Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbfd7d36-f105-3f26-9c6a-a9b1ef294c14.roa
File:                     fbfd7d36-f105-3f26-9c6a-a9b1ef294c14.roa (raw, json)
Hash identifier:          bnGkuVaH55P19ET+eVIq2Reware9FsfKLG1yApwkfY0=
Subject key identifier:   62:78:CB:FD:D8:22:0A:34:A5:3F:C0:2C:3F:53:8B:0F:40:E0:EA:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C7AB3CA2EE5C7ED91E47C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbfd7d36-f105-3f26-9c6a-a9b1ef294c14.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.248.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:ab:3c:a2:ee:5c:7e:d9:1e:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=ae587075-3236-40a3-8b6d-a615109c4b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:65:b5:48:30:84:13:3c:93:e7:b1:96:c8:
                    af:2c:b2:f2:c2:f2:58:47:f6:74:e7:0d:f5:2c:e2:
                    33:bc:cf:7b:eb:68:29:3d:13:b6:d8:9c:b6:4f:e9:
                    d0:cc:ce:bd:7a:54:97:5e:22:12:30:7c:f8:3c:a9:
                    70:41:42:08:ac:07:09:95:5d:98:d5:0e:af:6a:3a:
                    31:60:aa:a5:5f:38:db:f7:3e:2c:ab:67:f3:ae:40:
                    f0:0d:90:6c:7a:5e:ff:39:e0:c2:e9:93:e3:9d:6d:
                    e7:0d:b0:18:cf:29:76:e1:d2:9f:57:c3:63:e3:64:
                    ca:c3:56:2d:bb:e4:a6:e9:83:d1:48:cb:8d:7a:5b:
                    8b:74:22:03:60:f4:74:e3:89:b7:2a:84:db:f0:24:
                    09:17:12:21:ba:c8:25:1d:be:61:9e:b6:bb:a1:db:
                    ad:45:d2:e1:12:62:f8:9a:a6:c7:4a:91:20:72:91:
                    22:6f:f9:05:5b:c7:54:7e:29:71:b4:09:af:f0:33:
                    d5:50:d5:15:e0:4b:4c:92:ff:02:cf:a5:ae:a2:11:
                    50:00:13:5a:30:37:66:5a:9a:fe:25:7c:1c:79:2c:
                    23:64:2e:c8:16:13:54:91:f1:5d:85:7d:de:cf:c1:
                    c8:ff:ab:d1:30:95:61:5b:21:4c:aa:b3:98:72:f8:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:78:CB:FD:D8:22:0A:34:A5:3F:C0:2C:3F:53:8B:0F:40:E0:EA:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbfd7d36-f105-3f26-9c6a-a9b1ef294c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.248.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:13:ce:a5:c8:24:59:e5:b4:68:cf:59:5e:0e:57:ff:04:57:
         0a:96:a1:a8:ab:77:52:11:a0:b8:19:be:c9:cd:13:18:06:01:
         a7:fe:15:28:d4:02:c0:a7:24:af:07:31:df:f8:a6:6f:cc:3e:
         93:c6:0a:97:20:ce:72:ac:19:6c:f2:5a:56:b4:41:c6:04:95:
         e3:18:b7:64:e3:93:82:32:a0:9e:b2:a7:ed:18:49:92:db:24:
         8f:46:0f:9d:96:de:7b:a5:66:1b:f4:9e:d3:ff:6d:7a:bb:09:
         09:c1:b5:35:23:20:14:a3:54:be:20:5d:0a:a8:4b:de:dd:56:
         d7:88:0d:7e:ec:69:e1:0e:07:55:94:f6:68:c0:7b:e1:b4:4f:
         6f:95:57:51:ce:e6:b3:c0:53:ba:da:c3:2c:d0:af:6b:8a:5e:
         e2:26:59:28:65:88:5b:3e:35:26:ac:4c:ec:b2:79:74:03:a8:
         b1:00:94:55:22:d8:8f:8e:b2:7a:0e:20:fe:e4:dc:6c:ae:ec:
         31:70:a8:47:fc:1e:03:2e:44:e3:18:81:ad:36:29:72:34:8c:
         3d:89:23:80:79:47:f4:3c:02:ed:da:12:64:d8:79:43:f6:e1:
         0a:70:92:24:3e:f1:99:a3:47:ca:1c:ed:ed:f1:ae:30:a7:8a:
         18:b4:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:38 2026 by rpki-client