Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/75d8735e-8b74-36e8-979c-a7bb06d3753a.roa
File:                     75d8735e-8b74-36e8-979c-a7bb06d3753a.roa (raw, json)
Hash identifier:          EwTcF6QtAbVZtoTpshax/TzDkoWcw8SIDY5lJk+Z8io=
Subject key identifier:   4F:4D:E6:6F:11:9E:A6:FF:66:2F:A1:2B:8E:9B:46:BD:62:D5:B7:FB
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64F752D4B9E40EB4F82800
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/75d8735e-8b74-36e8-979c-a7bb06d3753a.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        170.130.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f7:52:d4:b9:e4:0e:b4:f8:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=82dbaaff-5b04-4435-9d47-6003debc07c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:a0:15:94:52:38:c6:8d:df:65:fd:7a:ed:
                    ce:aa:d9:26:bc:94:52:0f:76:b2:3d:72:11:81:f3:
                    53:4b:e5:d9:17:8c:da:03:20:52:7e:e2:81:25:2e:
                    5c:ad:cc:e6:b8:9c:f3:e4:bc:97:69:8a:43:cf:af:
                    9c:1c:8e:02:6c:95:3a:aa:8b:2c:aa:05:4c:ad:b4:
                    73:a9:cb:e6:74:ed:7c:b6:ba:b5:74:d5:af:1c:18:
                    8d:2e:70:ca:ce:23:59:d7:00:4f:d1:56:2d:d3:5f:
                    c3:9a:4d:90:ec:48:cb:d6:6e:61:bb:32:50:ee:81:
                    19:f1:00:3b:0b:a0:0b:05:58:04:ce:3a:31:28:d1:
                    91:85:c8:3d:6b:28:73:e6:55:22:38:db:63:a7:be:
                    12:9b:c8:e3:b5:b7:90:eb:48:06:de:ec:72:45:76:
                    29:57:9b:05:8c:f0:6f:31:be:ec:97:74:3b:72:7e:
                    f9:82:6f:0a:d3:7d:af:0a:b7:c2:e0:4d:52:95:7e:
                    45:1f:b0:45:5b:32:d5:5a:29:1c:e8:c3:42:1e:54:
                    90:41:93:28:1a:38:6f:4c:6a:e4:20:11:6d:f4:2f:
                    d8:4b:96:a5:90:16:87:f7:3a:88:86:7b:e8:4e:03:
                    fd:61:ae:d7:75:e2:6d:d9:64:1d:f5:b8:aa:12:28:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4D:E6:6F:11:9E:A6:FF:66:2F:A1:2B:8E:9B:46:BD:62:D5:B7:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/75d8735e-8b74-36e8-979c-a7bb06d3753a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:56:e7:55:24:d2:12:82:93:c9:1b:fd:c2:21:de:f9:4a:
         94:23:4b:89:84:f8:15:cf:86:65:23:73:88:98:44:7e:0e:c0:
         8d:3b:5b:2f:ed:90:ee:96:fb:2e:9b:df:b9:26:8c:f6:71:c1:
         83:c9:ef:80:f2:1e:8a:17:82:39:62:85:d9:c4:7d:e6:61:11:
         0e:0c:56:9f:11:95:fd:43:de:38:59:dc:de:5e:98:92:39:08:
         35:98:11:12:ca:5d:78:26:93:ac:29:af:65:e1:bb:f6:9c:f0:
         1a:56:46:12:9d:1c:ce:1a:55:af:04:ef:d9:00:db:c7:4b:b0:
         90:dd:b8:1b:fe:ed:a3:8c:9c:11:40:0c:59:0a:7c:08:84:5d:
         ea:df:3f:92:0d:b9:67:83:92:94:e3:41:6b:a4:b4:a4:54:b8:
         84:75:45:2c:ab:e9:6d:6b:0d:ef:7c:81:25:01:a7:9a:9f:5b:
         1d:bf:0f:04:87:36:87:76:95:b9:31:a0:85:00:43:d2:69:b9:
         e1:31:9b:b4:1c:98:6f:ff:6e:80:1a:53:e6:70:0c:62:1b:bc:
         85:e2:89:e3:97:c0:f2:c4:da:36:ee:c1:b1:45:e4:d5:87:00:
         09:63:1f:3a:0c:50:43:45:51:e6:4e:d6:13:16:4b:9d:4d:63:
         93:31:d5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:26:23 2026 by rpki-client