Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa
File:                     3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa (raw, json)
Hash identifier:          yFNvOu1xZGnbLtySeIuM5moYWuWxd4li66peGQEtB3c=
Subject key identifier:   D0:36:84:3E:2A:F6:DF:80:55:C2:5F:6C:7C:FE:6D:EA:1F:C0:EC:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA79DB5E04C88C30DB0700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.194.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:79:db:5e:04:c8:8c:30:db:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=7c8cf21b-acce-44ea-a924-015e3d84b9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:b6:a0:c5:c4:bf:de:4c:76:40:75:99:73:
                    58:b8:90:8b:8d:15:bf:54:73:60:33:dd:66:1a:9d:
                    73:7e:5c:41:b2:f1:5e:4d:3d:b8:f8:b5:75:1a:1b:
                    98:79:2b:7c:79:8c:8c:27:ab:e9:d3:3a:04:d4:d8:
                    fb:d1:fa:91:ab:09:72:dd:ff:a9:39:15:c8:7b:ac:
                    eb:b8:b7:6d:18:88:ba:27:d8:ca:e3:54:d6:0d:d0:
                    e6:42:20:1a:ca:3a:3d:cf:ae:0b:86:ed:15:28:bc:
                    87:58:98:ae:2b:bc:74:97:b8:18:fb:c1:c6:ad:9d:
                    57:e4:0c:0f:5f:5b:66:6a:ae:38:6f:1a:48:c8:5f:
                    74:1c:b6:82:3f:35:c2:98:f6:74:d1:30:8d:2d:db:
                    ce:07:68:0d:03:de:f3:38:04:9d:0a:34:db:1f:f6:
                    9d:18:ed:47:31:43:cc:f8:fc:b3:23:f2:f0:a1:b3:
                    89:ad:c4:41:04:ed:65:21:cd:73:83:d6:73:50:91:
                    67:59:74:1e:d0:4e:75:86:09:72:89:df:dd:91:90:
                    13:1d:a4:13:5b:b6:86:06:1f:8e:84:d5:34:57:9e:
                    10:b5:4d:53:33:34:17:18:f3:57:0f:23:b9:5d:df:
                    d8:e4:b5:fb:ba:c0:89:c2:ad:0e:d8:df:01:17:e0:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:84:3E:2A:F6:DF:80:55:C2:5F:6C:7C:FE:6D:EA:1F:C0:EC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca52f95-d363-3a7d-a65c-7194fe6744ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.194.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:fc:0c:5d:bc:d2:04:de:2e:aa:86:64:ef:ee:7a:56:08:
         fb:5c:6a:91:50:02:63:e5:77:77:16:3b:e7:bb:24:a6:9b:0a:
         dc:f8:f1:c0:6c:43:b9:1b:d4:6d:ff:03:51:f1:3e:4b:95:0a:
         0c:18:53:d8:8c:c1:26:f5:1e:42:20:92:63:0e:c1:83:d5:4e:
         eb:1b:0b:39:ab:fb:1f:d1:bc:d8:26:1c:b2:87:d4:6d:ab:b0:
         bd:ac:cb:9d:7b:d9:f1:46:a7:43:0c:70:24:8b:9f:ac:db:d1:
         35:81:2f:27:f1:29:dd:78:5a:ae:08:5d:01:17:e4:f8:84:23:
         7c:f5:84:da:02:8f:cd:5f:57:7d:87:fe:7e:01:36:fd:7c:e6:
         c1:e0:1e:da:e9:30:96:05:24:46:aa:b5:1b:f0:c5:e4:9c:8d:
         33:99:6d:5c:a4:e8:3d:ed:b1:01:29:9c:85:b7:f0:9d:1d:e0:
         5a:56:a6:c1:ed:93:2c:a0:11:86:3a:07:ec:d1:33:c2:d7:2d:
         49:f5:b8:ba:55:1a:7e:a7:7d:57:e5:a7:6a:ae:ad:3c:7f:10:
         b8:9a:fd:80:7f:e0:e4:da:f6:ed:e8:b0:b7:67:e5:42:1d:e8:
         51:31:50:21:ca:ec:64:e1:72:23:17:bd:86:3e:79:d5:98:66:
         be:d4:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:36 2026 by rpki-client