Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/75cf15c3-08c6-3fca-9238-7e3d4e32793a.roa
File:                     75cf15c3-08c6-3fca-9238-7e3d4e32793a.roa (raw, json)
Hash identifier:          rpDSGwhTgj6o7PTfjoLheJw2Bu9T8kD82h1doPNySsE=
Subject key identifier:   5C:FE:D1:CD:B1:21:9B:2C:66:6B:7A:63:69:A1:E4:36:E7:64:2E:08
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584DD7C05920615236F938B86D80
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/75cf15c3-08c6-3fca-9238-7e3d4e32793a.roa
Signing time:             Fri 15 May 2026 14:47:56 +0000
ROA not before:           Fri 15 May 2026 14:47:56 +0000
ROA not after:            Thu 13 Aug 2026 14:47:56 +0000
asID:                     21669
IP address blocks:        209.212.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:c0:59:20:61:52:36:f9:38:b8:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: May 15 14:47:56 2026 GMT
            Not After : Aug 13 14:47:56 2026 GMT
        Subject: CN=2547712d-9023-40bb-8b2f-deb75abc52b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:69:d8:30:e0:83:4e:3f:d2:67:9e:ae:70:
                    9f:99:be:2d:9e:42:90:bc:1e:62:0b:53:00:6c:c2:
                    a8:73:62:84:dd:68:4a:56:99:6b:46:6a:00:e4:7b:
                    89:f7:56:53:6c:5e:93:ea:13:4f:65:1d:93:89:6e:
                    fa:1d:d5:96:29:ee:0d:5b:52:e5:b0:97:2d:af:8f:
                    9a:f2:79:1e:b5:27:59:a1:85:53:b4:2c:93:1e:8c:
                    44:c3:cd:a0:89:5c:27:28:f0:58:28:67:f2:f3:fe:
                    a2:4b:dc:51:42:ae:2f:11:84:75:d1:2f:45:0c:96:
                    ec:c7:27:20:81:5d:bb:a2:d7:09:92:c8:db:e7:d2:
                    96:49:0b:75:90:40:b4:52:af:81:0e:69:e2:d7:a3:
                    5e:2c:1e:89:63:00:85:7c:1f:f8:27:46:44:be:aa:
                    9e:7c:3c:61:ea:99:6e:16:b5:e0:3f:54:63:72:e4:
                    af:70:e3:92:f2:34:01:77:40:e1:7f:e3:17:85:a8:
                    dd:ce:d6:93:23:82:91:4d:d9:a4:46:db:b7:f1:38:
                    13:ea:fe:a0:d9:ad:2c:b8:56:32:ce:c8:9f:ce:9b:
                    d4:b8:c3:de:9a:9d:8c:a7:7a:49:d1:b9:00:33:95:
                    e9:fd:b6:c8:10:53:bb:93:54:75:23:0f:a5:04:96:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FE:D1:CD:B1:21:9B:2C:66:6B:7A:63:69:A1:E4:36:E7:64:2E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/75cf15c3-08c6-3fca-9238-7e3d4e32793a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:07:04:5a:73:e6:c1:a4:68:41:95:99:28:07:66:7f:8e:ca:
         03:bc:84:19:9d:0c:17:a9:f4:9b:83:3e:15:13:98:53:f4:aa:
         bc:6e:a1:a3:d8:c4:c3:b9:0e:dc:cb:d5:82:25:a3:f4:82:33:
         c6:e7:7a:c2:73:e9:65:7a:19:1a:1a:9c:19:84:0b:1f:9c:e1:
         4d:db:d2:09:60:6b:01:18:36:46:94:c2:10:40:d8:17:6d:4b:
         af:6e:17:81:ea:29:bb:2d:89:c5:34:a3:f7:22:76:86:49:42:
         08:68:d0:74:72:13:bc:3e:58:f3:b1:8e:55:84:c4:f1:8f:a7:
         44:a2:9a:df:63:da:7d:9b:a5:97:7c:19:cc:02:b3:01:a6:6e:
         71:28:82:cc:be:67:40:ae:61:72:61:2f:5f:6c:ce:a5:27:d1:
         bc:ff:89:7b:63:fa:b7:64:60:e7:73:01:a0:c9:27:3c:cd:90:
         b6:4e:fc:43:eb:09:69:6a:c9:3f:56:a3:48:fb:53:2d:ad:0f:
         79:12:dc:ec:65:94:7d:3c:6e:89:9e:fb:46:16:6c:3a:89:fa:
         58:63:6e:7d:20:9c:3b:87:5f:d4:40:62:d1:d3:00:b9:58:09:
         15:ab:63:23:4a:98:b2:ab:4f:1f:2f:8f:c2:ba:c3:69:0d:56:
         7d:39:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 21:59:57 2026 by rpki-client