Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d92ae8-a521-3604-b783-f9428c6d39a2.roa
File:                     91d92ae8-a521-3604-b783-f9428c6d39a2.roa (raw, json)
Hash identifier:          nJNMx1wgIE8CclqS7rYtna+JznbwzZUqk1oM9DscIUs=
Subject key identifier:   DA:5C:77:30:A3:F8:D8:0C:E1:DB:40:C3:FF:5C:CA:25:3B:5F:E4:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C7A4241A70C1738514D700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d92ae8-a521-3604-b783-f9428c6d39a2.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.221.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:a4:24:1a:70:c1:73:85:14:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=1fd7fbdc-a089-45d5-879b-f5dd126996c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:f4:85:30:68:b1:5e:f1:c9:6b:5f:58:2e:
                    ac:7e:c9:64:3f:66:e4:2b:da:3d:a2:43:d7:00:a2:
                    25:f5:ef:b2:5c:6d:ed:c6:44:ae:08:32:c0:31:93:
                    db:8c:5a:c8:7a:87:51:84:8c:5e:b2:06:58:f1:f2:
                    81:ba:68:2e:15:96:f8:9d:d5:bd:bd:d6:8d:ba:6b:
                    3b:ca:e9:75:1e:f9:27:c9:4c:3d:e6:31:ec:7a:8d:
                    38:49:78:11:9e:78:1c:f4:01:c1:64:e7:bc:b3:f6:
                    47:d7:8c:38:ef:5f:d3:ea:c9:f2:10:76:68:e0:ec:
                    ab:12:98:f7:9b:fa:29:23:07:a3:a9:76:f6:d9:4c:
                    c4:e9:78:4d:76:84:55:6e:e0:90:35:05:b0:d3:16:
                    6f:31:91:ef:51:73:23:0f:0b:90:a7:4c:e7:5e:1a:
                    26:10:e1:10:24:da:39:d1:e6:bf:be:33:59:be:f6:
                    f7:93:56:dc:2e:ba:3e:96:5a:22:51:ca:53:db:bd:
                    5d:16:8f:e1:84:4a:df:4c:4d:66:17:95:14:6a:e6:
                    dc:be:8f:7a:42:b7:42:ea:59:7b:5b:7c:a6:24:27:
                    e3:f5:11:83:33:c9:7e:ca:fe:d4:2e:0a:bb:d9:dd:
                    5e:a0:39:5f:3c:55:c3:54:bc:ef:a8:cc:de:7f:6d:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5C:77:30:A3:F8:D8:0C:E1:DB:40:C3:FF:5C:CA:25:3B:5F:E4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d92ae8-a521-3604-b783-f9428c6d39a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ef:40:68:0f:c2:b4:17:d9:0a:74:27:b2:3d:cc:f8:16:de:
         03:90:f6:4d:d3:b3:00:74:f1:e7:10:c7:9d:45:9f:bb:09:f9:
         b8:b6:28:de:44:3e:c8:01:4a:10:6d:33:5f:57:d0:e3:85:42:
         42:93:b5:26:42:c6:65:46:22:28:f4:06:8c:63:d5:ff:9b:4f:
         18:d4:4c:c1:6b:22:7f:5a:e7:f2:a9:bc:24:2b:e7:d8:62:92:
         74:12:2b:f4:c0:4e:01:a5:c2:e7:ec:5f:f3:64:e6:71:40:f0:
         c6:c4:2b:8f:51:e5:95:03:71:ae:6f:94:cd:d6:17:98:e5:67:
         82:32:b7:80:db:cf:60:7c:46:09:bb:c4:f8:2f:72:ff:ba:87:
         9f:55:13:e9:e2:58:f3:c1:e9:82:b3:b3:59:db:fa:dc:54:ed:
         2e:82:e1:20:08:2a:e0:c7:cb:96:3d:7c:cb:29:5e:47:4d:a7:
         ae:74:63:90:77:37:d0:e2:0e:07:e7:c4:e4:27:d7:19:55:62:
         3c:ee:c3:02:2b:6a:2c:3c:04:13:d4:49:79:e7:0b:d7:dc:77:
         56:e4:9c:3c:c0:1b:78:40:78:a4:db:e8:1f:99:81:3d:f7:51:
         45:45:3d:44:44:af:6a:03:8d:b5:4c:d4:a0:6e:23:28:a0:6e:
         0a:81:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:22:24 2026 by rpki-client