Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7a782562-e930-302a-9395-5bafe8b14a3d.roa
File:                     7a782562-e930-302a-9395-5bafe8b14a3d.roa (raw, json)
Hash identifier:          QkUEwehh/aDG9m+rzcJyOEL1Tcb4qSFs4ZkkxtAkAwM=
Subject key identifier:   E4:0D:15:66:70:11:78:10:5A:57:8C:65:69:D7:81:77:F9:90:49:6E
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584D24E11501D9C1F97F514586C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7a782562-e930-302a-9395-5bafe8b14a3d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     3477
IP address blocks:        137.75.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:15:01:d9:c1:f9:7f:51:45:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=25b39277-b8df-4ace-9826-4eb34cb7a9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:63:c8:7d:5b:fd:68:81:c9:c6:b9:2e:76:75:
                    53:bf:ce:36:31:a7:fb:bd:02:3d:0e:14:42:18:1e:
                    ce:a6:1e:23:26:df:1e:12:0b:c5:5c:5b:43:3c:71:
                    45:97:37:97:e2:5b:28:f3:08:c3:19:eb:af:51:95:
                    91:d2:01:6a:f2:43:79:65:62:1a:be:50:6d:86:ac:
                    67:1e:20:e8:93:46:90:90:9d:a9:41:ca:87:d1:84:
                    22:03:7d:ef:72:d9:c3:e7:cc:7e:7c:58:b2:14:b4:
                    69:19:5a:af:5d:f4:85:72:07:c5:51:bb:ff:b1:4f:
                    5d:4d:70:3f:63:b4:c6:61:80:0b:b4:32:ca:26:03:
                    ee:6d:d8:09:6e:7c:03:aa:a4:90:e2:33:16:2e:43:
                    0b:2c:3c:9d:50:b5:d0:26:a6:09:aa:85:60:de:6c:
                    1b:8e:a3:b7:c7:43:4d:69:83:27:67:fe:0c:af:93:
                    11:15:2f:b4:e2:d0:06:b3:16:80:74:79:b9:80:d6:
                    22:12:cc:a6:5d:4f:f2:e2:1e:fa:8c:55:5d:14:93:
                    0b:94:11:85:84:10:2e:76:9c:53:5e:1a:e7:15:e0:
                    ae:bc:a8:bc:76:2c:7e:11:ee:67:92:e6:6d:22:1c:
                    0e:9b:10:cc:03:b8:6e:4b:67:22:f8:71:9c:de:f4:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:15:66:70:11:78:10:5A:57:8C:65:69:D7:81:77:F9:90:49:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/7a782562-e930-302a-9395-5bafe8b14a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.75.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:17:72:b5:b2:e3:d1:a9:df:25:86:ff:97:41:bc:94:55:2c:
         25:97:67:b6:27:cd:84:ac:ba:ae:f1:d9:ec:7b:69:3a:82:ea:
         c5:2e:d6:0b:30:8a:ef:5a:49:23:47:2d:b0:59:76:5e:ed:68:
         a7:06:e9:65:5e:f6:2f:e3:54:95:be:05:9a:c6:91:04:0d:2f:
         7c:32:75:53:37:ca:69:2b:d0:72:e0:87:6f:4d:80:22:d0:ad:
         40:46:8f:77:a7:94:83:57:9f:c0:f9:ff:56:01:a0:af:de:7f:
         60:09:50:da:1f:60:b4:e1:28:8e:f2:b9:c8:7c:7e:d0:fd:90:
         81:2e:80:17:b2:b9:81:3c:f5:76:b7:3f:b8:f8:fc:5f:cd:ed:
         45:57:c5:8e:15:de:70:f2:12:3a:17:26:ff:b7:3c:35:9d:80:
         45:1d:99:4d:07:8a:a6:ec:bf:37:22:c8:0e:3e:8b:cd:f1:f3:
         5e:49:82:ef:ea:ba:9c:d4:0c:63:6f:ae:8b:a8:f8:74:c8:92:
         39:50:f8:a4:64:63:d7:a4:80:15:0f:c6:50:d8:cc:62:9b:b8:
         cd:21:0e:01:69:c1:e3:8d:f9:bc:94:4c:60:b5:a7:30:06:93:
         ac:85:9f:ed:61:67:1d:ad:0b:35:75:a5:6a:79:66:07:70:e0:
         b8:60:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:10:21 2026 by rpki-client