Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f1ac271-0c16-3308-8fa8-79b7de3d7ea4.roa
File:                     1f1ac271-0c16-3308-8fa8-79b7de3d7ea4.roa (raw, json)
Hash identifier:          leCL2rXw+XCDYFMCnIO5AbbfqQ7/0JY6Lmz6LMyfPts=
Subject key identifier:   42:BE:1F:C5:8E:3C:4B:95:B6:03:91:5E:CB:0B:51:B9:0E:46:BD:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D49E16BF9C3785A10AEC14900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f1ac271-0c16-3308-8fa8-79b7de3d7ea4.roa
Signing time:             Wed 25 Mar 2026 19:09:47 +0000
ROA not before:           Wed 25 Mar 2026 19:09:47 +0000
ROA not after:            Tue 23 Jun 2026 19:09:47 +0000
asID:                     6167
IP address blocks:        75.255.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:e1:6b:f9:c3:78:5a:10:ae:c1:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 19:09:47 2026 GMT
            Not After : Jun 23 19:09:47 2026 GMT
        Subject: CN=386cf1e4-f58e-4be4-9e38-739e0089d432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:f8:06:82:bf:23:1d:3f:77:0d:24:4b:73:
                    eb:76:3f:e8:17:1c:d8:94:da:ab:6f:74:08:3e:e0:
                    84:28:4a:4f:87:60:0c:1b:1b:b4:6c:b9:32:c5:c8:
                    cf:39:12:68:32:05:b7:2e:ff:61:e3:a5:40:60:7e:
                    11:a1:92:6d:a6:4b:22:84:dd:a3:d3:7f:f3:6a:84:
                    1f:d3:40:ba:a8:05:ac:a2:23:c0:71:81:17:c8:8e:
                    98:4b:ec:e7:5c:a4:1a:e9:40:a8:41:23:97:97:4a:
                    8d:11:db:dc:1d:0c:62:5e:e7:19:29:24:24:1c:db:
                    6a:a0:f4:87:2c:ce:ab:da:a9:0d:c5:5b:24:a8:94:
                    60:72:f0:02:58:41:a4:1e:f0:47:0d:82:52:17:65:
                    87:57:aa:7b:cd:de:c6:cc:c9:e1:f4:d0:92:f1:5a:
                    98:b7:4c:bd:1a:2c:0b:95:53:d6:ed:3f:d9:af:9d:
                    9d:f3:7b:f3:80:f4:d2:9c:c0:45:3f:40:c3:81:00:
                    c9:55:62:42:c2:e6:9d:84:d6:b3:66:34:ff:aa:cd:
                    50:24:f4:ed:8a:37:1d:19:94:1e:94:10:7a:43:28:
                    0c:06:75:f2:31:9a:c7:62:07:75:11:4b:79:61:a8:
                    69:2c:23:9e:fb:eb:48:75:6a:85:9d:86:f6:5b:16:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BE:1F:C5:8E:3C:4B:95:B6:03:91:5E:CB:0B:51:B9:0E:46:BD:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f1ac271-0c16-3308-8fa8-79b7de3d7ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.255.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:91:f8:ab:dd:b3:1a:4f:09:8c:35:59:84:12:2f:8b:d5:6e:
         08:58:e2:45:df:ac:3a:56:37:82:7d:86:d4:25:50:4c:7e:b7:
         8a:f4:18:f9:8d:46:8a:5c:d7:6b:31:f9:a0:98:38:f7:50:3d:
         04:d3:77:72:fa:06:51:75:77:23:4a:11:b9:ff:46:71:c0:bb:
         4b:2d:a1:28:73:91:70:7e:eb:cb:32:ce:38:c6:54:da:6a:86:
         aa:d9:27:4f:5f:0b:46:f0:ac:e3:3a:f1:bd:b3:14:da:4e:ac:
         ca:41:1b:a4:20:e4:04:7d:2d:b7:c1:58:c8:8b:ba:dc:0d:6f:
         92:c4:31:92:8b:f5:87:f0:f7:9b:b1:ff:4b:12:14:3b:a5:75:
         06:ee:38:37:48:f9:9f:01:ec:76:63:ae:01:71:94:3a:5a:16:
         f9:cc:89:10:10:4f:de:cb:c4:91:9d:f2:13:9d:04:84:5a:56:
         bd:0c:24:fc:c2:a0:07:10:65:a1:91:b9:4b:43:80:95:5c:d0:
         c3:13:79:7a:e2:e9:ec:ea:b1:b2:06:38:8a:17:58:3d:45:7d:
         f2:bf:71:4c:09:0f:70:12:1c:ab:58:3b:58:ae:5c:32:2d:14:
         01:5b:40:94:57:79:05:fb:0e:88:e4:3c:1b:72:2d:5f:c5:13:
         37:8c:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:12:49 2026 by rpki-client