Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/d73b04ff-816a-32f9-9a18-c7c0fff075c1.roa
File:                     d73b04ff-816a-32f9-9a18-c7c0fff075c1.roa (raw, json)
Hash identifier:          9jLkb9a97UsOZ6IIs6aA/LTmqfuolfsyEr2WP5z5vyg=
Subject key identifier:   DC:C2:B4:0B:43:5B:BA:91:28:90:D0:78:8D:93:37:D5:66:B4:BC:10
Certificate issuer:       /CN=0a387fbb-813d-452e-8a43-3425e95bbecc
Certificate serial:       010D0C9F4328584E69A4B82575F6B5B3F2C0B700
Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/d73b04ff-816a-32f9-9a18-c7c0fff075c1.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     401333
IP address blocks:        75.98.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b8:25:75:f6:b5:b3:f2:c0:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=572124af-007b-460d-87ec-a902c0236dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5d:c2:ef:1c:58:5b:32:7a:50:6e:93:a8:40:
                    ff:b7:f4:94:22:bd:a2:59:ae:64:3c:f2:73:69:eb:
                    bc:95:f5:ec:7c:96:c5:49:6c:98:ec:04:ea:e5:ea:
                    e1:3f:fd:51:e0:fa:d6:f5:ba:fc:cf:2e:8d:73:26:
                    bd:af:90:44:ac:b6:18:6c:38:14:85:28:ca:9e:88:
                    be:ef:52:e1:98:ae:4d:28:a4:eb:13:9c:7d:d8:4d:
                    87:da:63:c3:86:a3:87:e1:0d:1b:34:c3:78:d2:2e:
                    b1:3c:9f:19:e6:2d:43:34:94:ca:21:c6:9d:c4:79:
                    9a:d1:ee:e5:c2:92:a7:a7:92:c2:c7:73:ea:b8:a0:
                    74:31:ec:82:5e:06:fe:ad:ac:da:82:14:cb:4e:19:
                    8f:c6:b8:f8:12:f9:fd:c9:2f:f8:00:21:90:2e:c1:
                    7d:4e:c1:07:c2:e1:8a:25:05:13:9b:62:57:e6:0e:
                    bb:0f:58:41:a9:ac:6e:35:24:40:60:db:66:2e:d7:
                    3f:f5:61:ba:80:33:c3:7f:e3:0e:0f:be:b4:ca:84:
                    94:f6:50:51:65:be:3e:bb:c7:92:9c:22:12:0d:67:
                    d0:74:29:cd:6c:35:1c:f5:bc:fa:f9:44:3d:fb:a1:
                    23:b0:06:31:ba:e4:35:ca:a9:8b:6e:e0:d1:7b:3d:
                    6a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:B4:0B:43:5B:BA:91:28:90:D0:78:8D:93:37:D5:66:B4:BC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/d73b04ff-816a-32f9-9a18-c7c0fff075c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:a0:e4:39:c1:0d:81:ef:3f:5e:1c:bc:8f:67:53:e0:9a:
         86:8c:26:c3:3d:6b:23:1a:dc:f9:42:c5:93:94:44:6d:f9:ea:
         56:c3:1e:54:35:78:a2:e1:7d:d9:e2:96:39:0e:c0:f7:49:43:
         20:b5:7a:c1:db:d6:e0:00:f7:83:25:d7:94:f1:2a:da:c0:98:
         eb:63:dd:7c:ec:52:8c:de:0c:29:e9:78:fc:ec:65:b2:a1:ac:
         11:e6:e4:06:18:15:3c:7d:d4:d3:5b:04:c7:58:44:91:dd:2c:
         ad:ac:1a:9c:33:28:c2:63:c8:88:c6:7c:39:52:16:ce:71:50:
         81:58:fd:4e:ac:c1:74:a5:eb:86:64:11:de:04:be:68:b7:74:
         5f:35:fe:19:d3:ff:be:1d:dc:16:9c:90:d5:18:67:d5:89:2d:
         88:b0:46:b2:46:5c:4a:b8:f3:6a:53:e3:32:dc:3c:92:44:60:
         45:ba:bb:11:a8:5b:46:7d:5e:c2:b8:01:ac:d7:ec:d6:dd:49:
         04:0b:10:76:a4:c7:41:f2:aa:44:a5:87:a6:24:2f:d1:b5:37:
         03:03:2f:f0:66:57:89:dc:43:25:ba:8d:a5:9e:c2:45:b5:4b:
         70:10:99:95:ed:95:67:bc:4a:d5:e8:32:9d:5c:aa:72:50:fc:
         c9:15:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:46 2026 by rpki-client