Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b10a2b-eb6a-3cfa-a98a-d5f47a032596.roa
File:                     78b10a2b-eb6a-3cfa-a98a-d5f47a032596.roa (raw, json)
Hash identifier:          81IQyK+lzRgw6W+RoOU0cLjh+j/uazP6BiZZd2PQ7bo=
Subject key identifier:   FD:53:75:CB:B9:75:7C:48:83:9F:75:CF:41:93:85:4F:36:AE:23:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8D2BD4D04ED8FFCE8020
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b10a2b-eb6a-3cfa-a98a-d5f47a032596.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.232.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8d:2b:d4:d0:4e:d8:ff:ce:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=ccfbbb06-4bc8-446a-8b5d-068a6f7e76d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:c3:ce:d1:52:4f:db:2d:56:86:bc:f4:79:
                    99:e2:ca:f6:f0:b5:1f:49:74:bc:55:42:3e:ad:26:
                    8c:a4:c0:39:60:37:9f:dc:f3:7f:3e:fa:03:57:5f:
                    1a:7a:24:33:6c:dc:1f:ac:f7:06:3f:75:38:d1:95:
                    42:97:71:30:60:e2:47:10:e1:9f:bc:e8:14:69:90:
                    0b:8f:d7:35:02:2a:e0:b0:a2:63:13:df:72:b8:c8:
                    fb:f4:32:15:80:27:aa:05:25:d7:af:0d:ea:54:c3:
                    b1:95:6b:4c:7e:9b:f6:c3:8c:88:a8:a8:13:45:e9:
                    0f:8c:6f:07:e7:37:ad:af:88:82:37:a5:1a:f8:22:
                    a1:56:5a:80:c1:ea:50:82:f7:0d:5f:66:5b:1b:80:
                    7e:a3:3d:8b:9a:f6:78:e1:31:47:a6:9b:de:a5:c5:
                    b3:f8:f6:21:62:9f:03:41:64:61:15:97:d5:78:ad:
                    6c:97:6b:56:0d:cd:34:c2:74:19:c8:4a:a4:5a:5a:
                    3b:1a:34:5c:12:e3:e2:ef:b1:70:f4:dc:31:27:d0:
                    6a:bb:33:bb:f7:c8:7c:73:fd:fe:32:66:a5:03:94:
                    27:87:6c:e2:0e:76:fc:41:47:92:bd:51:8d:18:7c:
                    f4:40:2d:8e:39:c4:73:09:32:dc:1f:eb:50:5e:e7:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:53:75:CB:B9:75:7C:48:83:9F:75:CF:41:93:85:4F:36:AE:23:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78b10a2b-eb6a-3cfa-a98a-d5f47a032596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.232.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3a:f9:14:05:2c:d0:23:67:19:ea:eb:ad:60:da:4d:3d:0b:
         66:58:e1:9a:e3:17:fb:a2:94:c3:ba:d1:f7:b5:66:be:0f:af:
         01:ec:c9:26:e2:de:71:08:b6:b6:ff:7f:8f:cc:0b:37:2b:f1:
         67:5f:6b:27:69:6e:78:e6:fa:70:8a:3f:fd:53:bc:28:16:3c:
         98:4b:aa:c0:54:3c:ed:93:81:24:2a:7b:c5:6b:eb:37:56:e4:
         c1:2d:78:96:14:52:55:b5:5a:3f:69:d9:8d:fe:15:a0:91:b0:
         98:14:69:f2:61:03:ad:17:50:00:a7:b8:bb:f4:29:7a:f8:9b:
         a1:e2:a6:20:a7:e1:ab:c5:ce:d8:cc:10:d7:86:ba:e5:64:0d:
         f2:ed:3d:74:12:5d:a8:89:3f:56:63:ea:b4:ef:96:5f:e9:06:
         3f:7b:21:fe:4c:5d:80:bb:b1:ed:73:15:b5:90:7a:c4:c2:53:
         e6:e0:09:e7:4a:ea:a6:24:02:2a:9f:88:9a:d4:c1:ae:73:fb:
         85:be:a5:27:64:30:4d:03:22:6c:27:d0:0f:85:43:bc:2f:c3:
         9d:24:ee:52:67:66:1d:d4:72:80:8b:5b:41:01:01:a8:41:bc:
         99:39:c6:6b:c0:73:09:7b:9d:73:8a:7d:23:3c:49:f7:5e:04:
         02:35:34:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:41:00 2026 by rpki-client