Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f1758a6-5831-32e5-8f4b-1bbc9ebf225b.roa
File:                     7f1758a6-5831-32e5-8f4b-1bbc9ebf225b.roa (raw, json)
Hash identifier:          Up2UL6nIsTHLWmFc+oS42KcKl4fHn7JtXDQk3XC/NNY=
Subject key identifier:   22:7C:18:C4:00:B9:B5:43:0E:4F:D2:E6:23:91:AC:CB:F6:6A:20:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C7A39696CB1060665AB500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f1758a6-5831-32e5-8f4b-1bbc9ebf225b.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.217.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:a3:96:96:cb:10:60:66:5a:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=d2b4b685-25fd-44b5-913b-92d5497b3fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:3c:58:7f:7a:ba:b7:f5:36:e6:b0:8c:54:
                    fd:95:4c:9c:6b:b4:fb:83:38:bc:cf:3b:0b:63:42:
                    39:c8:c8:4f:36:2f:38:c7:3e:a4:7e:6d:a2:e7:6d:
                    56:fc:bb:45:c6:f7:0a:41:8a:a0:bd:f9:8d:76:c9:
                    59:f0:67:e8:e1:2f:8c:13:17:42:1c:8c:4e:c7:dc:
                    a8:8c:7a:fd:a7:31:ad:f5:c6:c7:13:f6:c0:d7:1c:
                    e8:13:2a:e9:89:59:62:b4:92:1d:ea:8b:d9:f2:09:
                    a7:4a:3d:d7:7a:4c:73:8f:4e:51:64:de:24:cc:14:
                    b0:48:e4:18:94:e0:92:07:b0:83:59:d6:47:30:03:
                    0e:d8:d3:5e:8e:e1:9a:ab:9f:18:65:dd:35:e1:ac:
                    0c:d3:80:27:4c:74:aa:62:1a:b5:0a:eb:92:c6:2f:
                    6f:17:f2:e7:dd:56:72:d8:df:74:61:66:e1:27:15:
                    b1:39:2f:a8:ee:8b:a1:73:93:6b:77:c0:6e:d5:38:
                    0a:67:07:58:a7:df:6c:ed:8e:d1:09:17:2a:68:5b:
                    97:86:05:ca:c1:b2:b9:6f:72:54:e5:e0:03:ee:1a:
                    0a:a8:79:63:44:7b:80:90:8b:9b:da:36:2f:dc:2f:
                    17:5a:81:a0:34:50:83:66:18:22:b7:fb:fd:81:96:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7C:18:C4:00:B9:B5:43:0E:4F:D2:E6:23:91:AC:CB:F6:6A:20:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f1758a6-5831-32e5-8f4b-1bbc9ebf225b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.217.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:60:4a:fd:91:3f:ae:3b:46:0d:49:38:c0:8b:1b:18:24:
         75:48:7f:a5:dc:2d:86:bb:55:57:c2:e4:eb:7a:25:0f:1f:3c:
         fc:6a:bb:39:5e:7f:cc:40:e0:fd:00:6b:5a:d6:d8:81:82:73:
         d5:59:ce:c6:35:97:f2:d7:ad:0a:61:a8:85:50:81:7f:e1:51:
         ab:64:36:26:04:c3:30:31:3f:d6:a7:10:00:1a:75:16:9a:a7:
         25:3a:00:e8:4b:85:65:89:0b:bd:bc:d0:fc:b4:1f:7f:ac:73:
         dc:64:fe:bc:25:1c:00:f6:d9:31:3b:73:2d:82:62:72:c6:07:
         3c:64:54:72:85:ac:b4:60:cd:bc:d3:de:88:e1:e1:4f:39:01:
         0d:67:1d:e1:10:8b:67:16:d6:a2:b6:06:96:4d:06:a9:9d:e4:
         76:0a:62:93:0d:bf:11:17:55:7e:db:db:d6:27:7a:1b:de:75:
         95:bb:ca:c0:c9:fd:04:56:72:48:64:f3:ac:2e:e8:76:21:55:
         23:61:a1:f9:9e:1f:b5:a3:54:d8:41:08:3b:3c:63:e8:58:e0:
         60:55:18:39:74:a1:4b:86:87:f5:07:7b:1d:a5:6a:22:21:a7:
         e6:44:fb:82:1a:f8:c6:69:69:d3:57:46:e0:ee:9f:52:59:54:
         b5:c3:91:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:48 2026 by rpki-client