Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31c40046-ba59-3ffd-b20c-62d17f0aa6a1.roa
File:                     31c40046-ba59-3ffd-b20c-62d17f0aa6a1.roa (raw, json)
Hash identifier:          VHFHG8YKpVBs+bNw7hELG86bEB90n6UzAXEFzry+I2E=
Subject key identifier:   30:20:E4:AB:6E:87:46:A5:84:43:DB:EC:66:7E:E5:9C:1F:89:AD:CD
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F71ED7D306917F550BE245DC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31c40046-ba59-3ffd-b20c-62d17f0aa6a1.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     50131
IP address blocks:        75.153.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7d:30:69:17:f5:50:be:24:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=ee472f74-da76-4d56-b377-7a50d85665be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6b:25:d0:bc:50:89:c3:86:42:b7:f4:36:14:
                    1f:2b:df:eb:95:26:92:e7:53:92:d0:87:77:91:52:
                    a2:27:a2:50:75:12:85:f6:a3:8e:58:a3:3a:c7:87:
                    bc:a4:eb:55:43:92:f9:e6:95:1d:42:e0:7f:24:a3:
                    f0:77:30:dd:31:11:fc:35:12:a0:36:17:1c:4e:2f:
                    74:d6:e9:8d:e5:af:07:a0:31:4f:94:f5:90:03:87:
                    07:db:7a:cf:8e:c9:0b:8f:10:e2:38:bf:27:a8:82:
                    6b:b0:c3:22:37:4a:ae:fe:f2:1d:0d:72:63:4e:21:
                    71:52:f5:c2:fd:66:01:b0:87:33:96:e8:ce:72:e3:
                    39:d6:ea:a3:bc:0b:0e:3f:34:46:ac:89:65:20:52:
                    d9:e8:b7:b0:b0:44:90:15:15:56:33:bd:41:c8:9b:
                    da:de:0e:9d:26:e0:ce:a1:85:18:4a:1c:51:c7:f9:
                    b9:e5:e4:4c:9f:cd:3d:a8:52:87:5d:78:db:23:a8:
                    28:e6:89:9b:0d:3c:be:22:d2:cb:7e:1d:a3:45:7b:
                    c1:7c:6e:85:0a:0c:5c:3a:81:eb:4a:d6:86:98:48:
                    1d:dc:10:25:b9:fe:a1:4e:b7:1c:4c:2e:bd:63:ff:
                    8b:e3:e2:00:25:9e:fd:61:db:d1:cd:a8:15:bd:d9:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:20:E4:AB:6E:87:46:A5:84:43:DB:EC:66:7E:E5:9C:1F:89:AD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31c40046-ba59-3ffd-b20c-62d17f0aa6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.153.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:7a:3a:9e:97:22:66:3c:86:54:37:19:ef:98:54:2f:e5:06:
         77:87:61:a8:0e:c8:c5:0e:fd:7e:c8:d7:d5:2e:08:2c:fd:48:
         34:33:d2:f2:4e:c7:9a:b2:1b:27:5c:df:3d:45:53:08:a6:17:
         70:67:11:c0:6d:32:00:cb:9b:81:fd:cd:4d:f5:36:c4:44:88:
         30:a9:1f:f1:24:b9:d8:3d:24:a8:40:76:34:f4:7c:29:1c:e7:
         af:8f:05:41:4d:c9:a4:95:7e:58:c4:99:86:e8:ce:19:14:eb:
         43:6f:fa:43:8d:f7:c6:08:5a:61:29:85:fe:ae:03:d9:4a:bb:
         7e:ce:a8:bc:a6:ef:9b:4a:5b:cf:52:38:0e:53:a9:c4:c5:2d:
         42:3c:2c:3c:04:57:d2:19:d1:de:df:f0:1b:c1:c6:36:a4:a9:
         81:ee:9f:c6:82:9e:f5:f3:55:84:14:da:03:43:13:1f:96:85:
         1e:1a:12:90:2c:b6:1e:63:74:78:87:4f:f5:e1:42:49:c8:2f:
         98:65:00:0e:98:5b:79:c8:47:ba:d9:00:4c:89:64:4b:ac:81:
         dc:a2:cc:dc:d1:f0:75:af:c0:7b:91:2f:c3:e6:ed:54:ea:7d:
         6a:ba:cb:ff:21:6e:0c:1b:d4:a9:bb:25:9f:3d:b0:94:a4:42:
         13:7b:d3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 02:05:08 2026 by rpki-client