Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/cf704735-2c1f-3415-ba58-cd8074a98a85.roa
File:                     cf704735-2c1f-3415-ba58-cd8074a98a85.roa (raw, json)
Hash identifier:          EhgwB147XI5lrCfH0pGkskC25NnmhnJofzxhvkzfOFw=
Subject key identifier:   A1:67:C7:83:44:DD:0F:68:09:7D:47:E1:0D:8F:BB:4F:82:D3:37:6A
Certificate issuer:       /CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
Certificate serial:       010D0C9F4328584D5234FD385B4FFA78139702B8
Authority key identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/cf704735-2c1f-3415-ba58-cd8074a98a85.roa
Signing time:             Sat 28 Mar 2026 18:44:38 +0000
ROA not before:           Sat 28 Mar 2026 18:44:38 +0000
ROA not after:            Wed 17 Jun 2026 20:32:17 +0000
asID:                     30437
IP address blocks:        165.156.24.0/24 maxlen: 24
                          165.156.39.0/24 maxlen: 24
                          165.156.54.0/24 maxlen: 24
                          165.156.55.0/24 maxlen: 24
                          165.156.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fd:38:5b:4f:fa:78:13:97:02:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
        Validity
            Not Before: Mar 28 18:44:38 2026 GMT
            Not After : Jun 17 20:32:17 2026 GMT
        Subject: CN=3c9f5907-c162-4c0e-bdd4-3ad15723ce7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:2c:08:7c:15:fa:bc:be:d5:05:c5:28:46:
                    6d:fc:46:e5:07:ba:57:1e:bb:8b:55:34:7e:22:54:
                    48:7e:c8:32:d7:ad:ec:24:c8:29:30:b0:77:00:44:
                    45:72:df:3c:f2:52:9b:4a:4e:4a:d6:b9:08:1c:98:
                    f4:6d:9a:50:b7:be:e9:0b:14:4e:f9:ef:ea:81:90:
                    48:08:82:68:1e:a9:36:13:3c:7e:25:05:1a:f0:ee:
                    3e:0f:c6:56:bd:8d:1e:b6:2f:7b:c0:d3:51:a8:bf:
                    33:2c:c9:31:2c:ab:14:b2:20:80:41:50:43:57:d4:
                    02:a0:ab:03:09:87:78:58:6e:d6:9a:a8:87:2e:1d:
                    cc:b6:99:0e:b1:0e:0b:35:7d:80:5d:2c:ce:c5:b1:
                    8a:0e:6b:bb:fb:a1:96:6d:ac:be:13:97:e4:a3:96:
                    69:90:f4:8f:d9:21:18:5a:fb:44:2b:6c:6a:c8:66:
                    d2:a0:18:fe:d1:5c:0d:64:d0:ee:1e:3d:06:ae:fc:
                    fe:a8:1b:5c:07:e2:ab:ba:bd:0c:ed:d1:27:bf:76:
                    54:ba:98:84:b3:f5:5c:e6:d7:b6:dd:72:05:a2:47:
                    60:37:f8:74:ee:16:bb:26:d6:37:0a:d2:7b:09:a1:
                    d4:e7:2f:11:08:4a:83:e9:9a:2e:a2:64:ad:be:e8:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:67:C7:83:44:DD:0F:68:09:7D:47:E1:0D:8F:BB:4F:82:D3:37:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/cf704735-2c1f-3415-ba58-cd8074a98a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl

            X509v3 Authority Key Identifier:
                keyid:58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.156.24.0/24
                  165.156.39.0/24
                  165.156.54.0/23
                  165.156.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:42:e4:cb:d9:54:08:91:72:24:3f:c3:a5:9e:43:ba:cd:9d:
         11:4b:c0:3a:8f:0c:83:d7:58:c7:b8:1f:bc:c9:da:8d:c8:46:
         32:91:84:6d:fc:18:f0:42:ca:2b:13:10:04:b3:be:0a:52:08:
         e0:3e:91:c3:e7:91:31:bb:0e:cc:01:39:9f:7b:26:cd:b1:5c:
         bf:84:89:4c:ae:46:ad:57:d7:e1:f5:93:79:53:3d:f2:18:a2:
         84:00:87:e3:39:10:89:ab:54:d1:b6:4e:72:26:33:65:17:09:
         8c:dc:49:ce:d1:8f:b5:99:f4:41:70:75:b0:41:0f:8f:3a:44:
         1a:c6:00:10:89:57:fd:f2:1b:1f:9e:a3:07:9a:81:4a:fe:fb:
         cc:00:56:6d:9a:21:24:30:0d:07:2d:53:f2:52:ff:1e:48:b1:
         fb:d5:5c:54:55:80:3b:41:14:5e:59:72:56:a9:19:54:0a:d1:
         52:0d:7d:23:98:53:ed:5d:32:db:f8:65:aa:3b:b3:41:2d:93:
         1d:d2:f0:af:d6:30:8e:3e:69:ba:66:27:dd:d3:4f:14:14:f0:
         64:3c:a7:36:7a:87:91:7c:73:40:0b:58:04:85:28:4c:4e:aa:
         0a:7f:16:dd:d1:66:a1:2c:f2:d4:91:f9:e0:a4:16:f9:72:eb:
         ef:37:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:42 2026 by rpki-client