Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57c916cd-453b-3f8d-be61-2b267b2de21b.roa
File:                     57c916cd-453b-3f8d-be61-2b267b2de21b.roa (raw, json)
Hash identifier:          SBild9HFq2Vm6zd/rrUp1cNF3Ubt+NK7tM3pszn2di8=
Subject key identifier:   95:87:63:2E:1E:09:2C:F2:C6:7D:6F:42:FB:98:E0:16:39:08:0E:C3
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584D8C44575859B87637B94DB810
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57c916cd-453b-3f8d-be61-2b267b2de21b.roa
Signing time:             Sat 18 Apr 2026 13:52:27 +0000
ROA not before:           Sat 18 Apr 2026 13:52:27 +0000
ROA not after:            Fri 17 Jul 2026 13:52:27 +0000
asID:                     20473
IP address blocks:        137.175.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:44:57:58:59:b8:76:37:b9:4d:b8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Apr 18 13:52:27 2026 GMT
            Not After : Jul 17 13:52:27 2026 GMT
        Subject: CN=64e2b650-4362-44b5-b707-e621dfbefcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:08:8e:a6:53:3a:82:42:3f:4b:b6:ae:f4:
                    9c:65:6b:95:21:ff:7d:f6:bb:1a:95:c3:a5:60:1a:
                    0c:eb:32:0e:ae:26:5e:aa:09:8e:3b:2d:72:40:80:
                    79:99:60:7f:99:10:58:7b:fa:56:ea:46:d2:22:d8:
                    93:98:fc:18:f3:e6:46:85:db:9e:19:60:81:55:b6:
                    55:a7:a9:b6:e2:01:39:e1:df:66:e8:5f:89:f2:c1:
                    67:ca:45:16:46:0c:8a:f0:cd:56:09:92:9d:da:15:
                    b0:bd:6f:89:6e:97:a3:70:6e:d1:4d:df:7f:f9:7c:
                    5b:98:0c:eb:9b:e1:0d:54:2c:ec:8d:24:9a:de:51:
                    81:52:f3:89:2f:ea:e2:3f:26:88:2b:13:90:ac:79:
                    48:cb:d8:a9:d7:4c:e1:37:ad:65:9e:34:ea:6b:28:
                    55:20:f5:b8:8b:5b:6d:7e:8f:c9:66:f2:40:4b:93:
                    e4:c6:9d:07:f7:5a:f1:e3:5b:e7:d1:e0:43:c9:11:
                    f3:06:79:63:4a:8d:55:78:7a:ac:21:e6:a7:2a:0f:
                    28:37:3b:11:e4:55:c9:62:b7:e2:17:3d:bc:d8:5f:
                    da:0b:6b:fa:38:c8:e3:ed:35:2b:5d:60:c8:13:09:
                    4c:70:4b:92:e6:ad:2f:9a:d7:05:c6:8f:60:14:cc:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:87:63:2E:1E:09:2C:F2:C6:7D:6F:42:FB:98:E0:16:39:08:0E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57c916cd-453b-3f8d-be61-2b267b2de21b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.175.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:9a:8f:cb:ab:55:60:25:b9:e2:fd:d5:e3:45:e1:4a:47:f7:
         f2:85:9b:82:3d:1a:b0:09:1b:26:99:26:5e:2e:39:67:1c:03:
         78:9d:21:e3:62:3d:cf:8e:b5:0a:d0:54:cb:d4:ba:91:62:fc:
         b3:a2:3a:ce:51:46:27:37:10:08:dc:32:7b:30:7f:fa:6c:65:
         6e:df:b3:fb:2e:ee:3c:cf:51:b5:21:e5:51:bb:f2:75:4f:f0:
         bc:41:78:f5:07:f0:b3:c9:3f:bf:12:4a:fe:27:20:ef:32:84:
         f4:7b:21:36:ef:ea:3c:d3:8d:6f:b3:29:e9:7c:45:9f:e9:ac:
         e1:00:af:14:07:21:e1:96:63:0f:e8:ef:a9:d9:21:7b:34:8c:
         7c:8c:6a:c1:e7:77:ed:c4:de:0e:ab:ec:7f:42:93:f0:52:c3:
         50:b3:d1:e2:9c:9c:12:9e:fb:8a:f8:25:6f:2a:c6:c2:73:f1:
         0b:23:2a:dc:92:66:ca:a1:46:86:66:f5:74:69:47:73:12:ac:
         af:67:58:3c:0a:c8:65:4a:bc:27:f4:37:08:70:4c:01:a6:4c:
         6f:7b:75:ca:96:a1:47:46:8f:1c:5b:a4:7b:56:0e:59:5b:ed:
         52:b7:49:18:7c:fe:43:94:f3:00:af:94:3c:94:6d:2c:7c:aa:
         ea:fe:58:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:08 2026 by rpki-client