Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa
File:                     34284c9b-e4df-318a-81f6-03c50bfc8009.roa (raw, json)
Hash identifier:          Aofhh+dAnnGJz5DaLj14bj/8QQLXOdWiei4iCy+uUO8=
Subject key identifier:   F2:49:4C:E4:65:EF:3A:DC:48:0C:EC:AD:3F:FF:98:D6:11:36:02:D5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8680379144F0168FF6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.197.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:86:80:37:91:44:f0:16:8f:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=1dc92dd2-7649-4cb2-a9bf-b2f938abd86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:b7:85:59:b8:99:75:0f:14:33:b8:62:09:
                    1b:37:92:bf:20:81:67:73:bc:de:cd:9c:ae:95:c9:
                    16:0e:7e:3c:56:61:98:5c:f1:82:36:03:b3:88:24:
                    03:bf:22:ca:a9:b3:f5:18:57:59:cd:0a:2b:8c:fe:
                    c8:0e:de:c7:91:c3:93:4a:ed:84:f4:de:d9:6b:6d:
                    3c:15:a5:2b:c0:00:d6:7e:39:df:2e:0a:f3:05:26:
                    39:0d:48:97:f8:f6:fe:79:57:00:72:5b:ef:dc:c1:
                    28:54:c4:58:b9:3f:33:a6:d5:5f:fa:7d:a8:c1:7a:
                    69:8e:40:cc:48:88:8e:31:51:8e:ca:01:6b:1b:c9:
                    5e:03:73:48:9c:2b:c2:df:f9:bb:b8:94:6c:9d:ab:
                    f4:b3:e0:bc:87:cb:04:d5:e1:56:2a:99:28:22:b2:
                    05:5c:94:5a:b2:62:56:91:ad:31:70:22:b4:26:70:
                    b3:b7:35:c6:ca:77:88:a3:f8:58:12:c9:0c:61:ad:
                    48:a2:b2:92:79:58:07:48:d2:df:82:cd:41:a3:13:
                    27:b9:8b:eb:aa:19:35:ef:e8:af:f5:7f:5c:ce:a5:
                    e5:39:16:53:af:9c:0e:79:4a:67:35:8e:f4:ef:44:
                    de:7a:9b:9d:f1:d0:b7:27:f6:a7:62:b6:4e:a3:b5:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:49:4C:E4:65:EF:3A:DC:48:0C:EC:AD:3F:FF:98:D6:11:36:02:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.197.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:61:28:62:26:16:67:90:bc:9d:bf:b7:aa:6a:fa:b6:2a:91:
         e3:12:7c:25:ee:b2:c9:cb:90:42:82:5f:02:c2:77:7e:f9:f9:
         91:3e:a7:b0:df:4b:eb:5c:2c:75:2e:18:1e:6b:c6:33:35:03:
         cd:52:49:f3:8f:2b:f0:a3:9d:c4:f3:0d:b7:91:50:1e:07:2e:
         7a:f0:72:bd:20:00:5a:8e:e4:e4:ec:89:4d:51:ac:62:3a:42:
         b9:ac:6f:57:d0:d6:ac:52:4f:32:26:6e:ce:13:40:28:a8:11:
         42:6d:83:ea:4a:42:4e:a2:1a:34:2b:55:6c:a4:3f:73:f4:73:
         6d:be:9a:93:80:e6:83:d1:f5:22:f0:0f:ea:57:db:a6:5f:80:
         6e:3a:b8:f9:4f:91:cf:83:6d:42:82:0a:cf:3a:42:4e:5d:5b:
         8f:ab:d7:50:c3:22:d4:31:31:54:ed:e8:26:a8:f3:a5:fb:6a:
         d5:43:98:81:0b:61:8a:b7:5b:16:e8:32:34:24:b2:74:6f:3c:
         1e:fc:07:72:7c:98:93:8d:7c:1b:18:96:9f:7c:5e:c4:9b:9e:
         8a:9f:0d:9c:09:17:36:dd:c0:c0:2f:cc:2d:a0:e7:6a:af:c1:
         52:48:a6:9d:e5:48:e0:40:a9:b6:d4:99:17:b0:d7:b1:bd:56:
         75:4c:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:00:48 2026 by rpki-client