Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1dabdef9-f02f-3ae3-8244-e9933c4663eb.roa
File:                     1dabdef9-f02f-3ae3-8244-e9933c4663eb.roa (raw, json)
Hash identifier:          ZHGlKBOTzf+7drtFHHofX7NG0YS2HJ/6NuGVeFgnC4Q=
Subject key identifier:   28:B1:6D:87:03:E0:D1:61:6F:18:8B:8F:9B:F8:5A:4D:00:23:60:B4
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EBC62C12CF466BBD37894AC00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1dabdef9-f02f-3ae3-8244-e9933c4663eb.roa
Signing time:             Wed 05 Aug 2026 12:19:28 +0000
ROA not before:           Wed 05 Aug 2026 12:19:28 +0000
ROA not after:            Tue 03 Nov 2026 13:19:28 +0000
asID:                     14618
IP address blocks:        137.175.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:62:c1:2c:f4:66:bb:d3:78:94:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug  5 12:19:28 2026 GMT
            Not After : Nov  3 13:19:28 2026 GMT
        Subject: CN=20f34381-d022-496d-b2e0-3b491f57400b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:04:f6:8d:3a:63:25:7b:71:ad:f7:ac:fa:
                    d5:70:1b:ab:94:31:f5:90:90:f0:f0:a9:b8:d3:b1:
                    8b:21:d9:4c:b6:83:84:de:d8:0b:92:6e:2b:bd:ce:
                    c1:b1:83:8e:77:cd:a1:3e:66:a2:76:20:67:4a:2c:
                    4f:98:05:b2:db:61:ce:f2:ca:44:cd:04:cb:5a:62:
                    75:52:6d:b7:24:13:68:13:b8:88:12:9c:7e:97:14:
                    e5:bc:04:de:f8:c5:62:d1:21:bf:3b:ba:11:a7:8d:
                    45:3b:d0:b9:3e:37:a6:75:76:27:53:e7:fb:26:b4:
                    31:ea:1f:bc:de:c7:e4:80:40:9c:43:13:42:c4:02:
                    dd:32:ff:3b:ba:4c:de:e3:dd:93:c2:76:48:5b:0a:
                    af:25:d3:ab:b5:fe:cd:32:97:62:e5:83:70:25:3b:
                    48:de:c4:d4:85:18:d5:34:42:e6:12:a7:77:9a:43:
                    5c:c8:5a:e3:84:1c:13:26:e2:72:fd:e5:04:1f:bd:
                    20:11:da:fd:05:d9:61:b7:34:34:29:4b:ac:4b:db:
                    9f:40:a4:86:f4:2d:96:ae:4d:6a:6f:9f:82:e7:5e:
                    93:f6:63:f7:35:2d:9b:74:fb:84:f3:82:96:4c:28:
                    b3:8a:2d:75:22:4e:54:51:14:53:f8:bf:e0:b0:d6:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B1:6D:87:03:E0:D1:61:6F:18:8B:8F:9B:F8:5A:4D:00:23:60:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/1dabdef9-f02f-3ae3-8244-e9933c4663eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.175.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9a:5a:22:18:91:3e:a1:97:83:0f:1e:7f:18:bd:ce:93:ca:
         c0:e0:5b:8e:45:18:d9:24:d1:ff:21:f1:d8:9c:1e:b0:fc:ab:
         83:86:76:db:ad:3d:6b:a0:b8:5d:b1:1d:3c:cd:51:53:e4:1e:
         78:55:1c:2a:f6:a0:11:60:a4:43:8c:95:1e:9c:8d:5a:b5:5d:
         5a:0f:2e:0b:0e:fc:bb:17:63:6b:ce:b1:64:5b:2d:0f:61:75:
         a0:02:18:a2:91:13:b7:91:7d:fb:e8:bf:a9:3d:a3:b9:b0:b6:
         79:d1:ab:19:f1:db:20:90:27:3f:ba:ce:23:ae:a8:ef:8d:ee:
         bb:9b:9f:dd:76:37:3c:16:10:4d:2b:33:66:f8:e9:2c:c9:bf:
         cb:c4:e5:55:da:0b:19:7e:ee:17:61:ef:07:a3:0c:b5:3e:c5:
         d4:ab:e9:88:d6:ec:7e:50:73:e9:bb:b0:cf:03:c0:8a:0b:dc:
         c8:13:75:b3:72:f8:2e:fe:ed:4b:24:3c:b0:41:f1:12:d3:f6:
         a2:73:55:69:df:85:2c:3f:6f:f9:f3:e7:b4:df:9c:05:42:f5:
         c9:61:0f:e3:e7:6a:d4:07:1c:1b:c5:88:fe:0e:5f:35:cb:ec:
         d6:55:fd:e4:80:cf:02:e6:c8:d4:2f:25:31:90:7d:5d:f9:c4:
         1f:3c:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:38 2026 by rpki-client