Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/32b0db24-d0f9-313b-8b34-1014fdbce25b.roa
File:                     32b0db24-d0f9-313b-8b34-1014fdbce25b.roa (raw, json)
Hash identifier:          sv22rS4L2OKwse//EmCAezI3vcHIzAmKtxhCUSVvAr4=
Subject key identifier:   B3:5C:FE:AF:EA:DE:27:5D:92:C6:59:FA:57:75:94:28:3C:3F:94:E5
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584E4824B75F0243AE03E25D2A00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/32b0db24-d0f9-313b-8b34-1014fdbce25b.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     16737
IP address blocks:        75.127.122.0/24 maxlen: 24
                          75.127.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:b7:5f:02:43:ae:03:e2:5d:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=c3152b86-9901-4573-82fd-5fb4f32db104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:54:4e:e2:ea:1d:7f:0c:54:b8:51:8b:6c:18:
                    a2:19:f7:f4:6c:ae:94:03:8d:73:76:fd:ff:6d:30:
                    7f:ba:cf:83:33:e8:9b:3e:d2:1b:e2:8d:41:7e:5f:
                    b6:7e:ce:b4:39:40:55:ee:37:a6:5c:3c:25:28:4a:
                    ab:c0:16:62:7c:1b:88:b4:02:cc:9c:2f:9f:d9:9b:
                    34:35:84:1e:24:d9:16:a4:08:68:6a:f2:65:5e:ee:
                    fe:8c:8c:7d:bb:73:e7:58:f1:c8:1c:04:c5:6c:f5:
                    87:54:88:2a:6a:3b:9c:d5:c7:d0:ae:d6:c9:f5:71:
                    fb:d6:e2:aa:0c:49:c1:e6:3c:8f:52:6a:05:79:98:
                    20:11:12:45:a0:39:04:a0:f0:e8:47:0b:90:9b:ed:
                    20:50:05:cd:3b:5a:53:15:8f:07:c8:1d:88:f7:d6:
                    bf:8c:33:39:4a:d3:e3:12:d9:cb:65:23:a2:c6:4e:
                    25:00:77:44:8d:f2:af:03:aa:73:e4:fe:2b:0b:43:
                    62:28:f6:20:02:ac:c2:a2:36:28:78:40:7e:45:2f:
                    4f:29:b8:88:bc:0f:3b:ce:6e:d6:8a:ec:d6:2b:db:
                    ae:32:0e:26:e3:3a:02:a8:35:fb:a4:9c:6b:2c:c5:
                    f5:0c:83:20:25:d3:fc:80:68:8b:7a:cc:7e:d3:a7:
                    85:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5C:FE:AF:EA:DE:27:5D:92:C6:59:FA:57:75:94:28:3C:3F:94:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/32b0db24-d0f9-313b-8b34-1014fdbce25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:be:0d:e7:10:38:2e:bb:20:59:41:cd:fd:37:e7:49:8a:91:
         03:43:5c:96:ad:9e:2a:2a:d7:86:57:fe:bc:6d:37:fb:d0:ba:
         0d:75:4a:06:a3:8c:ea:14:09:33:9c:bf:41:2e:b8:2a:c1:9f:
         a3:5c:04:9b:fa:55:16:f0:a6:8c:18:c4:a0:c9:5b:75:ca:5d:
         62:64:13:03:0a:6b:4a:2f:66:1f:35:ba:22:b7:2f:82:70:4c:
         20:49:52:fe:b1:af:fa:2f:2b:3a:92:e0:fe:47:fa:99:d8:a3:
         04:0d:a9:14:fd:c0:cf:3c:97:8f:d5:22:ff:ce:5b:a4:a7:f8:
         fa:53:0f:52:44:27:f0:91:04:64:32:99:b4:a3:31:d8:58:e7:
         94:56:70:01:a5:d6:17:54:78:c7:dd:31:ea:d6:67:2a:be:b1:
         4b:88:d4:a8:e3:ea:ad:04:86:22:01:2e:41:41:dd:2d:39:0c:
         b5:9e:be:72:04:c2:9d:c7:7a:f8:94:a4:c9:04:67:82:9f:25:
         19:5a:dd:51:22:fb:ff:54:46:22:87:ba:68:24:04:f5:9e:68:
         d7:25:7d:a0:c2:89:53:8f:a9:5d:af:e4:17:7c:37:18:d2:e0:
         98:e3:ce:38:08:f7:0f:03:81:c6:63:fc:17:01:08:90:9f:27:
         d5:8d:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:42:44 2026 by rpki-client