Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/1a008aed-6d77-3f19-adac-15583acb9d8d.roa
File:                     1a008aed-6d77-3f19-adac-15583acb9d8d.roa (raw, json)
Hash identifier:          RVbcB4+tdvxPwh4IsEAcdPfkKaPqzFcEOxGzx7U6Kb0=
Subject key identifier:   3C:D0:05:B8:90:FC:D8:91:F4:A0:B8:7B:0A:9E:AD:30:E2:F8:38:34
Certificate issuer:       /CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
Certificate serial:       010D0C9F4328584EBB11A726929F17AF719455C0
Authority key identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/1a008aed-6d77-3f19-adac-15583acb9d8d.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     30437
IP address blocks:        165.156.34.0/24 maxlen: 24
                          165.156.37.0/24 maxlen: 24
                          165.156.68.0/24 maxlen: 24
                          165.156.69.0/24 maxlen: 24
                          165.156.70.0/24 maxlen: 24
                          192.131.184.0/24 maxlen: 24
                          192.131.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:a7:26:92:9f:17:af:71:94:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=b1b375c5-6127-48fd-8dcb-5661e52c2a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:68:be:f9:7f:e9:e2:a6:86:36:63:c8:fe:
                    78:c2:82:71:57:44:c4:7e:39:96:da:e3:34:fa:0d:
                    ea:8d:4a:54:9f:b1:03:55:d8:18:43:5a:77:99:cb:
                    4b:20:85:ff:38:3a:a0:d9:65:7d:10:c9:5d:a4:e9:
                    e7:21:18:57:07:9a:55:df:46:80:b5:d3:f2:08:56:
                    79:87:bd:b4:6d:67:1f:69:51:ab:b9:37:af:b7:54:
                    b3:ff:d1:39:0d:69:8e:95:4e:e6:6d:b4:eb:22:be:
                    c7:98:5e:5b:10:e0:5f:60:a2:a0:be:5f:c4:7e:72:
                    43:83:91:0d:83:03:70:c9:6d:0b:93:2c:88:cf:12:
                    6d:9f:86:01:78:9a:38:21:8c:97:58:25:03:b1:72:
                    32:9e:e2:1c:88:52:5b:86:7e:98:c9:69:05:f4:4b:
                    d3:e4:b2:6a:c6:40:0f:27:9c:0e:d3:90:59:96:05:
                    4f:6b:a6:8e:08:2e:e8:fa:b9:48:ea:9a:17:31:10:
                    cd:7d:19:fb:33:23:2e:15:ba:57:a3:25:2d:c2:f1:
                    7b:9b:ca:f9:58:fc:36:0b:c7:4a:cc:3d:f1:06:55:
                    9c:92:5b:47:aa:d6:92:ad:0b:e3:6f:6b:95:67:25:
                    ad:5c:48:a2:dc:b2:b8:b5:7a:27:b1:04:3d:75:ba:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D0:05:B8:90:FC:D8:91:F4:A0:B8:7B:0A:9E:AD:30:E2:F8:38:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/1a008aed-6d77-3f19-adac-15583acb9d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl

            X509v3 Authority Key Identifier:
                keyid:58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.156.34.0/24
                  165.156.37.0/24
                  165.156.68.0-165.156.70.255
                  192.131.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:54:4f:5a:0b:d6:a2:c7:3b:37:62:6b:9e:d4:92:67:e1:36:
         81:34:7a:72:e6:0f:cf:d4:1a:a9:63:e8:18:1c:53:e2:eb:dc:
         76:db:ab:54:0d:d4:ad:42:26:d7:22:7f:93:5d:1b:25:29:3f:
         3a:1c:06:36:ab:f8:5c:b7:1d:df:61:de:fb:9d:52:59:a2:77:
         c7:08:a5:63:80:6d:cc:b3:71:10:1e:a4:1c:1b:79:5b:84:02:
         69:ac:38:15:a3:2a:d8:0e:ad:89:77:1d:4c:ee:57:e2:12:ba:
         b6:fd:1e:e9:93:02:12:d6:ee:96:e6:ed:53:92:b9:21:fb:ff:
         0b:e6:3f:c9:b6:8f:a3:ce:a0:47:59:cd:eb:4a:c2:b7:3f:9b:
         1a:0a:d8:01:9d:7b:b3:7c:23:7d:ae:b2:b4:d0:44:36:51:df:
         50:ba:3f:51:a1:eb:31:c6:24:ba:46:3d:5d:9f:52:25:02:67:
         e3:26:7f:f6:86:b0:16:6f:2a:56:2c:11:62:34:ea:23:d1:0d:
         32:35:86:61:13:6f:90:de:e4:83:ef:b6:10:9e:f2:78:cb:c3:
         ea:11:54:53:ac:c9:68:ed:d2:e6:5a:b4:44:47:e2:34:bb:e2:
         75:36:5d:3a:56:5b:ad:42:de:54:42:2e:2d:ce:44:e0:36:a2:
         69:d2:13:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:01:14 2026 by rpki-client