Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa
File:                     18c0272f-ec13-3056-9a22-d6bf7861f227.roa (raw, json)
Hash identifier:          Ko3GJjfe7PWItroXL04PJwJ4kzYwuQ3n9PyrbFc03BA=
Subject key identifier:   E3:51:5D:D7:23:61:DE:FE:23:A8:16:67:5A:57:81:E9:F9:48:F9:3C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1B19F716506B90ECADDF4680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        75.158.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:f7:16:50:6b:90:ec:ad:df:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=5dd7208a-682b-4056-97ba-6075c97f9692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:2e:45:87:5a:5d:c4:fa:75:65:15:53:a4:
                    67:c6:ce:fc:b3:7d:e6:3c:3a:fc:f5:bd:1e:aa:72:
                    5b:33:57:8e:60:39:f0:cc:8d:5d:f1:e1:e4:88:82:
                    2a:eb:f0:b1:0e:24:91:88:5e:11:fe:76:08:86:ac:
                    6d:dc:0b:9d:cb:4f:71:69:c5:e1:ce:e1:51:e3:f5:
                    7d:e9:36:bf:11:8c:c8:2e:a1:b7:0b:1b:3e:21:f4:
                    c9:03:4f:e8:09:7d:d4:d8:75:65:a9:48:64:2f:df:
                    e8:62:3a:9c:84:c1:13:f6:24:bb:d8:3b:2c:6d:c6:
                    38:1d:46:d2:8c:94:14:91:b2:35:1c:84:27:f4:3e:
                    a4:29:3e:9f:f3:65:b3:49:a7:22:95:09:69:82:af:
                    80:96:92:87:55:7c:19:76:1c:da:ed:42:52:c1:f6:
                    db:d3:5f:a7:09:e9:69:70:e7:40:42:e2:41:79:98:
                    79:51:5c:5d:02:70:90:f5:53:b3:72:eb:7d:56:21:
                    9f:63:51:ec:ba:9e:17:95:fc:1a:38:c1:9c:9e:32:
                    3a:88:9c:31:92:9b:61:38:d3:ca:83:6e:8a:05:73:
                    95:62:df:2e:a4:22:7c:18:4c:53:e0:af:40:5e:10:
                    57:d9:ec:52:27:26:b9:95:bc:f4:58:50:b9:a8:5a:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:51:5D:D7:23:61:DE:FE:23:A8:16:67:5A:57:81:E9:F9:48:F9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/18c0272f-ec13-3056-9a22-d6bf7861f227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.158.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4a:a9:0e:b8:28:1b:d8:2a:e3:67:28:78:8c:0e:3f:8a:76:
         90:83:8e:54:11:8d:49:b8:6b:6d:d2:b7:b0:11:f3:72:36:8b:
         66:a7:63:dd:8e:87:50:7a:95:18:e1:cc:46:e8:e7:cb:6d:ae:
         c2:21:40:80:3e:01:8d:f4:7e:81:23:78:e3:d1:f2:f6:18:4a:
         1d:ab:74:5e:5d:9c:d3:27:bf:a4:81:cb:0c:25:14:4c:25:d4:
         70:82:4c:cf:6e:b4:5f:fa:8a:57:b9:02:1d:c4:43:47:7d:1b:
         a1:99:47:31:36:29:f0:c6:45:32:86:47:f4:a8:96:0e:b7:b4:
         37:3e:55:a3:6d:56:a3:30:44:ea:92:0c:3d:52:c4:9f:34:44:
         a7:7b:1f:d6:90:41:ac:cf:48:8c:9b:c8:de:bf:04:8e:b1:42:
         02:af:9f:b3:fa:ba:dd:70:cc:8f:8d:92:f1:09:85:0c:45:8a:
         36:24:16:30:f5:4e:b0:5c:42:e7:43:7e:18:e6:77:2b:48:7b:
         1d:2d:d2:5c:b5:fb:df:d0:82:fa:1d:db:2d:2d:c3:4c:76:a4:
         4f:17:33:1a:4c:c7:7e:c8:8a:43:88:f6:f5:4f:cf:d6:be:ce:
         e0:71:59:64:eb:86:d0:aa:0d:31:18:22:d6:6b:ff:79:1e:5b:
         17:26:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:41 2026 by rpki-client