Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa
File:                     34284c9b-e4df-318a-81f6-03c50bfc8009.roa (raw, json)
Hash identifier:          3VU+YstfTgALnoZrbHbiyuqMY+2Mx75FWzLAPWA9kTA=
Subject key identifier:   F9:96:9E:F4:CA:0E:64:DD:6E:27:B3:B0:0C:D1:C8:DC:32:BD:0D:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D5359EDAF205D0A6CC180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.197.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:53:59:ed:af:20:5d:0a:6c:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=38a6664b-f79d-4d9c-a42d-3e0995c6605f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:fb:78:26:51:9e:0c:50:4b:dd:69:75:9c:
                    d9:3a:2b:bf:5f:3d:26:b4:2c:9d:63:53:85:e5:60:
                    2e:5b:1b:36:4b:57:63:e1:4d:8e:41:4f:cc:a3:6c:
                    fd:e6:1a:2c:8b:8d:2b:e6:2c:a9:a2:d9:8a:7c:5b:
                    43:99:31:f2:11:e7:33:0d:03:0b:89:ae:8e:e6:c6:
                    f6:3d:9c:fb:b5:59:90:55:4c:d4:9e:5d:03:d6:5b:
                    38:69:f4:f1:43:81:d6:03:6e:82:22:7e:98:46:0a:
                    36:fd:87:1b:4d:85:05:be:5c:bd:11:a8:f0:4b:ae:
                    11:72:0b:fd:26:84:ce:54:d9:da:6a:6f:70:16:c4:
                    cd:59:8e:4d:27:02:28:44:a8:33:4a:e5:63:bd:82:
                    c0:04:56:9b:e7:85:a4:ec:b8:bd:17:b0:0b:46:de:
                    cb:ea:7a:73:f7:c8:7f:2c:91:f8:5e:22:8d:20:34:
                    4d:4e:1a:4b:f9:da:c6:23:e0:61:4f:3b:de:f2:8c:
                    e6:aa:8f:c7:80:ed:80:d0:aa:00:66:a4:29:b4:e4:
                    26:e7:ec:e5:ac:10:05:83:5f:f2:77:13:db:a5:77:
                    b7:71:c6:56:f9:2c:f4:2d:9e:61:50:3c:be:fd:e7:
                    b5:e5:a4:14:eb:fb:c0:6a:23:e4:0c:bf:a1:37:08:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:96:9E:F4:CA:0E:64:DD:6E:27:B3:B0:0C:D1:C8:DC:32:BD:0D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34284c9b-e4df-318a-81f6-03c50bfc8009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.197.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f1:6f:9b:47:5c:13:8e:a1:d5:08:ba:b8:7a:f2:75:2f:88:
         65:96:a4:2c:28:69:9c:ae:e5:40:06:b7:20:fd:f9:f5:0c:0d:
         33:16:68:61:0b:39:10:02:e2:e1:8e:82:ab:34:46:33:f0:c1:
         fe:b2:16:88:c7:46:f1:e4:78:03:03:0e:69:dd:e3:b9:7d:c4:
         73:00:72:e6:16:33:7c:46:0d:08:37:be:83:78:29:c2:83:c1:
         e7:9c:5e:6b:a6:90:38:45:ab:98:23:ab:46:0e:9a:61:40:d5:
         7a:8d:6c:ab:37:f2:6d:ce:60:3f:5d:b2:38:19:b7:dc:53:14:
         cb:43:f4:87:ca:9f:84:d4:2f:c1:a7:e0:0f:34:9f:9a:cd:c5:
         eb:ae:a1:63:7c:27:14:5e:94:10:5a:1a:3b:a4:f8:f2:50:ad:
         7d:63:37:a3:08:b9:88:82:88:7c:94:f5:14:c2:53:fa:21:06:
         3d:35:6e:77:44:60:61:ea:64:a7:56:ee:24:85:1b:22:c9:ae:
         e1:98:6f:a4:22:0c:74:5d:68:3c:72:5b:3f:49:4d:ef:8b:eb:
         11:f9:63:0f:c1:81:4b:c7:2c:25:b0:b1:e1:d2:46:d6:89:c9:
         d4:53:87:1f:62:e6:f5:c1:c2:eb:d4:5f:28:e3:63:83:b0:dd:
         fa:f3:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:56:59 2026 by rpki-client