Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/913e16c0-984c-30b6-a5b4-fc3c7ece4591.roa
File:                     913e16c0-984c-30b6-a5b4-fc3c7ece4591.roa (raw, json)
Hash identifier:          bySKEsDwetWIIt/Y3ZuolZCmlktBKmD8YFjc7upAPrc=
Subject key identifier:   CD:94:96:0B:94:0C:23:0A:E9:55:9E:9E:98:04:83:96:CE:CB:A6:B8
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584E736A33B9ADA128EFF115CAC0
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/913e16c0-984c-30b6-a5b4-fc3c7ece4591.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        149.75.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:33:b9:ad:a1:28:ef:f1:15:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=cfc0dd0d-ef3f-4ca9-a919-4d0499b2c6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:49:ae:8a:18:ed:b7:0b:1c:bd:32:27:d6:
                    40:ca:6b:97:c0:a7:c0:33:67:f9:77:97:86:9c:43:
                    3a:ec:09:b2:b9:38:b9:fb:28:e6:00:6f:85:10:d4:
                    b5:c5:ae:bd:09:f3:26:ec:bb:85:be:38:a6:20:7b:
                    5b:b3:79:7b:3e:18:98:f3:b6:7a:d1:bb:f7:57:4f:
                    00:e1:a9:70:09:99:bc:cb:13:76:33:8b:87:b6:89:
                    0f:ab:50:de:cf:5d:00:ce:6c:69:d3:11:d3:5c:96:
                    30:43:4d:fc:eb:da:18:a6:43:69:60:97:09:5d:57:
                    0e:c4:a1:56:d2:95:8f:7a:f4:ba:82:15:47:9b:d2:
                    42:ab:bd:8c:06:30:e3:6c:29:30:2c:92:10:9c:78:
                    a3:b2:b9:fb:3c:01:14:33:b9:b7:78:c2:d2:fc:5c:
                    31:02:fc:a7:0f:b1:97:17:3e:2e:81:2e:b1:fb:86:
                    25:f7:e9:48:47:67:24:5c:5f:a0:1d:da:49:53:fa:
                    6b:31:aa:dd:7c:64:b8:9f:99:10:84:aa:0e:6f:02:
                    b2:31:d3:cc:3e:09:b3:5d:88:db:8b:b5:a5:ad:de:
                    49:18:36:98:f4:91:40:ac:9e:3e:a9:52:4e:a2:97:
                    bb:72:ec:f2:35:07:24:bf:1a:f9:9b:8a:c6:b5:5a:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:94:96:0B:94:0C:23:0A:E9:55:9E:9E:98:04:83:96:CE:CB:A6:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/913e16c0-984c-30b6-a5b4-fc3c7ece4591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.75.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:0b:8d:08:f1:bc:25:26:aa:22:e8:32:5f:6f:df:81:49:
         e0:d0:f8:14:27:da:05:38:5c:9c:97:41:17:d7:04:05:98:0b:
         12:dc:ae:12:67:0b:7d:56:87:2a:de:22:e1:4e:2e:6a:86:01:
         00:92:a4:96:80:9d:be:20:94:eb:6a:71:06:33:94:26:a8:e5:
         2b:08:6b:6e:06:9b:e3:fb:3d:9a:b0:98:f4:1b:1c:47:ce:d2:
         88:b3:a3:88:ed:c2:3b:4b:0d:cd:1f:24:6e:f1:ae:46:59:20:
         05:fd:cb:e1:bf:08:21:24:a1:f5:f9:13:35:91:23:8f:a6:5d:
         72:56:8c:d6:ec:85:13:f7:ec:37:29:44:cb:f7:b5:39:bc:5f:
         0d:06:b9:27:aa:56:74:c1:c8:3a:37:95:66:1d:8e:90:b8:66:
         94:e9:8e:2e:61:c3:46:1a:87:09:2c:9b:fe:03:c7:4e:9f:5b:
         30:63:df:a2:92:62:22:25:04:64:0e:4c:11:b1:45:9f:2f:dc:
         52:9a:be:94:84:43:ae:8c:11:96:e7:df:96:a8:99:26:cc:f4:
         7a:5c:6e:d8:15:b1:67:dc:68:a3:60:5a:fa:be:27:37:75:4c:
         0c:bb:57:ba:ed:f0:b7:67:a1:a2:61:82:48:2b:22:53:90:11:
         81:37:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:17 2026 by rpki-client