Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/2a61bf7a-6b4a-3b4f-9edb-cdd77c54017a.roa
File:                     2a61bf7a-6b4a-3b4f-9edb-cdd77c54017a.roa (raw, json)
Hash identifier:          SxvDTw5kf6I8dgHA4M4HoCylxaC+GXbVnhznhnyGEqE=
Subject key identifier:   16:06:EA:8E:E4:5C:0F:A3:DB:3E:D9:E4:54:51:02:78:0A:54:3C:78
Certificate issuer:       /CN=0a387fbb-813d-452e-8a43-3425e95bbecc
Certificate serial:       010D0C9F4328584E69A4B7F058A771A017F52600
Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/2a61bf7a-6b4a-3b4f-9edb-cdd77c54017a.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     401333
IP address blocks:        75.98.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b7:f0:58:a7:71:a0:17:f5:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=27e304c3-0d95-4458-acf9-e163e0c69f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:27:93:5b:53:7a:21:00:3d:60:b2:af:cc:
                    12:85:db:c7:95:8d:c8:9f:e3:1c:01:33:d1:b6:b1:
                    74:c6:29:8f:dc:b4:46:4e:cf:64:9c:e8:75:d3:26:
                    f7:2c:3d:3d:a1:e8:7d:e0:58:c0:ef:7a:b6:85:81:
                    6b:67:71:d8:6f:96:bc:d7:f7:d9:a9:c8:f2:56:5c:
                    ca:55:d7:33:06:c5:27:e0:6b:80:9a:12:81:07:76:
                    f8:fe:77:7b:d5:9e:c7:87:fb:d8:83:fb:e8:4d:3e:
                    8b:99:24:43:cd:eb:f1:3a:b6:33:05:89:53:18:79:
                    ea:55:b2:f2:45:37:3d:bc:3e:4e:06:a0:ec:5c:ee:
                    ed:d5:c2:ca:32:bc:bc:72:7e:4a:a6:03:22:61:24:
                    ef:65:23:4f:65:dc:f6:93:e2:5e:67:2a:f4:5f:5a:
                    81:6f:cd:7f:f6:51:70:a2:6a:3e:a5:03:ff:61:39:
                    eb:ad:fa:e4:ab:ec:f0:70:df:90:71:9b:93:33:37:
                    95:fa:6e:7b:e6:36:50:88:8a:d1:18:1c:b1:54:aa:
                    bc:c4:ce:ec:02:bc:c5:b8:5b:08:ae:b0:2b:c6:b1:
                    93:03:78:b8:76:f1:72:48:d3:8e:e2:6b:c8:16:c0:
                    39:4e:b4:46:26:5c:8e:87:5d:b2:01:d5:9c:f4:0b:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:EA:8E:E4:5C:0F:A3:DB:3E:D9:E4:54:51:02:78:0A:54:3C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/2a61bf7a-6b4a-3b4f-9edb-cdd77c54017a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:cb:6d:fb:14:5f:1d:11:58:b3:17:5d:f9:9a:ef:36:de:06:
         85:16:6a:a0:c7:b9:7b:78:83:e2:5f:54:ab:c9:6a:c3:70:d6:
         f0:24:42:d0:3b:09:24:60:f2:be:39:99:78:d6:dd:2a:b2:41:
         75:9b:76:aa:f0:cb:b7:ba:3b:4e:78:a7:a3:e2:a2:e4:ad:e4:
         6a:b9:2e:4f:98:54:1c:d3:13:dc:ae:96:ae:35:99:c8:61:36:
         e5:ce:93:d2:a9:52:cc:a5:c9:2f:2e:32:df:26:54:a3:86:a7:
         f3:e5:63:17:2c:af:77:73:9e:85:25:02:11:48:a6:dc:df:21:
         be:af:7d:e7:95:38:92:d5:7f:7c:a1:6a:5e:7f:e9:80:52:c7:
         42:13:13:f4:28:4c:00:b4:bc:a2:8c:c5:4f:e5:9a:c9:d5:47:
         df:b7:84:68:ce:57:2e:98:be:25:5b:c4:ee:71:c7:3a:01:11:
         42:d6:1b:5e:f5:7a:c4:95:f3:e0:8a:f6:3f:fd:00:bf:a6:ad:
         b7:f3:19:af:16:30:9b:ab:d1:e1:cd:74:24:82:e9:a5:0e:02:
         3d:bc:69:d7:cc:92:63:ed:e0:50:68:2e:9a:b3:28:cd:eb:28:
         17:40:16:54:03:5a:cb:82:6e:09:f4:a5:3f:f7:94:ad:3c:db:
         1f:1d:3c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:23 2026 by rpki-client