Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f39d7a6-2bab-33c5-a655-4e747dfc835b.roa
File:                     0f39d7a6-2bab-33c5-a655-4e747dfc835b.roa (raw, json)
Hash identifier:          ZoEz7/fJie/CoXEJGmIn0P1Pa8EFFVH6ougWAE7RpJM=
Subject key identifier:   26:EC:CF:24:64:B0:74:52:7F:B4:95:A5:4B:40:62:DD:F5:7F:4E:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8811609D2EE9B60E3E20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f39d7a6-2bab-33c5-a655-4e747dfc835b.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.204.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:88:11:60:9d:2e:e9:b6:0e:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=f8a72fb6-8c32-4b27-812d-99e133011d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:7c:b3:a2:db:f9:e6:26:be:0c:5d:79:1d:
                    94:a8:43:b9:4c:2a:58:f6:08:e2:a9:4d:e4:30:2d:
                    9f:33:65:f4:2c:ec:82:21:4f:85:09:25:52:4b:f0:
                    de:68:81:9f:4d:19:d5:cb:97:df:ee:6b:ca:dd:5a:
                    67:91:3b:8f:36:79:06:f1:81:5e:d2:35:21:ea:82:
                    a7:33:b2:08:22:10:d0:8d:28:14:80:2f:ce:5f:d7:
                    4a:cb:f6:b1:38:55:8f:02:2b:46:3b:bf:c8:d4:66:
                    c7:28:07:36:1b:8c:ac:de:d9:29:36:a4:71:89:8b:
                    48:54:72:21:9b:c2:ce:3d:7a:33:b4:26:69:ff:f4:
                    1f:ca:d5:e6:01:69:7e:d4:2b:fe:b9:d3:28:76:67:
                    98:26:44:89:94:65:d9:a3:a5:11:8a:c9:78:87:04:
                    a4:71:c9:c4:bd:f6:30:84:c0:82:8c:f3:23:96:69:
                    42:64:0b:57:f2:48:b4:be:93:41:71:84:95:29:60:
                    6e:be:1d:b8:83:1b:68:e1:c3:06:7e:13:f2:f4:dc:
                    2a:49:81:a5:64:1c:d9:fd:3f:c4:2a:39:1f:6f:5a:
                    1a:af:51:39:04:0b:a9:a4:54:7d:66:5a:05:e5:c4:
                    6e:43:a0:90:13:09:43:1e:a5:e5:00:75:04:72:ca:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EC:CF:24:64:B0:74:52:7F:B4:95:A5:4B:40:62:DD:F5:7F:4E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f39d7a6-2bab-33c5-a655-4e747dfc835b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.204.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4d:3b:77:50:8c:3a:07:43:92:62:05:4d:b8:25:c4:ce:9e:
         83:a4:3f:6c:58:a9:d9:7a:ef:a8:5a:04:6c:e5:31:b3:9d:7a:
         4c:8b:41:d0:dc:df:63:1d:b0:39:a7:81:f5:91:14:75:3e:89:
         79:5b:26:c2:5e:25:ab:54:8d:29:6d:d1:b3:bb:82:3f:28:95:
         ba:27:bf:1e:a3:b6:c0:b9:36:1b:dc:f9:cd:de:f2:5a:40:ab:
         29:d8:62:15:34:50:43:9f:5e:62:ad:23:26:b3:a8:0f:e3:df:
         b0:9d:3a:15:24:50:92:3d:03:68:f3:11:57:89:74:30:7b:c5:
         fd:28:e2:70:94:69:02:8d:c9:b1:f4:f3:63:64:7a:05:81:d8:
         9b:71:fb:e3:af:ea:5e:71:14:c8:12:18:2b:c6:29:0d:0c:9f:
         b7:4d:b2:1a:b1:1b:30:2a:18:9d:7c:18:d4:6e:a7:14:1b:02:
         cd:67:3a:0e:a4:f0:fb:0a:12:76:9a:c2:38:2a:13:31:06:aa:
         b9:c4:0b:de:cd:55:6b:13:ff:f3:9e:af:4d:30:93:5e:ba:d3:
         9a:ba:b5:1e:11:f1:0b:b0:ea:27:7f:26:df:6e:34:e5:b5:ed:
         d0:84:9d:ab:19:6e:82:5e:3a:c8:20:ec:cf:6c:0d:d5:3e:1e:
         c0:da:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:06:17 2026 by rpki-client