:10:9c:83:c4:21:48:72:6d:18:8a:36:
         eb:c4:8f:99:d1:b7:bb:7b:34:ce:4d:e1:2c:d7:3b:1f:ea:d3:
         78:c2:d0:a3:16:89:e4:1b:53:b2:02:a7:9f:49:de:28:5b:e6:
         87:f6:a0:2e:2a:1f:e8:0b:f8:47:b9:6a:da:47:6e:50:9c:2e:
         19:b6:06:a2:91:6d:f8:c6:02:2d:0d:bf:b9:ba:55:9b:64:a4:
         a2:90:7d:3a:8a:8c:95:58:98:a5:d2:99:6d:54:00:08:60:5c:
         1d:a5:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:32:40 2026 by rpki-client