Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a388489-6dcb-33d9-b43e-d7a33b5da222.roa
File:                     7a388489-6dcb-33d9-b43e-d7a33b5da222.roa (raw, json)
Hash identifier:          oDqul+GCnmpJufuXaFqkU5QtAKuZ1GRTK00WsqrRcRk=
Subject key identifier:   4B:58:D7:3C:03:7E:52:AB:6F:72:92:24:14:48:3F:E1:23:D1:E7:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C7A7A4B888D2B51C6C8000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a388489-6dcb-33d9-b43e-d7a33b5da222.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.241.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:a7:a4:b8:88:d2:b5:1c:6c:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=35264d1f-d61c-4851-9629-97d5b0a92984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:24:f9:72:81:cb:a0:e6:9e:ae:13:ef:fc:
                    2b:e2:2f:b2:97:5c:5e:4e:3e:3e:e3:60:44:26:f5:
                    7d:a8:ce:60:af:42:13:ec:d0:97:8e:55:0d:20:8a:
                    0f:22:93:c8:33:8f:39:0e:26:97:43:7b:a6:7e:03:
                    5a:ff:92:5f:61:82:6b:00:2e:29:b7:12:d2:51:bf:
                    47:9e:4d:4c:45:91:09:70:a5:8c:53:51:d9:6c:0c:
                    a0:71:4a:f9:0a:1f:ec:a1:7b:7b:1c:89:1b:14:c1:
                    ff:cc:85:f9:d9:06:8a:b4:94:e1:30:4d:bc:78:64:
                    a3:43:19:9d:ba:ad:f7:e2:30:cd:5a:0c:d7:24:c8:
                    5d:83:ec:43:ba:5d:89:2f:56:20:41:c5:d3:7f:43:
                    14:af:4a:e4:9b:45:35:f4:c1:be:83:b4:29:c9:80:
                    81:ee:3d:e2:bd:d8:5a:cc:43:41:c0:95:aa:5a:48:
                    c0:a6:ac:10:2c:cb:8b:14:91:99:db:fb:95:ed:d9:
                    b4:10:db:f8:34:e8:3a:06:b7:93:a0:90:05:7d:85:
                    b3:e5:05:42:42:dd:af:aa:80:9a:e8:e9:24:26:f6:
                    28:41:42:9d:68:af:14:ce:f9:ba:cc:53:da:cf:c8:
                    55:1c:e1:7a:ec:71:5d:af:ad:b3:41:9a:d5:57:9c:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:58:D7:3C:03:7E:52:AB:6F:72:92:24:14:48:3F:E1:23:D1:E7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a388489-6dcb-33d9-b43e-d7a33b5da222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:a0:6d:cc:55:ef:d2:40:a5:95:f0:d6:4f:c4:2d:53:11:5b:
         ac:4c:d3:a4:76:e4:b8:4f:7b:e3:3e:7a:33:9e:21:bc:1d:9e:
         aa:48:ab:1f:1c:a6:d4:67:81:2d:b6:24:df:ba:d8:f5:70:9a:
         a1:cc:96:44:51:87:a6:b5:52:ef:e3:34:0b:a0:4e:de:0c:84:
         67:61:42:67:80:77:e9:7d:5f:9d:d0:04:e8:20:96:d0:ae:ae:
         1a:83:4f:65:2e:d2:7a:0f:29:a6:ad:98:9a:4e:33:f5:60:d3:
         c0:2a:46:94:65:be:38:90:22:c6:57:ff:55:0a:4b:b0:6d:c9:
         ea:c3:88:76:eb:c7:4f:1a:6f:8b:54:b3:00:9f:e5:e7:39:7e:
         45:03:0c:38:db:eb:f8:52:9c:9f:fb:51:69:d4:fb:8b:8b:2c:
         67:1e:7e:33:9e:ec:b6:67:29:02:ac:b6:e3:1b:ae:7f:fc:90:
         41:c5:64:c6:74:0c:71:73:35:fb:69:b5:9e:11:8a:68:45:40:
         01:e2:9f:1f:4b:ad:0a:80:6d:9f:2e:22:01:09:33:84:37:bc:
         7f:f5:e2:a1:c4:3b:70:6f:0f:99:8e:68:d9:a6:77:20:cc:a3:
         83:64:2a:2f:c8:af:de:b4:27:5f:a7:6d:ce:71:e8:e4:63:a5:
         06:7a:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:05:24 2026 by rpki-client