Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6e621e97-30c0-3c4e-b360-16b7278d5818.roa
File:                     6e621e97-30c0-3c4e-b360-16b7278d5818.roa (raw, json)
Hash identifier:          tVCCnx1NLCoZBokqb8rFSD2kzJl+EI16lD7Qs3xn6VU=
Subject key identifier:   C3:30:30:41:E3:1C:81:55:1B:D1:0A:2E:B9:67:09:8B:16:5A:47:C6
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584F7BB2E1823AB33EA134895600
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6e621e97-30c0-3c4e-b360-16b7278d5818.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     3477
IP address blocks:        192.35.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:e1:82:3a:b3:3e:a1:34:89:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=872f9974-5930-4e53-84a5-b3499844db1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:ff:99:ef:2f:d5:e3:2a:a8:9d:79:96:1b:
                    b7:5c:da:3b:d7:4b:5d:93:24:fc:2c:79:ee:70:3d:
                    6f:d8:49:6f:43:65:e1:8d:49:67:47:b6:42:e9:3d:
                    4d:06:82:fc:49:ab:fb:5a:4a:80:cc:3a:46:9b:73:
                    58:76:30:5c:c4:3e:35:50:bf:fd:3b:53:4b:dd:f1:
                    06:89:b4:87:bd:a5:74:40:ee:e9:fb:c5:3f:82:f8:
                    3f:3d:91:cb:78:bf:36:0d:7f:f0:20:ea:b5:c4:16:
                    79:e6:e1:85:79:fc:03:06:44:e7:32:3e:c5:70:55:
                    49:91:99:f0:28:4d:85:1d:f1:5f:a1:d8:85:7c:5c:
                    cf:27:3c:5a:6c:1f:15:99:a0:9a:d7:b0:28:6e:80:
                    be:0c:ef:36:d3:05:7c:ba:a8:b2:0a:71:8e:a4:e9:
                    9f:c8:3b:60:be:00:b1:96:ae:97:01:bb:9b:76:7a:
                    29:c0:ac:e3:54:96:0e:87:92:28:e1:33:6e:48:20:
                    a3:b4:86:0e:c2:c2:9a:50:b6:d2:1a:5b:71:c6:5b:
                    cb:29:81:75:42:71:19:2f:e4:55:af:e7:d9:7a:a2:
                    4c:b8:13:53:fe:2f:5e:24:b1:13:01:c2:5b:3c:73:
                    77:1b:66:90:24:62:e6:ac:d6:90:99:9d:61:15:90:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:30:41:E3:1C:81:55:1B:D1:0A:2E:B9:67:09:8B:16:5A:47:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/6e621e97-30c0-3c4e-b360-16b7278d5818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0e:25:3f:04:63:a9:58:ff:18:48:5a:43:23:7a:57:6e:42:
         09:17:ba:8e:7b:4d:0f:02:7c:2f:99:fd:bd:c7:4e:b2:ce:85:
         bb:21:4b:fd:40:62:82:a6:ac:6b:5c:8b:ed:4d:ff:c5:66:04:
         05:7e:54:6d:4f:31:87:d6:9e:c4:91:c5:a2:87:85:c5:b1:da:
         5f:2f:28:33:09:f7:14:6b:35:79:70:44:c5:22:72:53:ea:73:
         d9:b8:80:fa:8d:74:b8:ae:af:38:22:40:e7:75:ba:7c:fc:66:
         fc:11:83:e5:ff:64:10:57:83:87:88:49:11:c5:7c:5c:26:c0:
         61:6b:98:f2:79:66:da:e8:56:27:6c:b3:19:5f:a9:37:a6:a2:
         3a:59:fa:f8:82:01:06:2a:79:2c:d5:35:41:e6:d6:01:5c:43:
         4e:10:3e:ca:c8:ae:4f:96:17:ce:41:3a:5d:7f:f1:8e:9c:ef:
         e5:48:cc:43:4c:3a:37:04:34:ca:ce:fd:85:e0:e3:25:54:81:
         07:45:52:cf:ed:2d:5e:23:a5:4a:cc:c4:4e:97:98:a4:d7:eb:
         f9:08:5b:59:0b:a9:bf:1f:34:be:44:dc:24:40:ec:6f:66:a3:
         80:6a:ef:8b:5a:26:9a:e4:a8:51:7b:b1:28:39:25:e6:3a:5b:
         38:f0:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:59:17 2026 by rpki-client