Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/56dfb3ee-18ca-3774-8d5f-a7128dc3207d.roa
File:                     56dfb3ee-18ca-3774-8d5f-a7128dc3207d.roa (raw, json)
Hash identifier:          Yf/paoquOS79Nw5/DWZ/6y5a/N+q33D5oVVw/3Zfcqg=
Subject key identifier:   3A:FA:58:8B:6B:FC:82:BA:7F:78:1F:41:4D:BF:E0:38:36:2E:4E:C9
Certificate issuer:       /CN=0a387fbb-813d-452e-8a43-3425e95bbecc
Certificate serial:       010D0C9F4328584E69A4B885FB794B8BE6849B80
Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/56dfb3ee-18ca-3774-8d5f-a7128dc3207d.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     401333
IP address blocks:        75.98.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b8:85:fb:79:4b:8b:e6:84:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=1bfab3c2-231b-4064-8012-45e9385a232b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:04:d3:75:41:ab:eb:80:0d:b1:78:28:6c:9d:
                    f5:62:6e:61:61:83:b9:25:6e:23:41:3f:37:7c:a4:
                    b2:be:e1:6e:9f:2f:7b:63:e9:76:3f:cf:6e:4e:34:
                    49:ad:e6:e2:6c:3b:f3:06:3f:fa:cd:2a:31:ea:3c:
                    b1:d4:66:00:0a:49:b4:86:fc:58:9b:ee:e8:69:7b:
                    17:42:21:68:8c:7c:5c:f5:d7:53:45:2e:2d:da:cd:
                    cf:c8:d7:13:6a:90:6c:77:49:90:47:cf:1c:0d:f7:
                    21:ba:d7:bf:46:d1:43:31:ea:41:37:83:3e:9d:76:
                    b7:a9:ce:3f:de:12:86:bf:ed:50:75:56:d8:be:98:
                    f9:3d:6a:a1:6c:e3:86:4c:d5:0b:7b:f2:29:a9:9e:
                    30:fe:f7:4b:10:f9:05:0c:20:9d:dc:8e:63:d5:c0:
                    64:46:18:16:98:58:3c:6f:e2:13:27:94:3d:f0:6b:
                    c1:1f:64:32:5f:e7:ec:e6:d3:d7:1c:de:43:1d:09:
                    be:c7:d9:77:52:c0:63:6e:36:2b:80:db:e7:4f:8e:
                    a9:1c:89:b1:e0:51:7d:ef:86:b8:90:88:bc:cf:ff:
                    2d:ae:0e:50:15:bd:b6:9f:1a:8d:22:f9:80:b4:82:
                    af:d8:fb:f6:45:c1:81:61:b1:87:b0:5d:7a:f0:60:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FA:58:8B:6B:FC:82:BA:7F:78:1F:41:4D:BF:E0:38:36:2E:4E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/56dfb3ee-18ca-3774-8d5f-a7128dc3207d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:51:be:35:50:e4:b1:a1:c8:1e:15:e7:0f:48:e2:36:d3:
         3b:e2:fd:c9:09:42:d3:42:4a:82:d7:50:f6:e0:27:0d:04:95:
         de:25:f1:ab:43:bc:7c:4a:2f:94:11:3a:b1:8d:42:d4:4a:79:
         62:65:ff:28:31:62:63:d6:58:f4:90:42:7e:ab:dd:a4:52:f9:
         05:dd:5e:e2:9e:1e:55:ee:b2:03:ef:fb:6d:9e:03:8a:bb:1c:
         e6:60:92:ad:f2:11:c7:ba:32:7d:bf:9d:56:04:d9:44:3a:2b:
         5e:10:4c:c7:ba:13:84:8d:77:73:03:79:a3:fe:fb:2c:ef:55:
         0b:e9:f1:14:cb:ef:19:13:2b:94:ff:dd:3e:52:01:cd:1c:18:
         8d:e1:e3:7f:68:63:2a:94:bb:ac:83:aa:67:5e:ca:9b:40:ac:
         53:e2:ab:30:83:83:f5:e2:69:9c:06:01:c8:7b:e1:5b:a5:9c:
         19:9d:08:3e:b5:54:88:1e:bb:8d:98:b7:40:fa:0a:dd:ff:29:
         b4:fb:f8:77:62:1e:b8:38:5e:0a:28:d0:d3:d8:f5:f8:e0:d9:
         6f:70:73:c9:01:2b:67:b8:bd:70:90:88:c9:03:82:56:a6:60:
         e1:3e:5b:1c:83:9a:b3:5b:d4:75:30:17:19:d2:44:fd:db:ef:
         7a:75:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:45:55 2026 by rpki-client