Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e0a6f15-2830-3e09-9732-7f6a302269be.roa
File:                     7e0a6f15-2830-3e09-9732-7f6a302269be.roa (raw, json)
Hash identifier:          VCPfMQr+9ttdGJNDsBrWgBYHb34/oNpe4F+M20xiPMY=
Subject key identifier:   8F:DD:93:BC:3F:71:10:8F:6D:1B:E8:12:9A:41:AF:02:73:F6:D3:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C79BC49D9BFB00DA894B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e0a6f15-2830-3e09-9732-7f6a302269be.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.195.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:9b:c4:9d:9b:fb:00:da:89:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=abbe6b9c-2fe1-4367-810a-57fbb7a5d40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:64:14:ea:47:d2:6d:b7:53:9d:54:8a:f4:
                    89:92:11:f3:e1:49:7d:42:d8:c4:f4:fb:27:f4:4e:
                    d4:1a:63:9c:40:66:98:41:93:47:07:95:91:42:85:
                    e0:78:3b:c4:67:a3:b2:a3:7f:8a:d1:6d:37:f5:6b:
                    4d:3c:c3:82:e5:17:95:c0:12:e6:a8:c6:58:a0:d7:
                    5f:95:65:7e:59:1d:05:68:86:7d:f6:e9:0f:cf:37:
                    03:9a:da:27:80:6b:db:dd:80:ac:00:13:3c:01:73:
                    61:72:c5:f4:51:21:09:b8:c7:b6:3b:45:07:a7:96:
                    4b:75:b9:46:84:ed:c6:53:61:90:49:0f:6d:59:2c:
                    12:77:c0:33:51:da:44:bd:16:9e:9f:80:23:66:16:
                    6f:e9:1d:72:3a:a4:18:f8:56:a2:0a:c7:25:4a:a4:
                    d4:62:04:fa:bb:0e:21:0e:36:b6:d9:f3:cf:8b:50:
                    6f:92:2f:1c:7d:eb:ca:10:2e:7c:25:75:f9:ae:f0:
                    96:c4:18:3a:b1:53:ce:01:d9:12:e9:aa:2f:84:d0:
                    0d:07:33:2d:34:30:24:bb:1c:e6:ba:44:f7:04:c0:
                    7d:3f:db:f1:67:e8:ac:4a:99:06:af:9b:3b:9b:c1:
                    13:37:73:54:cd:cc:49:4d:c8:71:c2:5c:24:35:b5:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DD:93:BC:3F:71:10:8F:6D:1B:E8:12:9A:41:AF:02:73:F6:D3:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e0a6f15-2830-3e09-9732-7f6a302269be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.195.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a0:84:02:c1:d0:d6:d5:b7:de:55:71:50:7a:a0:0e:79:bc:
         86:4c:a1:61:b5:5f:43:0e:ea:5a:99:2e:b5:82:3d:b7:c3:d7:
         22:28:d4:92:4a:d0:a0:83:e2:96:1c:77:f8:4e:49:f9:0f:7f:
         f9:5a:33:42:1e:aa:49:05:48:5d:b3:e8:ec:e4:9b:93:a4:9b:
         67:c8:1f:d7:c5:4f:6e:c1:18:94:cf:5a:b1:b5:99:49:0f:1e:
         17:f0:10:61:b8:8e:e8:2d:02:c1:ee:10:49:00:91:9c:42:82:
         c5:dc:98:20:9e:0b:41:35:2d:51:7e:e7:08:3a:a0:aa:e1:2a:
         24:3c:16:d3:66:5f:ef:a0:0d:48:44:c7:1c:95:d8:31:1d:86:
         4e:3e:65:82:42:75:d8:3c:da:6d:1f:cd:35:b6:f8:5e:83:65:
         52:91:f7:64:40:46:2d:cd:02:ce:57:ce:82:bc:63:3b:8c:64:
         6d:1c:e8:db:6b:61:ca:c9:2d:18:3d:44:a5:ab:01:5d:8a:19:
         1c:f0:e4:2f:92:3a:56:fd:10:b6:9f:0a:3f:34:e2:f0:b0:a8:
         b0:e4:34:1e:34:41:52:87:5a:cd:8d:1f:b8:a9:b4:13:25:42:
         e8:8a:50:1a:c9:01:df:3d:6f:95:f6:86:d3:e9:eb:82:84:e6:
         a7:15:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:04 2026 by rpki-client