Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/3938fb8f-39fd-32e5-9d2d-50b71aa0bf51.roa
File:                     3938fb8f-39fd-32e5-9d2d-50b71aa0bf51.roa (raw, json)
Hash identifier:          XJuQ8lCjRLgPjOxsvept112MzbExWQsveLu1NmxVXyU=
Subject key identifier:   54:44:7A:8E:2B:2F:30:42:79:79:BC:7C:EF:C3:C7:D7:2E:E1:99:05
Certificate issuer:       /CN=0a387fbb-813d-452e-8a43-3425e95bbecc
Certificate serial:       010D0C9F4328584E69A4B80A5EBA5EA62F71E5C0
Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/3938fb8f-39fd-32e5-9d2d-50b71aa0bf51.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     401333
IP address blocks:        75.98.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b8:0a:5e:ba:5e:a6:2f:71:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=df5334cb-aac5-4936-bb27-04a2e1ae6fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:14:cb:7b:30:1c:2e:49:9e:14:8a:86:62:
                    45:7d:96:fb:2e:39:90:99:40:75:03:ab:39:89:87:
                    7b:b2:17:35:26:84:15:9b:6a:43:40:97:04:ce:15:
                    1a:67:93:ce:4c:f8:be:d3:b3:2d:c0:90:a0:de:c2:
                    26:ba:0e:12:65:5f:3f:6e:09:dd:49:9a:4d:a4:86:
                    c3:c7:6e:b8:6e:ba:0e:da:67:47:1e:01:3d:42:75:
                    90:06:13:4d:12:ff:5d:99:14:1f:29:bc:88:3b:4b:
                    08:cc:aa:de:e1:dd:94:86:3e:99:49:a6:47:da:67:
                    c2:04:c0:c1:4f:70:7d:b7:bb:0e:9f:10:49:e0:5f:
                    1f:ac:48:69:8c:9a:54:5e:cd:76:9c:83:fa:df:74:
                    b2:97:32:11:74:d9:cb:39:fc:f6:2d:61:23:e8:e2:
                    88:b1:db:57:65:c6:e1:5a:2b:f1:40:ce:80:c1:82:
                    5a:1b:b8:27:a7:78:44:76:50:eb:3e:53:95:45:a8:
                    8a:13:1d:17:fe:3f:25:d0:78:b3:05:ec:2f:77:de:
                    e0:c0:07:9e:6d:9a:84:1b:b3:ea:cf:7a:a3:88:63:
                    b4:e2:72:a5:70:c4:98:54:c3:7d:a6:09:21:ba:fc:
                    a2:65:76:c1:ba:14:88:ff:59:24:84:24:8a:65:4c:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:7A:8E:2B:2F:30:42:79:79:BC:7C:EF:C3:C7:D7:2E:E1:99:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/3938fb8f-39fd-32e5-9d2d-50b71aa0bf51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e4:2a:93:3f:70:b5:9a:b0:fc:bb:2a:18:6e:2d:2c:58:90:
         a5:e0:99:66:d4:37:3e:a3:ca:67:db:56:d9:6f:5e:ad:5a:cc:
         f6:20:33:54:df:cd:1f:38:c5:f4:23:a9:0c:01:9f:cf:97:39:
         f8:23:9b:24:94:e0:3f:3a:7e:30:78:9a:fd:1b:09:3d:55:2c:
         fa:f6:55:7a:79:b1:33:e9:50:a0:13:44:76:f1:06:91:89:ad:
         19:e5:82:67:e2:68:f2:9a:f1:13:f5:1b:e4:1e:cf:26:a0:7e:
         ad:63:f1:fd:e7:c9:bc:66:64:31:1f:38:ac:e5:d2:61:ee:b7:
         27:ef:b5:5a:33:08:12:54:a5:4a:14:b8:6b:1b:8b:43:9b:70:
         d0:3f:ac:d6:7d:9b:95:c3:4d:ba:3d:c7:21:46:00:ff:67:8f:
         a1:9d:90:10:75:d7:31:7e:b1:1d:46:e1:ff:83:d2:10:5d:a8:
         01:48:32:9c:38:c0:36:37:02:63:4c:83:48:3e:4b:af:3c:24:
         c4:0a:45:87:e6:c3:80:d9:62:26:74:be:0b:b1:0f:3d:e5:bc:
         aa:d4:2e:8b:93:ac:02:7d:60:fa:6b:6f:75:e2:24:e0:2a:a5:
         4f:18:3d:22:39:e3:15:1a:d4:92:2b:41:75:bf:92:1a:30:43:
         85:cd:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:13 2026 by rpki-client