Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/734911ed-0ef9-3e59-a888-de01a45d4bc7.roa
File:                     734911ed-0ef9-3e59-a888-de01a45d4bc7.roa (raw, json)
Hash identifier:          rtHlZJwWWOf0rQ+Z5FChirYkfMbdpYMQVNynhkih8Pc=
Subject key identifier:   A3:07:B8:43:AB:36:0A:90:19:BF:8F:FD:A4:8F:69:64:B9:47:06:9A
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584EBC62DED50B8E8E527C6C6410
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/734911ed-0ef9-3e59-a888-de01a45d4bc7.roa
Signing time:             Wed 05 Aug 2026 12:19:42 +0000
ROA not before:           Wed 05 Aug 2026 12:19:42 +0000
ROA not after:            Tue 03 Nov 2026 13:19:42 +0000
asID:                     16509
IP address blocks:        137.175.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:62:de:d5:0b:8e:8e:52:7c:6c:64:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Aug  5 12:19:42 2026 GMT
            Not After : Nov  3 13:19:42 2026 GMT
        Subject: CN=be40dcf5-2690-4c21-9753-485008eff3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:d2:f7:1c:c5:ae:8a:3d:f0:62:ba:6a:55:
                    c1:de:96:9d:78:68:26:1e:6b:7a:1b:16:d6:56:e6:
                    a4:06:46:1f:42:9c:a3:a1:06:c7:b9:d2:fd:62:f2:
                    4b:7c:7b:cb:3d:a6:f6:a1:80:f4:0d:0e:d1:1e:22:
                    32:0d:67:79:77:bb:dc:7e:7c:cd:3d:2b:3b:65:73:
                    3c:97:57:6f:cc:78:49:e4:82:fc:3e:a3:69:bb:3c:
                    2e:0a:5f:46:f8:94:6b:b0:8d:38:da:dd:2f:00:72:
                    aa:59:a1:db:8f:fa:b8:6d:b8:af:d2:f8:a8:14:3b:
                    41:e5:f8:db:09:22:b7:65:46:fa:b0:70:a8:d3:48:
                    b9:ec:d4:e4:e4:e0:da:fb:d9:2e:4a:ee:bd:34:8b:
                    cc:9f:ad:c0:43:ab:1e:1e:eb:23:b0:c9:fd:e7:e2:
                    6d:8e:1e:da:e8:28:2e:4e:9d:f7:4b:0d:0c:49:8c:
                    a7:a5:f5:4d:f0:00:b1:4c:61:4c:86:a4:51:f2:48:
                    ee:2c:d8:7e:3a:26:d1:f4:b4:57:b7:ac:68:e5:45:
                    57:f7:3d:4b:82:a7:bf:e1:86:e6:07:cc:7f:52:f8:
                    02:fc:9b:13:c1:2a:9b:78:31:84:ae:ef:86:b0:95:
                    20:2b:cc:b2:a0:61:44:53:3c:e0:6a:b3:4f:2b:0c:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:B8:43:AB:36:0A:90:19:BF:8F:FD:A4:8F:69:64:B9:47:06:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/734911ed-0ef9-3e59-a888-de01a45d4bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.175.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:36:44:35:0b:f6:92:e2:a5:79:9e:48:22:02:f6:ed:e0:9d:
         cb:44:5f:9e:80:7d:dd:dd:fb:04:16:c5:bf:2c:18:39:35:1d:
         06:c5:41:b7:a4:60:9f:a8:05:06:b8:5e:3f:7b:29:6b:a4:49:
         36:4e:ce:68:03:0e:8d:e3:29:9b:14:88:d8:fc:54:4a:2c:77:
         c6:d4:c0:e8:9a:85:4f:7c:8c:c4:07:45:2c:f1:ef:bf:d9:e6:
         21:d5:e8:41:73:29:da:a4:85:5a:4d:85:90:8d:0d:2a:c1:01:
         aa:02:fe:bb:ed:fe:69:8d:17:a2:10:d2:a1:0f:df:90:24:f0:
         db:28:d0:2f:f4:58:5c:0e:dd:92:4c:75:8a:cc:21:90:f8:90:
         9e:66:fe:d8:94:20:cb:73:e1:4b:2b:fe:a0:68:a4:c5:aa:11:
         6f:bf:28:3a:05:5a:65:6b:55:c2:5c:c9:f0:31:5d:0b:b5:d1:
         fb:0c:58:74:3f:97:5c:83:f5:60:f1:28:05:13:92:ef:5a:d3:
         8f:27:48:5f:80:90:dc:a8:4c:1a:de:74:d8:3b:80:97:ad:09:
         ed:a6:16:0c:38:e8:64:d8:00:08:42:fe:42:96:0f:d8:4c:c7:
         e8:fa:7d:be:28:41:b1:cb:d5:a8:78:69:d8:54:0b:35:1f:87:
         71:58:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:10 2026 by rpki-client