Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0428a0c8-e4c1-34c4-b6f8-579a29dee8bb.roa
File:                     0428a0c8-e4c1-34c4-b6f8-579a29dee8bb.roa (raw, json)
Hash identifier:          7g79VvRjUnv2CJjAvpdysdybFJy4Vv+uO/xgaWRPTXk=
Subject key identifier:   E9:D8:3C:D4:F4:F2:45:93:30:21:2C:C1:8D:35:C1:DD:46:79:25:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D57843ED96E053B7D0580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0428a0c8-e4c1-34c4-b6f8-579a29dee8bb.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.212.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:57:84:3e:d9:6e:05:3b:7d:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=5072e85d-02b2-49f9-94ba-7f4018334a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:f2:9f:7a:52:51:1d:97:f8:8e:8b:4d:8d:
                    39:43:4d:a4:80:d4:75:5d:d5:43:e6:ef:17:d2:7f:
                    7d:6b:d2:7e:d8:38:74:72:2f:b7:64:dc:6c:96:a8:
                    65:b7:e4:04:cb:2a:3a:99:ad:7b:33:42:5f:38:da:
                    33:42:a8:69:14:5c:9c:c6:59:34:cb:6d:d3:8b:c6:
                    6a:99:7e:39:b2:c0:13:f8:ec:57:7b:70:3a:2d:59:
                    4b:af:76:f4:51:e2:f0:db:9e:9d:64:32:f3:85:61:
                    c8:dd:77:f2:f1:4d:eb:aa:9f:8f:59:ab:74:27:60:
                    57:e8:6d:49:4d:4e:0b:cf:c5:b6:31:d7:08:ed:ef:
                    25:c8:b7:c7:ac:b7:2c:49:27:77:ad:79:c7:4a:30:
                    03:bf:8c:89:b8:29:5f:80:45:ce:f6:fa:1d:1b:ef:
                    fa:71:d5:6b:87:33:84:dc:e2:4d:e2:f4:f1:7d:b0:
                    dd:76:1c:39:9b:8c:7a:b5:e8:2d:a3:3b:2b:4d:60:
                    b6:ae:0c:46:0b:cd:d8:13:b9:bc:6b:1d:64:ce:36:
                    41:50:05:20:c2:50:5b:e6:a8:b9:d9:a4:c5:bd:ed:
                    cf:6d:69:2c:c8:a7:fa:87:a0:ee:69:69:f0:8d:06:
                    e7:e7:0d:d6:fd:41:0c:0d:25:67:b7:50:ee:49:e8:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D8:3C:D4:F4:F2:45:93:30:21:2C:C1:8D:35:C1:DD:46:79:25:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0428a0c8-e4c1-34c4-b6f8-579a29dee8bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.212.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:38:5f:79:ab:e5:76:1c:93:6d:35:30:7b:25:4f:fd:f2:24:
         57:8c:e7:1a:02:94:bc:53:29:e9:29:e7:f6:60:b6:8a:8c:20:
         1a:f0:6d:57:df:6c:18:8a:68:8a:3d:27:bd:09:24:96:8b:c4:
         c6:50:d7:f1:74:44:4f:7d:0d:73:e6:df:43:82:dd:19:7e:78:
         31:81:fe:1f:e8:0d:fa:14:cd:49:4e:83:13:b2:e7:3d:7b:5a:
         a5:5f:e2:51:32:73:7d:c6:a2:08:af:30:90:37:f7:3d:48:4e:
         06:6c:a8:af:5d:72:0e:74:7b:38:c2:9c:d9:85:96:d1:71:e1:
         cf:ed:14:86:75:46:d1:6b:7c:a3:de:04:0f:00:49:40:e3:a3:
         54:71:a1:3f:cd:17:5c:ed:56:26:0b:d7:b5:fc:86:ff:55:c4:
         cb:0d:54:94:2b:0b:09:c4:3e:8e:18:2e:db:ff:15:e5:a9:0d:
         cf:f4:21:e0:fd:47:e5:9a:67:53:1f:5f:f7:e9:22:79:2e:b4:
         7c:5f:3f:7f:d7:7d:89:43:66:42:86:7b:79:70:7d:a3:33:b7:
         95:8e:61:2d:02:e1:bd:32:fb:af:59:17:6b:9b:94:e2:c1:46:
         1e:8c:f0:99:fd:52:9e:53:74:96:f7:fd:cd:fb:7f:6e:82:e8:
         12:66:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:44:16 2026 by rpki-client