Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d9ea498-1b39-3bef-a148-ebfd39e7fece.roa
File:                     6d9ea498-1b39-3bef-a148-ebfd39e7fece.roa (raw, json)
Hash identifier:          JykfM6OVbQhBPiiRteEzF6xcsCZ3oBDCaDC76PblKX4=
Subject key identifier:   70:65:DE:B5:BA:61:2A:7C:41:59:CC:6F:E7:FD:3E:D8:A6:CA:5E:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC565B9EBA1EF5632D6FB1F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d9ea498-1b39-3bef-a148-ebfd39e7fece.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        75.241.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:b9:eb:a1:ef:56:32:d6:fb:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=b3994418-be6f-45b7-8c70-49f9fe9e3b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:28:67:06:9e:f8:84:93:1b:c6:ae:50:c2:
                    56:ab:6e:d4:b9:a9:93:de:44:24:4c:bb:3d:30:1d:
                    a7:7a:36:f5:2e:50:c2:df:a6:6c:6a:b8:75:df:8d:
                    95:b1:bb:d9:db:4b:33:c4:7b:8c:d3:1a:e0:a2:89:
                    ed:96:be:e9:1e:13:c4:66:33:bf:85:26:aa:e8:a8:
                    97:90:88:25:e4:cf:f7:82:ee:4a:09:77:cc:40:e7:
                    e8:2b:d4:5f:c7:36:4f:f9:d4:d1:af:5f:66:cd:13:
                    7a:89:92:fb:5f:de:4d:67:2b:75:c8:c5:55:5e:77:
                    d8:01:72:cc:2e:b4:04:2e:8a:54:49:36:02:c2:ed:
                    be:07:17:ed:0f:aa:2d:a5:4d:ce:75:05:02:9a:57:
                    93:36:cb:ff:c3:83:47:43:19:ae:08:95:b0:ff:5d:
                    69:17:38:34:26:e1:09:97:39:09:e0:1f:b4:75:8e:
                    b9:22:a6:3f:de:4c:bd:9b:2c:f4:d4:45:c2:30:29:
                    80:98:77:6f:a8:18:07:82:32:d9:ed:30:cf:fc:21:
                    80:e4:d7:9c:c0:e7:b3:2b:b6:59:a0:be:e2:4d:3f:
                    8b:cb:83:df:f4:d3:94:a0:eb:2c:0a:9b:d9:ca:85:
                    83:7a:0b:b3:35:ac:35:55:cf:48:c2:3e:22:11:db:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:DE:B5:BA:61:2A:7C:41:59:CC:6F:E7:FD:3E:D8:A6:CA:5E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d9ea498-1b39-3bef-a148-ebfd39e7fece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:ad:aa:51:b8:61:7f:f3:87:16:f9:fb:b9:35:e7:af:fa:
         b8:53:05:da:c7:68:96:21:d7:10:e5:80:f7:76:1e:0c:67:7f:
         fd:54:f3:12:50:da:51:58:0e:07:6b:86:92:a0:65:05:de:24:
         f3:65:a2:bd:76:eb:0f:cb:9c:9a:bc:7b:23:c8:8a:11:6e:95:
         b9:fb:65:67:eb:a1:39:e9:81:2c:26:a5:40:c5:0d:b7:4d:e5:
         bd:b1:44:08:13:80:74:02:03:b6:db:c1:b1:24:76:5a:b2:5a:
         b4:5f:c8:70:0f:0a:5f:10:7f:4e:58:5c:71:d9:1a:52:57:e6:
         8c:38:9c:43:f6:48:80:7a:36:92:49:13:10:86:d6:f2:a9:20:
         ba:7b:77:7e:37:00:31:0e:7d:2c:73:63:8d:cd:6b:2f:c7:18:
         d2:3b:b7:bf:5e:8b:3e:bf:28:e6:f2:a1:48:6b:7d:93:28:47:
         96:40:fe:6d:a8:3e:9b:66:0b:bb:41:7e:e5:fa:14:9e:a1:5c:
         28:71:73:1c:28:36:7a:21:52:12:a0:26:f7:8f:7b:56:51:32:
         37:24:1d:5e:8a:17:75:4b:8d:9c:b7:56:2e:fc:40:bd:b2:4b:
         ec:97:52:e1:71:3e:bb:7b:7a:fe:5c:a0:83:15:05:0f:1e:36:
         9c:49:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:54 2026 by rpki-client