Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa
File:                     91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa (raw, json)
Hash identifier:          SA6scNc8QrFSzNP66/64XQSZae1xtUxqQ31/MkCFvYU=
Subject key identifier:   F9:E5:95:CF:2E:9E:96:B7:AC:52:78:8D:CF:89:A7:B7:25:24:E0:E6
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E35FF1F93AD28110A9A7B2C38
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     3477
IP address blocks:        192.67.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1f:93:ad:28:11:0a:9a:7b:2c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=9b5c68c8-e4a4-4e92-9892-9556ab1f7913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:da:21:fe:2c:97:aa:86:44:9b:ca:52:7f:
                    cf:2a:46:d2:07:39:eb:7c:04:96:77:94:92:1b:69:
                    34:7a:0c:8d:b3:12:32:19:3e:4e:20:60:5b:66:8e:
                    57:c4:70:f2:18:02:86:47:63:7c:15:96:96:14:a8:
                    63:13:5c:2c:a5:4e:b1:dc:75:1b:c0:5f:f1:35:cc:
                    d8:d8:31:5e:56:ac:92:cb:a5:6a:7e:3c:29:f5:fa:
                    f7:11:62:73:96:42:d8:11:7d:4a:7b:cd:3d:7c:ca:
                    a8:32:43:a8:c8:a0:98:d8:d2:3e:5c:ae:cb:07:4b:
                    0c:35:5e:38:a2:99:29:be:2a:de:29:0d:95:11:a2:
                    1b:76:34:df:c1:f6:cf:42:dc:0d:cd:aa:f5:62:e0:
                    f6:92:95:e1:ac:73:b5:ef:49:8a:f0:0e:5c:46:8a:
                    c2:2b:ba:5e:08:6d:14:7b:cc:2c:36:a1:8b:a2:23:
                    e6:49:28:6f:59:4b:ff:9a:50:9b:bc:e3:38:6b:03:
                    e0:a1:a1:cc:06:59:95:fb:17:d2:10:80:68:1e:28:
                    5d:d9:22:94:39:ba:b1:05:41:59:fb:b3:2c:3a:f5:
                    18:00:19:fb:22:b0:e1:00:86:a7:a7:3c:98:3b:11:
                    0e:e2:26:a4:7d:cb:d2:d8:e7:87:21:54:45:a5:52:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E5:95:CF:2E:9E:96:B7:AC:52:78:8D:CF:89:A7:B7:25:24:E0:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/91c4cc2b-2ddc-364b-bd79-68bfbd9f9928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:9e:0d:3b:bb:7e:7b:5c:a1:80:9c:12:4a:2a:de:40:40:
         06:62:bc:91:ea:f0:f5:32:9b:10:c9:eb:5e:a7:74:0d:43:a6:
         3a:67:ae:26:1b:48:cc:5c:60:21:64:9e:91:d0:e5:04:09:d9:
         72:86:52:f7:1c:92:93:4f:49:05:a7:b9:35:45:17:3e:f2:61:
         1b:85:10:21:36:85:14:b9:2b:f9:ac:cb:18:ea:f6:84:3e:5e:
         a3:36:cb:cf:47:21:2c:b7:d1:8f:a9:46:f9:6d:8f:ab:5d:18:
         f4:f4:11:2e:b7:ac:9b:c2:50:12:8b:d4:fc:5a:3f:e3:8d:de:
         f3:5c:b7:77:f9:30:9d:2c:07:51:38:12:eb:d2:71:87:1e:c8:
         2c:59:1a:8b:47:fe:b5:d2:63:1f:3b:63:e7:68:76:d9:a6:36:
         e8:f6:d6:ec:46:37:ef:78:50:d3:ae:95:4d:9c:13:53:9c:2b:
         14:fe:01:9a:c0:3f:f2:d8:ab:e9:c6:a6:88:e4:34:cc:b5:7d:
         cc:32:e7:00:c4:28:a0:18:5f:55:48:95:25:6b:f8:b5:15:6e:
         04:d0:3c:34:8d:a2:44:c8:89:05:83:2b:46:f2:8f:82:d1:98:
         c4:f6:77:8a:89:7d:f6:34:41:a7:2a:34:a0:86:35:a8:a3:5b:
         50:88:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 22:58:44 2026 by rpki-client