Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5029ef48-0821-3c20-a655-803906a0196c.roa
File:                     5029ef48-0821-3c20-a655-803906a0196c.roa (raw, json)
Hash identifier:          3QagxyjkxsnUu3xOZX28gkjM2WaUAUI8+EDHoKLR3Uo=
Subject key identifier:   90:89:0D:B1:21:37:70:6A:DE:42:72:CD:F1:89:CC:64:1A:F1:8C:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC565B65AB455DFF533A2D620
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5029ef48-0821-3c20-a655-803906a0196c.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        75.215.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:b6:5a:b4:55:df:f5:33:a2:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=25ae292b-5215-4da7-8ec1-fd957cc53303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:0c:d2:2f:a5:a4:31:91:3f:62:5c:fb:95:
                    d6:f5:a6:f2:b8:a2:95:57:0e:6e:21:cf:27:da:38:
                    4c:ee:60:66:5c:a0:a3:0c:90:c1:ca:55:60:95:88:
                    9b:f0:51:71:51:1b:9c:b3:b7:0f:02:7f:9c:49:bb:
                    97:72:4f:d2:08:99:b9:5b:a3:f1:64:22:e7:58:67:
                    f2:35:4b:e8:a6:f8:eb:ce:ee:0a:bc:d5:eb:6e:02:
                    4b:3a:02:71:96:26:b5:51:0b:60:08:e6:09:16:84:
                    94:dc:a2:3f:d4:8c:d9:59:d8:61:59:b2:9b:1b:79:
                    30:34:4b:f9:44:25:ba:69:27:b3:8a:22:d9:ba:83:
                    8d:06:09:39:a6:9c:0c:93:49:90:4b:39:9e:58:47:
                    a8:27:33:db:df:79:37:71:7a:e3:4a:33:fe:73:3f:
                    d0:bc:d8:07:1b:27:6c:c3:bf:bd:86:1d:09:51:51:
                    51:a5:16:d0:87:5d:36:ba:69:8a:4d:cb:75:f0:03:
                    ae:b1:26:e4:ff:59:62:db:dc:0f:47:0c:2d:d9:74:
                    53:70:ef:62:f0:57:e2:09:26:2a:e9:03:e8:cc:cb:
                    b4:df:61:60:f0:fb:47:e6:cd:b7:3c:2d:b6:6f:0f:
                    d7:28:53:7a:3e:10:0c:4a:8e:86:37:fd:ca:83:e8:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:89:0D:B1:21:37:70:6A:DE:42:72:CD:F1:89:CC:64:1A:F1:8C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5029ef48-0821-3c20-a655-803906a0196c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.215.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:64:99:fe:7d:ea:6a:fa:16:8e:68:c0:b7:9c:00:a4:6d:
         b9:50:96:42:ac:c6:01:0e:c0:17:6f:15:ce:73:2a:23:fd:58:
         ff:f8:19:5e:02:56:a6:d1:dc:d7:cc:fd:3e:06:43:7c:d8:e3:
         82:f0:90:4f:c0:fc:3d:b4:1f:8b:76:08:b0:63:0b:8a:4d:80:
         a3:d3:45:2b:db:15:a0:2a:c9:44:0f:db:a8:0b:37:be:95:6d:
         83:0f:74:71:50:cd:11:de:5d:24:e0:69:93:d6:d0:96:36:8d:
         2c:94:ee:19:ec:35:de:04:82:a0:45:4b:8c:a9:11:f9:5c:a3:
         f2:30:94:12:ab:2d:ab:06:68:77:5c:6f:fb:bc:09:42:cd:b9:
         0c:76:b9:f0:ff:b4:bb:12:61:50:3b:b6:bb:60:96:bb:a3:37:
         ff:7b:c9:4b:1b:47:57:61:9c:1e:f7:5b:82:6c:12:0a:7a:e6:
         71:59:26:20:50:e5:b6:51:f1:a2:a0:a7:7e:0b:17:49:fb:66:
         87:4e:1f:06:a7:bf:bb:c0:69:b2:3f:e1:b1:96:c4:b9:24:e0:
         04:50:4c:46:06:b4:f2:53:40:1e:59:05:ed:35:e4:2c:84:5c:
         7a:16:7b:be:f6:01:84:1d:b4:4d:50:07:5f:3f:b1:95:71:2a:
         8f:17:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:39 2026 by rpki-client