Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c7319c96-5418-3e89-8e33-5105678496f1.roa
File:                     c7319c96-5418-3e89-8e33-5105678496f1.roa (raw, json)
Hash identifier:          pWiX1AK+6XgSb9/aIiG1GoWzNLXdOFU1cLWZhJ187AI=
Subject key identifier:   AD:DA:48:9D:8C:1A:CE:3C:BA:BD:E4:BC:CC:D0:2D:5D:9D:E0:E5:9A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74C5C69D9D04D2BC702C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c7319c96-5418-3e89-8e33-5105678496f1.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     33363
IP address blocks:        75.114.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:4c:5c:69:d9:d0:4d:2b:c7:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=57caefcb-6e6b-48fd-b9cc-c7280fa01f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:be:fd:ac:d9:05:51:1d:76:21:7a:4c:2e:
                    e4:e8:c6:df:51:4b:46:3f:56:ef:a2:88:3c:6c:59:
                    8b:aa:c3:8c:e3:85:50:d7:50:14:c9:a8:ff:f3:80:
                    de:de:c0:a2:1f:6b:87:47:de:f7:6e:fc:f5:e0:20:
                    c5:5d:3e:41:44:b3:56:1f:7f:0d:4d:85:de:61:37:
                    4f:5a:12:d2:78:b8:94:21:c3:4f:2d:95:15:a8:ae:
                    86:3a:86:66:60:e3:a5:16:01:d5:43:fd:4c:96:30:
                    8a:82:d3:81:c7:4f:6a:97:22:b3:07:ab:09:44:ca:
                    b0:2c:0c:ac:5e:59:d3:b5:b0:0c:51:b3:15:2b:d1:
                    24:30:ed:0a:83:6d:b0:ac:51:6b:d2:a8:2b:82:d5:
                    5a:48:13:66:57:eb:94:20:a3:d2:26:1e:4d:0c:3d:
                    42:12:d4:dd:bd:10:78:a5:71:43:f2:e8:64:8f:6d:
                    1c:7b:87:8e:50:e3:2f:36:5d:ea:59:da:4a:30:a3:
                    80:f8:1c:36:7b:5d:78:c7:f1:b9:ba:30:8b:54:51:
                    ad:32:3a:40:b4:fc:d9:83:d1:5d:88:a9:de:e6:45:
                    5e:8d:12:27:f3:d4:a3:e5:e6:6a:e7:1c:b9:b3:70:
                    4e:f2:91:43:24:72:8a:39:6f:33:19:49:08:7c:06:
                    a8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:48:9D:8C:1A:CE:3C:BA:BD:E4:BC:CC:D0:2D:5D:9D:E0:E5:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c7319c96-5418-3e89-8e33-5105678496f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.114.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:b3:67:2f:88:5d:36:10:73:11:dd:3d:d2:2a:60:5e:36:
         4e:82:ce:af:9d:1b:a4:76:8e:f5:1e:bc:3f:ae:4a:00:b0:d3:
         a3:b5:fe:db:e4:47:f1:76:46:0f:ca:3b:54:85:a0:e0:c5:50:
         dd:d2:62:43:c9:90:94:3b:a7:fa:27:81:b3:b2:93:c7:2a:4e:
         2e:ad:20:55:0b:05:1f:fa:17:6c:33:9d:7b:c2:36:32:38:d8:
         98:cd:e6:8a:86:58:ed:e1:fa:3d:67:fa:ce:5a:f4:51:af:ce:
         01:fc:17:25:43:ed:52:e4:ed:e0:9a:c2:f4:fd:04:ed:7f:f0:
         15:5b:ad:9a:28:67:15:f6:86:17:63:f3:61:d2:46:fd:d2:0d:
         a7:d0:1b:4f:9a:37:c9:9d:4b:79:0b:ae:a6:f4:d6:f4:76:30:
         d6:7c:c3:80:0c:19:30:16:a5:7d:c5:6f:c9:3a:0f:54:0c:d6:
         98:0e:8c:9c:3c:5f:aa:d4:22:3c:74:67:f8:35:fc:e2:89:13:
         50:fb:7e:31:b3:4b:f5:1b:b3:89:0e:b4:04:56:53:47:91:c9:
         41:fc:3a:05:f4:1a:0c:07:0e:7a:c5:02:cb:65:68:3d:08:f1:
         10:9d:86:54:f8:5c:c0:fb:b0:6f:f4:72:0c:92:42:9e:eb:e5:
         ca:bd:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:03:44 2026 by rpki-client