Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8409ac5-b26d-3e59-bb74-9a8debd3fa23.roa
File:                     b8409ac5-b26d-3e59-bb74-9a8debd3fa23.roa (raw, json)
Hash identifier:          W6otPAjdp+EYADCi3tfp71+d3xf/ys2hirwiOd2eGEw=
Subject key identifier:   4A:D2:F6:F6:8F:39:0F:73:86:80:FE:70:EB:3E:25:50:AA:F8:F8:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8FB5DA143D369B5D6280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8409ac5-b26d-3e59-bb74-9a8debd3fa23.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.243.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8f:b5:da:14:3d:36:9b:5d:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=5cdb797c-56b4-4673-8d6e-e64d5f88e139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:0a:21:7d:f5:aa:af:ab:24:73:57:f0:f4:
                    a6:38:05:3c:35:a0:cb:89:6e:5c:07:23:0e:b8:84:
                    0f:86:52:2c:6a:3a:e5:17:66:87:04:15:2f:04:e0:
                    fa:de:67:47:a8:dd:bd:91:a3:f0:5d:8f:91:db:30:
                    73:8d:f3:34:a6:2c:21:9e:d5:85:74:33:f3:5a:c9:
                    b7:04:32:16:03:93:8a:b6:38:5c:85:a8:a3:d5:d9:
                    68:93:49:d4:25:ff:97:c3:9f:7d:86:85:f4:26:12:
                    64:f1:ba:00:7b:c1:b1:54:b8:57:75:6c:79:77:55:
                    92:26:aa:2b:ae:13:39:fe:ca:99:dd:05:ee:92:ab:
                    8a:dd:c3:37:ec:65:a9:67:2e:4b:05:7b:61:36:32:
                    b8:bb:97:e9:26:f6:ff:6f:dd:9b:b9:fb:78:1d:02:
                    6f:98:cf:49:18:8d:b7:db:5c:e5:c3:35:9f:69:c8:
                    82:1e:f9:69:de:43:dc:57:80:5d:00:bf:e3:67:d1:
                    c6:c6:f3:c6:2f:6e:f9:ba:e0:c4:4a:3e:f0:7e:1b:
                    96:4a:85:ac:c0:3c:02:8e:5f:cd:af:02:f6:0c:c8:
                    01:03:c5:c5:7c:cf:ec:d5:d1:b2:a8:04:5e:7a:17:
                    57:fe:e6:8e:dd:e8:23:2b:0a:b0:17:ec:9a:fc:3b:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D2:F6:F6:8F:39:0F:73:86:80:FE:70:EB:3E:25:50:AA:F8:F8:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8409ac5-b26d-3e59-bb74-9a8debd3fa23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.243.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:f7:a3:7b:6d:35:0e:77:f3:78:8b:4e:cb:2a:26:2f:f2:
         92:c3:4e:fc:25:4d:00:93:0f:25:87:24:50:96:70:b0:5f:21:
         f3:f2:2e:6d:4e:45:8d:8f:42:4e:1c:f3:86:24:74:2a:0e:cb:
         88:af:8a:d9:be:89:2a:74:8f:0a:61:48:14:c0:45:49:6b:99:
         3b:45:d5:fa:07:97:28:bb:07:91:d5:95:5b:d3:ff:c7:6d:2d:
         1e:66:be:c0:84:09:cf:8e:0c:88:5d:34:54:63:ce:f9:6f:0f:
         21:52:c6:68:f4:c0:d8:9f:0f:ff:2e:2f:2b:a2:69:94:6b:0d:
         d1:d5:54:f2:43:2c:16:36:b5:f7:61:26:73:59:c9:d4:f2:f9:
         3b:10:99:a7:a9:5c:3f:9a:42:a8:08:58:e5:da:21:b0:26:33:
         49:16:78:8d:c0:9b:a7:12:29:3e:56:c0:a9:0f:be:ae:64:d9:
         c8:15:ec:fb:3d:78:21:36:be:46:c5:40:ab:60:53:51:29:e1:
         a3:50:36:4c:86:c8:08:ef:e9:07:cc:c4:1c:f5:a3:6b:9e:e4:
         e1:f5:15:38:33:c8:98:5d:a9:ea:a3:f6:72:6b:9a:e2:b8:a8:
         35:f8:09:38:45:39:df:c3:71:cf:db:c3:f8:47:ec:44:7a:5f:
         f1:69:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:59 2026 by rpki-client