Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc477b6-1479-39be-a975-3f44ebfc40a8.roa
File:                     ffc477b6-1479-39be-a975-3f44ebfc40a8.roa (raw, json)
Hash identifier:          Gg729KbT6syqfAU2li1pnPUMjBaOkxdIn8n/EhyCZtU=
Subject key identifier:   27:77:94:AD:DD:DF:BE:2E:E6:CF:98:0B:EB:D4:EB:E6:14:ED:80:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CE4C7A4545476744B89115080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc477b6-1479-39be-a975-3f44ebfc40a8.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        75.221.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:a4:54:54:76:74:4b:89:11:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=d3b09931-20cf-436d-b139-365e8a3b723a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:dd:bf:d0:bd:78:b7:ec:b8:a3:98:0d:5f:
                    4c:c0:57:2f:8f:4e:28:e4:09:18:77:d8:88:65:63:
                    ef:ab:ae:8e:c2:e7:ee:d8:eb:27:d1:44:70:0d:30:
                    bc:26:e7:b2:48:27:ca:2b:79:bc:5b:81:97:31:0a:
                    34:82:84:0b:3e:1f:3c:a0:f9:0f:d3:89:a9:ab:03:
                    4a:b0:74:c8:ae:1f:25:6b:23:51:5b:3a:6c:15:da:
                    19:b7:89:79:80:d8:de:da:78:d1:19:01:c1:11:61:
                    26:ad:9e:55:3e:8b:ca:5d:4f:51:73:7e:2a:32:04:
                    13:ef:eb:88:6f:d1:7a:7e:22:07:c0:53:f5:a9:0f:
                    17:2e:68:2b:c0:35:5b:9e:9b:ec:8c:dc:f3:9e:a6:
                    aa:48:9e:2e:fe:0c:04:cc:58:76:1b:f2:8c:80:96:
                    92:8c:97:8c:67:e3:88:64:90:c8:47:53:b3:f2:77:
                    25:29:7d:92:45:98:a1:ed:c0:de:af:64:13:80:25:
                    4f:42:1a:2b:40:79:fe:68:c1:bb:37:93:3f:43:e0:
                    e7:b7:70:48:2a:26:5f:96:d6:b8:6b:aa:c2:1f:86:
                    4e:4c:a7:23:d8:58:7c:ae:e5:26:8d:4a:c6:10:94:
                    b5:d2:76:16:64:24:75:e9:cb:31:a3:87:1a:96:4b:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:77:94:AD:DD:DF:BE:2E:E6:CF:98:0B:EB:D4:EB:E6:14:ED:80:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffc477b6-1479-39be-a975-3f44ebfc40a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:46:91:14:4b:69:7f:ff:d4:86:fb:50:26:2c:b8:99:67:fb:
         8e:30:f7:a6:6e:d9:c9:64:0c:ac:f3:8c:31:17:08:14:18:b9:
         f0:59:57:3a:a7:eb:95:1e:c9:fa:f7:3b:9c:69:a5:d5:35:3a:
         81:1c:2a:12:e1:40:bd:c6:89:57:49:b7:71:b7:6f:17:37:86:
         21:69:25:f8:e5:e3:34:38:75:c0:57:a1:57:7a:65:59:57:9c:
         a3:43:18:e7:4c:70:aa:ea:21:bd:34:cc:43:3c:6e:55:ed:e9:
         df:ec:89:1b:1d:37:22:ea:10:0b:6a:37:d9:8f:ef:aa:98:1a:
         f0:23:d1:e6:4a:7a:00:b4:14:6e:e5:6d:26:38:be:87:ed:ec:
         18:ff:31:3f:45:dc:22:6f:dd:09:be:e3:bc:35:59:42:f0:d0:
         4b:e1:f8:b1:5c:de:0c:26:b5:5b:3a:16:85:a7:7f:50:9d:d4:
         4f:b9:25:88:d6:52:61:e1:59:8d:36:ef:c8:f9:1a:3b:c1:da:
         7d:3e:3e:95:fd:60:87:13:4e:fa:23:0d:83:8f:79:3c:86:16:
         45:d7:e0:51:72:c4:9b:ec:d4:00:ac:9c:5d:89:e7:c3:bc:98:
         a4:0d:24:7f:bd:2b:7d:e4:bb:a6:84:cc:03:95:1e:4b:bc:3d:
         f8:b2:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:07:09 2026 by rpki-client