Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d785026c-5c48-372d-92f7-cf8bb376542a.roa
File:                     d785026c-5c48-372d-92f7-cf8bb376542a.roa (raw, json)
Hash identifier:          4l1MeiFz4AI2IPqPQUEBGeeHgak3GQgEGUUbpQ0JxPk=
Subject key identifier:   EC:11:6C:B6:E0:88:F7:A8:0B:F1:E0:93:2C:D4:6F:C9:74:AE:36:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C7A73F5BB45C5F1AD63B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d785026c-5c48-372d-92f7-cf8bb376542a.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.239.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:a7:3f:5b:b4:5c:5f:1a:d6:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=5b3eacff-33aa-48ae-8190-ab297a9004af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ec:50:0c:b8:c1:9f:71:af:b2:4b:be:97:04:
                    5b:83:bb:7b:71:20:3b:35:3a:e1:66:ed:34:b9:dc:
                    0f:d8:1b:47:08:25:a7:57:f6:60:fe:d8:b4:37:2e:
                    56:87:39:ba:cc:83:1c:f7:4e:54:22:18:50:88:4a:
                    b5:4d:9e:94:9c:f8:cd:1b:c1:ec:46:a9:75:ca:e3:
                    c0:1f:26:78:f4:c9:98:c0:ab:b3:67:b3:b2:0f:8b:
                    bc:15:52:96:3c:65:47:c0:28:af:45:65:8d:ec:61:
                    99:ff:31:f6:4b:37:72:7f:af:45:64:67:70:9e:c2:
                    ec:ed:5c:3f:3a:21:4f:47:c0:ab:b0:ee:42:57:ab:
                    20:b6:aa:80:69:e2:fa:23:32:04:73:03:48:94:f6:
                    98:a7:1d:e8:ab:9b:f0:20:1a:2e:dc:db:73:62:51:
                    45:88:a9:30:07:64:eb:cc:2c:74:29:ec:12:7e:3a:
                    9b:68:41:60:38:86:b1:83:47:03:1f:b5:51:8f:45:
                    d8:4e:a6:3f:d4:4c:d7:84:2e:3c:9e:c8:4d:33:1d:
                    04:01:da:4b:8f:b3:b9:ed:c5:07:a7:4f:5b:18:d4:
                    68:36:a4:5b:e6:33:a8:da:42:61:1c:e4:a8:3d:34:
                    8f:78:58:3a:89:e2:f1:a5:61:03:6c:82:43:df:79:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:11:6C:B6:E0:88:F7:A8:0B:F1:E0:93:2C:D4:6F:C9:74:AE:36:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d785026c-5c48-372d-92f7-cf8bb376542a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.239.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:ea:3e:33:9c:bc:fb:3e:ed:46:79:af:63:1b:5c:8e:3b:
         43:63:33:df:66:ef:d3:a2:5f:14:ff:83:8f:36:88:3e:5a:2c:
         2e:ec:49:ba:c2:3d:c4:65:52:40:b5:30:12:09:ae:7c:1d:86:
         cb:aa:52:a7:76:55:e5:6c:75:0f:97:1e:0a:3d:2a:45:39:5a:
         01:6e:e6:30:9c:ed:d1:30:6e:32:b6:3a:36:e3:d2:d7:d5:4d:
         c1:18:ae:09:79:99:78:a0:5e:3e:f0:22:48:48:cf:18:d4:18:
         d3:73:b3:13:63:51:68:00:eb:29:03:50:2b:62:91:42:12:39:
         6a:53:56:d2:80:56:4b:0b:fe:4f:8e:00:66:bd:7c:d9:7c:85:
         4c:83:4e:ea:cf:5d:57:86:8f:2f:23:28:32:3a:88:f8:e3:52:
         90:0e:f1:39:5a:a2:f1:f4:77:c4:ae:d0:18:b5:11:2c:77:4d:
         96:31:51:0a:d6:7f:aa:c4:bb:2c:c4:c8:92:79:8b:2c:32:87:
         f6:b5:d7:77:63:12:d0:38:40:93:02:ed:d2:17:37:37:87:36:
         b3:5f:27:f8:8b:6b:2d:7c:29:47:2a:18:dd:a3:b5:a8:24:27:
         78:35:c0:65:c1:c2:b4:25:8f:55:5a:5d:50:1a:d9:0d:6a:54:
         cd:a1:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:09:32 2026 by rpki-client