Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/b75e9789-d89d-3bf9-833d-1c8d79b74f60.roa
File:                     b75e9789-d89d-3bf9-833d-1c8d79b74f60.roa (raw, json)
Hash identifier:          SuRajyiQw9umLGKmaZlmXe//i8sWOcxzHtk3x7bRISc=
Subject key identifier:   47:46:0A:A4:63:76:B3:83:E4:D7:D9:6A:9A:37:A2:44:2D:C2:48:FD
Certificate issuer:       /CN=97ba4c39-c242-4d94-905d-4f71d6178f79
Certificate serial:       010D0C9F4328584CB121AD800554266BC9960880
Authority key identifier: A9:FF:FA:20:07:D8:F7:04:33:B2:3B:A8:35:44:31:F7:BA:6C:06:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/b75e9789-d89d-3bf9-833d-1c8d79b74f60.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     8075
IP address blocks:        162.253.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/97ba4c39-c242-4d94-905d-4f71d6178f79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/97ba4c39-c242-4d94-905d-4f71d6178f79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:ad:80:05:54:26:6b:c9:96:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ba4c39-c242-4d94-905d-4f71d6178f79
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=576e2da3-4ec1-4303-9f0b-d2f01c345120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:01:93:da:a5:c7:b5:a5:d9:d9:f9:27:40:
                    64:e7:39:8d:d9:36:f0:dd:24:47:fb:60:66:1d:b2:
                    96:9c:7a:9e:6b:80:41:ca:f8:12:1d:a5:59:ce:db:
                    32:ff:89:55:6d:39:93:bd:61:d9:dc:a7:2b:eb:96:
                    11:e6:78:f2:78:da:a3:95:08:a2:b6:5a:f9:ae:1d:
                    86:db:5f:10:f9:78:11:3c:a9:e4:6a:42:32:52:6f:
                    f1:44:68:4c:df:02:eb:f6:66:5c:45:77:9e:51:00:
                    01:99:35:d7:15:32:93:78:e4:c4:26:cb:cb:a2:4d:
                    5a:60:6b:82:e0:83:c0:bc:61:bf:6b:af:7c:df:6e:
                    c4:91:4f:24:35:dd:28:40:00:4d:64:93:87:5a:6f:
                    6d:f7:37:c4:47:9a:7f:10:74:9c:bc:8a:b2:8d:59:
                    eb:c4:27:35:16:42:23:23:6f:50:6f:9f:c1:24:a2:
                    9c:49:00:7c:09:75:3c:2b:9a:c0:f3:07:a1:d8:b7:
                    f1:ee:b2:4a:04:cd:c2:a7:ff:e7:1a:72:3c:20:36:
                    e3:6f:72:7c:14:07:fc:c8:4a:13:5b:52:d2:09:66:
                    6f:a5:e6:1b:fb:1d:5f:2f:a8:4a:97:95:f7:f6:70:
                    95:8b:71:26:06:55:cb:5b:2b:09:f0:ff:ec:4e:82:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:46:0A:A4:63:76:B3:83:E4:D7:D9:6A:9A:37:A2:44:2D:C2:48:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/b75e9789-d89d-3bf9-833d-1c8d79b74f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79/97ba4c39-c242-4d94-905d-4f71d6178f79.crl

            X509v3 Authority Key Identifier:
                keyid:A9:FF:FA:20:07:D8:F7:04:33:B2:3B:A8:35:44:31:F7:BA:6C:06:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97ba4c39-c242-4d94-905d-4f71d6178f79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:06:64:5d:8d:b6:47:c2:b2:37:1c:a0:53:03:94:23:a9:1b:
         e0:ef:a2:c8:88:a1:12:4b:94:b4:90:bc:02:03:73:b1:2f:a8:
         08:b5:0e:b6:35:1e:45:b6:a5:c2:5b:75:f9:37:49:88:17:0e:
         3f:09:6d:7f:29:22:af:71:7b:aa:03:be:86:69:04:af:71:07:
         ca:ca:99:1e:88:24:66:02:ea:7d:11:7a:3c:a9:06:cf:e0:85:
         17:ed:e3:56:df:cd:7a:db:a0:b3:86:d9:26:74:6b:d3:79:8d:
         ca:cf:12:12:91:13:0e:82:3e:af:b6:5a:34:29:ce:22:88:59:
         20:e4:3c:90:3f:53:eb:84:d8:db:df:94:53:76:29:d9:aa:fe:
         06:f5:8f:c9:f4:35:60:7e:32:26:0c:24:61:0b:af:50:63:e1:
         da:ff:f2:7f:ac:6b:9f:81:4a:69:09:c6:0a:99:41:16:34:67:
         8d:5c:8d:c2:aa:e7:59:69:f7:bb:3c:71:5f:26:84:76:1b:c5:
         4e:01:03:a1:c8:0d:d2:e6:a1:ab:a8:60:a3:de:cd:52:76:79:
         20:34:ff:d9:39:e8:ba:b3:81:b7:ef:3c:de:fb:0b:ac:36:33:
         e3:ae:6e:c8:cc:06:ce:cf:6a:c3:62:6e:37:57:f5:08:3a:b3:
         62:30:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:53:27 2026 by rpki-client