Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ddb9b1c-dfbb-331a-8dd5-f085fac00a53.roa
File:                     9ddb9b1c-dfbb-331a-8dd5-f085fac00a53.roa (raw, json)
Hash identifier:          b/w+b2TIhkWP5LGvR/TT2T42MxPbtrnNvvRtttIRWoU=
Subject key identifier:   AB:46:DD:E3:29:5E:B4:08:A8:AE:46:36:73:26:CE:96:33:F7:E3:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C7A70A35C9C9A1582BB480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ddb9b1c-dfbb-331a-8dd5-f085fac00a53.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.239.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:a7:0a:35:c9:c9:a1:58:2b:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=6393c77a-7280-49c0-9f95-8bfa1f5d0236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:27:92:fa:c9:62:05:f2:fd:7f:c2:d0:4f:
                    3d:15:70:1e:4d:63:db:ff:4c:a8:67:ab:a1:5c:c4:
                    b5:86:08:35:b5:ea:f2:42:c9:84:22:39:3b:69:75:
                    e0:07:66:40:47:b1:28:72:50:8f:76:ac:29:46:fc:
                    07:6f:05:34:e0:f7:68:fc:fd:63:0c:33:cb:e4:96:
                    75:58:10:e7:93:03:be:ee:40:44:a7:f9:1c:63:e0:
                    5d:56:0d:a7:72:24:dc:81:b1:cb:85:90:1e:34:22:
                    06:db:63:73:78:cd:55:44:b9:52:d3:2e:a0:33:8e:
                    56:79:f0:e7:48:d3:63:a4:6f:74:ed:1f:b1:35:ae:
                    cd:4b:87:b0:73:47:99:45:55:36:af:c6:cb:ac:ac:
                    6c:8c:4b:ae:77:61:68:43:ca:ca:95:cc:0c:7c:55:
                    14:65:b8:4f:95:05:41:6a:8f:4a:83:e1:c6:5c:18:
                    2d:4f:76:66:8a:83:5a:f4:53:61:5f:c0:66:8c:50:
                    1e:83:75:00:9a:e1:a9:c0:73:5c:49:f2:dc:31:74:
                    2a:ff:f4:75:87:49:07:60:aa:4f:36:b2:ec:b2:11:
                    49:98:07:11:43:f4:8e:54:a5:50:d9:28:9e:cd:c6:
                    d4:0f:0f:57:6d:15:bd:a6:2a:62:78:0e:bf:d2:f4:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:46:DD:E3:29:5E:B4:08:A8:AE:46:36:73:26:CE:96:33:F7:E3:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9ddb9b1c-dfbb-331a-8dd5-f085fac00a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.239.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:1d:c8:c1:07:ed:5f:b9:99:ae:03:46:6d:81:9e:b3:55:d3:
         be:d2:84:7b:eb:ad:af:29:0a:c9:e4:04:98:3d:21:c4:8a:d7:
         ac:37:0d:ae:15:b0:ee:72:ab:aa:22:47:89:c6:38:19:6e:af:
         d0:ac:a8:4e:01:cf:f6:bf:4b:07:11:6d:56:d2:ce:5b:fc:99:
         aa:fe:72:bb:95:fc:dd:59:a2:7d:46:ec:2f:a4:8f:b2:2f:62:
         03:83:6b:50:00:b6:c6:57:57:78:a7:ff:d7:1c:c8:f9:83:c8:
         2d:c7:22:fd:08:3d:6d:17:bc:ef:87:81:21:cd:84:15:95:3e:
         72:bf:1d:6a:65:cd:bc:9c:6f:05:7f:37:44:97:56:dd:5a:47:
         f3:8d:99:e0:2e:12:1c:cd:c9:e9:ac:ed:7b:cb:e0:14:48:d9:
         44:94:3d:77:ec:1d:51:1c:84:25:86:37:05:d0:04:e5:9e:9f:
         1a:02:b7:93:ca:c6:e6:62:20:30:10:19:1f:3e:f8:93:81:fa:
         57:7b:0c:b4:49:6f:a9:68:96:13:c7:6f:af:f4:aa:95:03:13:
         1a:6d:12:6b:a8:6a:37:23:f6:a4:2d:4f:94:11:09:39:64:db:
         bb:d6:d3:58:d2:2b:b6:ac:8c:b9:fc:01:1b:4e:c3:35:59:5d:
         05:97:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:23 2026 by rpki-client