Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef4d8ebf-b70e-3f93-bbf6-8dfed220e55a.roa
File:                     ef4d8ebf-b70e-3f93-bbf6-8dfed220e55a.roa (raw, json)
Hash identifier:          +fi24BBCL5OHGqACaWSd8E3M++s9LVA06Y6Idd2zk7c=
Subject key identifier:   62:13:72:B5:58:0D:5F:0E:3B:A0:B5:A0:37:1A:BD:36:A4:BD:F1:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C7A8D791585A58CD58C280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef4d8ebf-b70e-3f93-bbf6-8dfed220e55a.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.243.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:a8:d7:91:58:5a:58:cd:58:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=dcd71c57-12ac-461e-9fda-33ea1fd56e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:3d:6d:51:fb:76:5f:35:ee:e7:6a:ea:42:
                    46:04:03:32:c5:06:5e:18:90:9d:38:3f:78:73:7a:
                    90:8e:68:e0:34:c8:2b:32:bc:38:35:19:0d:fc:9c:
                    93:79:f6:d5:01:28:c5:60:0b:91:5d:73:59:0e:8b:
                    18:bd:f9:cc:28:c8:92:49:07:1a:38:80:37:41:d1:
                    56:dc:00:89:43:42:c1:e7:e7:5a:c3:fc:74:72:35:
                    32:3a:86:04:79:7e:1e:93:b6:c9:0b:c7:e0:17:77:
                    58:d8:25:b4:77:4d:8c:99:d5:b6:38:69:af:72:5f:
                    c9:65:47:2b:ca:76:45:49:f2:cd:d3:f2:1b:cc:33:
                    b0:7f:60:3d:48:80:73:05:22:fe:27:4c:a3:24:d1:
                    75:0d:04:27:09:84:e4:1f:12:90:e8:4f:c7:02:64:
                    c5:04:a7:9c:0a:4e:a3:b4:65:70:85:11:6d:71:0d:
                    34:70:03:5a:99:53:8c:47:08:e5:f1:bd:fc:b5:19:
                    b8:79:11:d2:8b:8d:6a:7d:b5:65:38:14:7e:75:47:
                    af:de:b7:18:7d:7f:2b:d0:52:36:4c:4f:6e:31:16:
                    92:c4:67:de:fc:f3:0a:e0:4d:db:41:47:c6:13:62:
                    df:a3:f4:8f:6d:d3:48:39:a1:01:c4:6f:98:bb:9f:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:72:B5:58:0D:5F:0E:3B:A0:B5:A0:37:1A:BD:36:A4:BD:F1:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef4d8ebf-b70e-3f93-bbf6-8dfed220e55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.243.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:b0:b5:83:e9:cf:ac:54:3f:ee:5d:55:42:79:e5:46:f8:
         fe:af:f5:52:1f:83:1c:46:93:bd:5a:17:23:d2:8c:db:a9:5b:
         74:e7:31:a8:de:f9:aa:5e:c7:46:56:09:df:28:ab:10:b4:8d:
         a9:be:b8:fd:b7:a5:ab:a9:aa:13:ec:1a:fa:cd:63:a6:88:60:
         b3:04:bc:de:98:10:72:dd:ec:74:d4:42:8e:ee:f8:88:31:5a:
         cc:d0:6a:09:6c:5f:84:cb:db:21:51:39:4a:7b:d7:a0:c4:c0:
         97:20:7c:d9:2f:09:8a:af:ab:3b:e7:95:5b:fb:a0:87:2f:f2:
         48:b4:f9:46:84:08:dc:96:38:c1:4e:4b:7a:08:c2:93:84:40:
         13:2a:1b:99:f7:90:72:10:35:e3:03:a5:c1:0b:6e:45:43:3d:
         b0:4e:97:b6:c2:d1:f9:83:cc:e6:55:d1:f7:db:64:2d:cc:f2:
         3b:19:3e:db:a4:7f:02:32:07:f5:8d:62:7b:91:80:28:e2:f9:
         8a:e5:0a:2b:d0:fc:14:99:62:fb:4f:e6:5d:ca:c0:a6:33:22:
         32:3b:4b:7e:85:11:44:4f:37:80:c6:27:d0:3e:b3:b7:39:66:
         78:d7:e9:f9:5c:a6:81:dc:c8:bc:bb:b9:fd:9e:84:9b:56:35:
         38:e8:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:33 2026 by rpki-client