Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d0d4be3c-dd38-3a4d-8650-560e3c598965.roa
File:                     d0d4be3c-dd38-3a4d-8650-560e3c598965.roa (raw, json)
Hash identifier:          kkwdoxXWh14P+VOClcCQ0Pei8hFUIhTo1WBzJ4dYBIA=
Subject key identifier:   21:D9:6A:C3:27:B5:D4:52:72:6E:48:D4:D9:D9:36:84:5D:EE:53:BA
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584E9EAFE58C6A2309F043D0CDC0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d0d4be3c-dd38-3a4d-8650-560e3c598965.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     0
IP address blocks:        192.67.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e5:8c:6a:23:09:f0:43:d0:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=c32dcb17-1f5d-46cc-a570-3a4e736fb102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:14:87:23:12:7e:c6:d0:ba:05:95:1c:6f:
                    39:09:c2:98:7a:19:4a:6e:e5:4e:ec:11:93:6e:9e:
                    63:9f:9d:cd:16:b2:9f:f9:79:83:95:4b:63:14:2e:
                    56:8e:c2:86:bf:02:d0:29:45:05:8e:5b:2a:c9:23:
                    d2:94:b9:31:5d:23:a5:7a:c7:45:54:90:05:74:45:
                    f6:93:06:18:9b:d8:03:94:33:3c:ea:67:b9:28:c3:
                    13:54:b0:ba:db:4d:10:da:a5:c2:40:f7:b0:7a:ae:
                    88:ed:1f:c7:06:4c:3e:76:ca:44:4a:fd:01:0d:c9:
                    ab:ad:d9:ae:30:2a:cf:56:de:07:e0:84:00:66:73:
                    41:1b:ec:72:27:60:be:9f:d6:2d:91:c4:ed:3c:d0:
                    82:cc:a6:7a:b1:e4:81:13:f4:cb:a6:47:d5:be:2d:
                    00:99:3b:26:f0:c0:43:51:06:08:8f:28:60:f6:50:
                    97:d6:fc:f5:a2:f1:da:00:7a:cd:b6:8e:e8:f4:d0:
                    ba:f4:cb:56:e2:68:d1:ba:ee:0a:72:d3:25:c9:ed:
                    c5:00:d6:95:f1:15:1f:60:06:5f:98:72:c0:b4:77:
                    cd:51:9c:67:71:3a:ce:17:e3:80:54:d9:8f:ec:7f:
                    fa:b9:5d:ff:29:3a:05:5c:ad:a6:19:1b:b1:36:10:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:6A:C3:27:B5:D4:52:72:6E:48:D4:D9:D9:36:84:5D:EE:53:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/d0d4be3c-dd38-3a4d-8650-560e3c598965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:7d:04:81:7c:f8:dc:25:5a:8f:b2:f6:9d:71:1b:4c:b2:30:
         a1:45:e5:f6:b7:06:8f:9b:82:4a:ee:23:63:53:38:45:e9:97:
         c2:93:7c:d1:34:e1:b4:cf:77:7e:eb:b4:ea:2b:ee:b9:01:41:
         d1:6b:89:0b:a9:74:56:5d:49:12:a8:0c:7d:50:59:ca:5b:9e:
         d0:35:e8:1d:8a:cf:4b:80:f4:c8:f7:b5:4e:5f:e6:7d:47:b7:
         6f:c3:3f:36:48:7b:50:1e:e3:ca:7d:9f:2a:07:c1:0d:3e:f3:
         51:a9:fe:92:0b:a8:d4:27:b8:7a:9a:e1:4c:bd:27:a2:d0:29:
         98:5a:7c:9b:ee:fc:c8:cf:3b:eb:5b:b2:ac:70:f1:09:f6:c5:
         d5:5b:3a:7b:e7:ff:a2:b2:af:54:6f:2f:92:cb:bf:82:bd:ef:
         5a:85:68:2b:a1:48:d8:0c:ae:05:20:88:e5:fa:15:af:f5:8a:
         41:ad:ef:27:58:4d:9f:d8:c7:c4:33:1e:00:05:67:d5:37:78:
         50:f5:59:c2:6a:56:41:1b:2a:a8:2f:72:97:75:be:94:54:f9:
         58:76:af:11:7c:2a:65:be:e0:8a:53:89:94:bf:07:df:a0:c9:
         df:12:b2:ae:91:7d:fc:a0:77:2c:91:f6:a3:68:4e:4a:0e:a5:
         66:e3:86:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:32:40 2026 by rpki-client