Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd406feb-46f8-36e8-8283-b35ac398456e.roa
File:                     bd406feb-46f8-36e8-8283-b35ac398456e.roa (raw, json)
Hash identifier:          J8yjJwJTQXHljaNvkIFJbsutAzCBXTK+S9g3uT9LpCM=
Subject key identifier:   6B:00:E4:66:47:5B:65:A2:56:63:3B:DB:CE:B6:FF:FC:09:CF:4A:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8CE44A20B4707413EE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd406feb-46f8-36e8-8283-b35ac398456e.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.232.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8c:e4:4a:20:b4:70:74:13:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=1d270ae7-0947-4a02-93e7-ac96df152298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:96:b9:28:68:89:00:16:2b:2e:42:cd:29:de:
                    9d:79:7d:79:77:4e:8c:c1:25:f5:1d:c4:c2:1e:2d:
                    44:3e:00:05:8a:09:8c:af:da:6f:b7:60:95:fd:0b:
                    96:7d:7d:e3:df:ee:4d:6c:b5:13:2d:13:92:c5:4d:
                    8e:35:d8:c9:1f:38:57:57:64:2e:61:29:1a:fd:02:
                    a6:47:31:57:84:91:ca:ef:29:24:00:1f:00:d3:e0:
                    9e:ab:2c:22:c9:89:2d:2c:a8:93:82:e3:76:23:b4:
                    9e:92:d0:8a:fb:99:ab:86:6a:0a:e2:27:05:3d:2e:
                    8f:9f:59:fe:c8:6e:2e:a1:ad:15:93:e7:7d:09:7e:
                    a4:7e:c3:ea:58:54:7b:a0:e7:4b:17:a2:85:d6:87:
                    a6:f6:f1:ee:7f:ba:5d:21:3d:04:b6:31:5d:0b:8c:
                    dd:61:75:65:37:dd:5a:f8:be:42:81:9e:9f:92:01:
                    f2:a3:50:0c:05:af:5b:0b:0e:e9:38:74:14:f9:dc:
                    02:84:f4:31:74:d6:40:f2:3b:5c:06:2e:93:de:fe:
                    b2:fb:3c:04:50:6a:32:d5:f7:9c:06:5b:65:48:78:
                    58:23:9f:be:80:50:15:ea:e0:5d:da:41:a6:e6:6b:
                    1a:7b:dd:08:04:84:96:55:e0:02:a4:bd:e8:03:79:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:00:E4:66:47:5B:65:A2:56:63:3B:DB:CE:B6:FF:FC:09:CF:4A:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd406feb-46f8-36e8-8283-b35ac398456e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.232.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:64:90:ee:1d:1c:94:4a:75:24:f1:0b:42:46:b5:cc:59:
         bf:12:a2:e4:b6:c6:7a:20:7b:c4:0d:37:cb:7d:18:99:f2:dc:
         43:0c:42:53:93:8f:6f:f5:80:d3:2e:66:9d:a0:d6:e9:9e:c7:
         dd:d8:65:89:f4:19:a7:1d:98:09:64:e1:c1:72:aa:c4:d2:cd:
         87:27:d5:c1:f8:8f:b5:9e:30:e5:82:92:24:20:24:ce:13:dc:
         cb:db:83:3e:d0:be:71:2d:f6:8e:36:80:52:6c:e6:a0:31:6d:
         98:10:ee:cb:d7:9e:8e:c6:39:27:fd:da:4b:5e:42:97:dc:e6:
         34:4e:63:ea:46:5a:d1:3c:5f:e8:78:29:d0:21:74:55:b3:13:
         d9:35:2a:8d:ee:d2:56:3e:bf:08:f2:1f:d2:96:9b:27:1a:9d:
         87:fc:85:f3:34:46:36:d8:4f:b6:c7:ce:c4:d1:3f:b4:d3:8a:
         7f:06:9a:10:d2:75:db:2e:4a:1b:b0:47:04:0a:95:c5:81:2d:
         65:8f:8d:eb:e7:28:65:56:07:e5:57:a3:61:72:ce:26:cf:8b:
         ae:05:8e:9f:44:95:2f:f1:ad:73:88:c7:3b:46:01:96:13:50:
         cd:9d:f8:36:2b:82:d8:ea:e7:6a:20:54:b1:7b:ad:30:18:7f:
         ca:5e:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:16:10 2026 by rpki-client