Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e409f8-4e3c-38ea-b9d1-715dc355a12f.roa
File:                     87e409f8-4e3c-38ea-b9d1-715dc355a12f.roa (raw, json)
Hash identifier:          JJPUeZKLZ7kYIsxGq9gpSQmArHqlCHstkpg6ngRTLG4=
Subject key identifier:   6F:32:26:84:75:02:90:A0:F6:1E:6E:CE:B2:F3:15:62:8D:78:1F:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8E2992EC03C1B1F7E000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e409f8-4e3c-38ea-b9d1-715dc355a12f.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.239.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8e:29:92:ec:03:c1:b1:f7:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=fb110ab0-a32d-46e4-a558-7c0ba7a9dc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:a6:e4:73:bb:3d:5b:c4:14:3c:4b:b0:bf:
                    88:b9:db:d0:23:74:a6:40:01:b0:ba:8d:bd:40:4b:
                    9f:11:e6:d8:8a:fd:e4:1c:0e:0b:1a:d3:53:23:72:
                    4b:c5:16:0d:d4:e7:d9:2f:a3:b9:ea:75:f1:05:fe:
                    6b:ab:f0:8f:59:b4:6b:94:77:bf:46:9f:c3:ea:7c:
                    10:94:d9:04:f9:af:5f:51:1e:68:f1:9b:51:11:d0:
                    26:2e:6f:01:55:6b:cc:3e:67:fe:d5:61:f4:30:45:
                    ba:16:2d:4a:f0:7b:61:af:77:00:f1:5e:68:c6:3f:
                    83:19:c0:6e:6c:83:38:cb:d8:b8:2e:26:de:fb:ac:
                    f7:af:8a:01:e8:62:39:08:fa:6c:d8:ae:9f:e2:ab:
                    7f:62:96:59:b2:4c:fc:00:ea:44:1a:6c:33:7b:11:
                    71:40:a0:08:53:55:ec:cd:c8:61:ef:6d:88:2c:44:
                    71:af:98:a3:dc:d0:da:b2:c3:7d:ab:ba:66:ab:cc:
                    49:2a:4b:b3:9e:78:61:fd:11:dd:53:cd:5f:9b:4f:
                    83:e3:bb:ec:7c:47:cf:cd:5f:4b:e4:5c:31:72:bb:
                    c7:78:48:6f:88:58:ff:da:e1:93:5f:a9:41:02:37:
                    df:62:d7:ca:57:24:04:0a:df:1e:6d:d2:47:58:bb:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:32:26:84:75:02:90:A0:F6:1E:6E:CE:B2:F3:15:62:8D:78:1F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e409f8-4e3c-38ea-b9d1-715dc355a12f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.239.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:4d:85:17:81:4c:ff:dc:38:c2:c1:b5:9a:07:a4:d5:99:
         20:a1:95:08:e1:bb:72:07:f6:96:fc:b3:77:47:35:fb:4e:1d:
         0d:ef:61:c3:13:91:d4:28:8a:5f:0a:c9:de:0a:9e:1b:6e:2a:
         a9:2b:7e:56:d1:91:e2:70:b1:e2:6b:7b:9f:09:16:26:ba:7a:
         31:77:71:45:1e:c6:89:bf:61:fc:cb:43:f8:e1:9b:d0:97:64:
         cb:cc:82:7c:a9:5f:25:fe:a8:bb:99:0f:46:56:2d:19:ec:18:
         0a:6e:12:7d:31:c7:61:a7:f6:84:90:14:28:61:a6:71:02:0b:
         15:d3:28:9a:5f:01:6e:ff:5e:69:14:02:d1:a3:bc:44:c5:cf:
         48:70:f5:4d:21:3c:44:e0:c4:d2:4f:a9:1d:2b:fb:e9:94:68:
         1e:ba:b5:06:3a:c3:2d:14:22:d6:e2:eb:b9:75:12:f8:1c:46:
         e1:30:11:6d:66:de:ac:00:a2:7b:0c:e9:2a:31:f1:33:89:79:
         e3:f8:6f:81:70:a0:a5:a8:7d:19:de:3f:10:da:2a:e3:6f:51:
         1b:fd:a2:4c:28:6b:47:a7:fc:f1:3b:37:ed:6d:53:26:aa:81:
         c1:31:1a:ba:96:2b:88:d1:cb:11:10:38:32:4c:50:88:31:db:
         5c:4b:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:43 2026 by rpki-client