Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/848b0985-4fbf-3593-a63b-2a26e8c4a948.roa
File:                     848b0985-4fbf-3593-a63b-2a26e8c4a948.roa (raw, json)
Hash identifier:          hhEW+Z9WFVRYrYqNRrFcENHpcmWQx9EFf2+sdiWfRvQ=
Subject key identifier:   1A:7C:91:8F:BA:D2:DC:6A:34:50:C6:79:0A:D6:41:F1:1A:10:C0:38
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8E11B17FFD1955589240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/848b0985-4fbf-3593-a63b-2a26e8c4a948.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.239.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8e:11:b1:7f:fd:19:55:58:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=b677bc07-92d5-4447-8ca5-f80f025c4482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:72:20:31:5c:95:6e:90:40:34:78:94:19:
                    40:cf:5e:14:c2:ad:b2:74:e6:ff:4f:43:22:1b:57:
                    a4:78:35:6d:b7:6f:cf:0d:2e:b1:4b:d5:b8:2f:88:
                    c4:ee:21:db:b2:44:18:8f:14:ce:77:2a:fb:9f:ee:
                    dd:2b:bd:a6:53:fe:9b:06:d5:79:50:f8:42:b7:bf:
                    6b:2a:64:4b:3f:c1:98:87:21:dc:ac:fa:4d:d6:d8:
                    9b:13:75:3c:70:89:48:86:c1:d5:12:f3:9b:dd:97:
                    02:ee:11:08:6b:60:11:68:2f:66:75:84:98:6c:db:
                    49:f5:9b:94:ce:de:d9:82:84:ab:3a:23:60:21:39:
                    b8:e6:4e:26:65:fa:2b:69:5a:1c:99:c0:66:25:7d:
                    a5:e0:02:f9:d6:77:3c:c0:7b:fd:69:62:34:8a:0e:
                    b5:fa:cc:4a:ba:2d:b3:e0:79:25:4b:f7:73:60:f0:
                    2e:b9:66:d7:2f:07:26:85:e2:cb:f9:8d:42:5b:16:
                    88:3b:c3:63:a3:3d:c0:b7:b4:f3:0a:1c:7e:ed:6a:
                    df:19:1b:88:1f:0b:cd:e9:30:8f:71:ab:f0:90:d6:
                    9e:d6:ea:90:10:8f:4d:84:02:77:03:f9:d9:a2:52:
                    ac:58:4a:18:72:c6:25:e0:f7:62:89:d1:24:e5:04:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7C:91:8F:BA:D2:DC:6A:34:50:C6:79:0A:D6:41:F1:1A:10:C0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/848b0985-4fbf-3593-a63b-2a26e8c4a948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.239.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:83:5b:a3:24:b3:6f:00:e4:6e:be:3b:eb:98:db:73:2f:b8:
         81:b4:47:84:7f:fb:56:fe:f0:1a:08:bf:8b:1d:73:d0:09:f6:
         f8:89:37:13:14:e8:73:13:74:ec:1b:43:f7:f6:b0:b4:71:79:
         ce:13:3d:72:cf:d8:e1:06:9e:3b:81:a1:5b:b7:98:62:54:60:
         66:64:b3:06:67:bd:df:ed:83:32:58:fc:15:a2:6c:a6:4a:08:
         87:25:63:c4:d3:ec:e8:da:1b:03:65:17:ac:36:a2:b4:05:96:
         4d:4c:93:85:eb:9f:db:c6:db:82:fd:00:ec:10:59:26:5b:d2:
         23:b3:eb:60:18:e4:4d:59:64:73:95:96:62:47:d6:7d:04:75:
         8f:6e:fd:46:4a:2b:00:1c:30:c4:1a:21:ee:fb:73:81:6c:e5:
         a1:d7:e9:e2:65:3d:c7:81:8e:68:a9:da:c0:05:06:b4:d6:7e:
         4c:87:2b:24:13:15:37:9c:7c:7b:fb:5d:8b:b0:b2:6d:45:95:
         35:c9:e5:d5:67:0b:26:29:c4:da:1d:e8:65:67:f7:45:7b:23:
         26:9e:fb:e7:02:37:bf:20:a4:9d:cc:2e:ef:7b:6d:54:22:a4:
         2d:c2:2b:b4:24:87:65:a0:b4:1a:4f:f7:bf:aa:36:ee:56:20:
         85:d1:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:56 2026 by rpki-client