Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0b8712-92cb-3aea-8fa9-3a51466a243d.roa
File:                     1c0b8712-92cb-3aea-8fa9-3a51466a243d.roa (raw, json)
Hash identifier:          acZnZ3d/QH5+v98PTGq4h+cZapI8mC591EwIKw4h1iI=
Subject key identifier:   00:4D:46:97:A9:3A:9E:47:1E:34:09:0A:E2:F3:03:9D:F9:C2:F5:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D481116CA100E1C34A700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0b8712-92cb-3aea-8fa9-3a51466a243d.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.224.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:48:11:16:ca:10:0e:1c:34:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=0cf6c6b2-a868-4a43-b3bf-cca931581ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:06:af:22:ac:4e:46:19:e6:d2:e6:8e:2b:
                    b9:18:d3:4f:7f:c0:21:c0:02:ad:b7:60:16:fd:05:
                    28:f0:27:f3:af:48:8b:cd:95:58:e3:22:99:24:bb:
                    f3:51:ed:a5:2c:22:f9:90:28:c3:6e:27:1a:47:db:
                    c0:6d:ca:b3:cb:b9:1a:2d:ec:99:e3:fd:77:c0:56:
                    ae:7b:5b:8f:31:b3:89:d6:c9:43:4a:3b:31:cf:d1:
                    86:25:e5:c3:b0:09:27:55:72:f3:a3:5a:7e:41:54:
                    0f:6f:7f:ca:0d:cf:77:63:6e:a0:aa:1c:fe:02:9d:
                    bf:df:50:90:87:8f:e4:13:68:64:4f:24:22:4b:ea:
                    85:ae:f7:27:20:6c:cd:63:d4:c1:f8:b8:2a:0c:3e:
                    f1:b3:2e:cd:9b:7d:ab:08:fc:45:b6:41:90:d6:f3:
                    9f:4a:94:33:99:8f:bc:84:4d:e5:84:7e:f6:4b:ff:
                    44:e5:bd:79:92:ee:84:a5:2c:f2:8c:92:54:84:19:
                    be:e6:68:08:48:30:c5:7b:af:b5:05:0b:17:19:32:
                    a8:d0:38:8a:f8:28:0f:93:13:f7:e0:c2:0a:24:eb:
                    cb:09:a0:3a:ad:d2:88:af:99:d4:c3:c2:c5:78:b7:
                    84:cc:56:29:26:4a:d0:9d:d8:fa:b0:89:86:09:c5:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4D:46:97:A9:3A:9E:47:1E:34:09:0A:E2:F3:03:9D:F9:C2:F5:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0b8712-92cb-3aea-8fa9-3a51466a243d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.224.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:f7:07:98:bb:31:4f:92:c6:8e:67:9d:aa:85:c3:51:9b:
         69:d3:c6:ab:7f:88:92:39:18:04:4b:3f:d6:b5:ae:79:11:2a:
         99:b7:46:4d:40:f5:34:55:5c:dc:14:8f:9b:9c:20:0a:e4:33:
         13:4c:46:a3:fd:b2:71:63:35:9e:0e:bb:bc:28:c2:db:52:38:
         43:2b:84:c3:1d:94:cd:4f:98:ab:10:48:fd:5e:00:a8:91:93:
         26:eb:65:b0:12:65:b5:b6:b8:a8:bd:72:12:9e:dd:e2:b6:1a:
         fb:4f:21:1c:c4:c1:f0:15:c1:0d:cb:c2:c0:88:22:c8:d3:93:
         8c:bc:b8:5d:f6:75:b9:f5:f3:a0:fd:37:dd:93:7f:eb:4e:35:
         2c:e8:1b:fa:c6:22:71:bc:89:fc:65:c1:6b:d8:e3:6e:7f:6d:
         e6:a7:84:6a:6b:da:fe:ae:50:e8:7b:86:0a:79:00:2a:3b:37:
         f7:b2:4a:f3:13:47:e3:50:75:66:91:74:e3:75:0b:8f:50:94:
         a0:11:18:4d:ec:6e:6b:32:24:67:e2:a8:65:fc:06:4d:1f:48:
         f6:a8:d5:6c:f0:46:98:a8:90:1a:45:cd:08:9e:2e:4b:be:61:
         c2:7e:b5:ad:28:0c:42:99:2f:97:0c:dd:64:74:5f:32:b0:6f:
         e2:7a:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:24:15 2026 by rpki-client