Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e7ba4e-788a-3a6e-b92d-10ef94f5d88f.roa
File:                     32e7ba4e-788a-3a6e-b92d-10ef94f5d88f.roa (raw, json)
Hash identifier:          U+C4o6hBdE/+7GdDOuHh6PwmWnNLwPjxoLUQFPLIdxk=
Subject key identifier:   02:05:AA:D1:B9:DC:B0:26:C0:E7:6C:59:7A:56:5E:CF:CA:94:92:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D84831979E6D034BF58E60540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e7ba4e-788a-3a6e-b92d-10ef94f5d88f.roa
Signing time:             Wed 15 Apr 2026 19:12:26 +0000
ROA not before:           Wed 15 Apr 2026 19:12:26 +0000
ROA not after:            Tue 14 Jul 2026 19:12:26 +0000
asID:                     6167
IP address blocks:        75.255.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:84:83:19:79:e6:d0:34:bf:58:e6:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:12:26 2026 GMT
            Not After : Jul 14 19:12:26 2026 GMT
        Subject: CN=969c0630-daa7-4792-bdbb-946bdecc55b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1d:6b:a5:07:1a:72:be:9c:8b:7f:6c:36:b4:
                    85:3f:08:35:d3:1c:96:b2:84:60:9b:05:0d:38:96:
                    fe:0f:42:08:0b:c9:08:41:bc:77:da:ac:ca:23:50:
                    3d:2a:f0:ec:be:0d:dc:bf:8d:db:92:cc:f6:9a:9d:
                    8b:87:50:80:17:bb:2d:6e:1d:3b:fb:d5:55:24:7f:
                    96:a4:c6:7d:4e:6b:68:89:98:e1:b3:f0:99:6a:56:
                    08:d3:e3:cb:3d:79:c1:1e:0d:42:17:6b:3f:81:e0:
                    1c:48:da:37:12:3e:f4:96:cb:cf:de:e4:9a:99:12:
                    bf:18:96:1f:f5:b5:9a:05:c9:a4:26:d8:92:b5:12:
                    56:b7:fd:2e:5a:ac:c8:5a:21:9c:f4:06:15:aa:cc:
                    c0:e5:ff:4a:32:91:00:a8:9f:00:2d:f3:15:35:e6:
                    92:e4:95:e6:71:aa:2d:fe:eb:81:14:a4:31:a7:df:
                    01:d1:25:ab:54:c8:0c:c7:4b:f5:ab:97:83:f6:ec:
                    15:de:79:32:95:58:eb:35:e3:0b:f0:a0:ff:78:d4:
                    11:cf:c0:59:6e:72:81:b0:fa:f3:97:f7:6e:a9:3b:
                    6a:05:da:90:42:77:c1:f4:de:88:01:c0:07:3e:0a:
                    51:52:6b:37:3c:27:3b:fc:da:88:aa:ac:e1:ca:e9:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:05:AA:D1:B9:DC:B0:26:C0:E7:6C:59:7A:56:5E:CF:CA:94:92:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32e7ba4e-788a-3a6e-b92d-10ef94f5d88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.255.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:46:7a:7b:50:be:12:67:86:2e:48:75:01:83:83:22:b3:
         6b:fd:df:9c:56:79:86:ec:b0:16:dc:00:30:fd:b6:cb:a8:3d:
         5e:7f:bb:bf:54:c6:60:2e:29:5a:ed:d6:d8:ba:33:3d:6d:b6:
         5e:50:5d:30:ed:b1:8f:c6:c0:28:a7:3f:bb:55:81:d5:de:a9:
         e0:5e:d3:66:51:5d:3b:69:63:6c:63:59:5d:37:15:60:1f:b2:
         4a:40:9c:a4:98:f1:a7:b7:7f:67:1e:c5:b3:63:c8:fc:fb:7e:
         29:75:3a:07:08:40:dd:40:5d:59:33:17:1b:ef:4b:6e:72:19:
         87:68:64:9e:4b:15:e2:a4:0d:21:0c:08:47:83:eb:39:21:6c:
         22:14:d5:ee:63:78:fc:49:8f:44:50:ad:51:82:d7:98:20:54:
         5c:4d:d7:e5:b8:cb:4f:43:85:c5:7c:a7:45:96:e9:65:50:0d:
         6f:14:76:a5:e0:ad:84:cc:11:4e:d1:49:5e:c5:d6:99:4e:7b:
         a6:c8:25:b6:e0:98:5a:d1:b9:0e:35:54:30:44:18:40:7d:4f:
         5d:31:03:a8:36:28:63:40:ac:6d:f7:a3:a2:d4:88:55:c4:08:
         c0:10:a9:a1:b1:0e:aa:45:ad:35:da:04:24:4c:94:03:52:0a:
         d7:a8:87:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:02 2026 by rpki-client