Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa
File:                     7f418109-56e8-36f2-bd16-6a8f22da6670.roa (raw, json)
Hash identifier:          cBDOzhSX0luW3kp/0nHtmplbtOqemzJznTfElN2xRCs=
Subject key identifier:   6C:DA:BE:05:E8:83:14:22:D4:AD:83:D3:93:31:85:17:F0:9E:84:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D5CEE66BCC72C96DE9500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.245.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:5c:ee:66:bc:c7:2c:96:de:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=ba5839c3-e02e-4b63-bc02-8b44c7920d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7b:89:e4:3c:e2:47:d7:da:90:bd:21:f8:f8:
                    bd:ad:52:3c:ab:65:51:b3:e3:76:58:ce:65:c1:d9:
                    24:28:e6:36:9f:f1:e4:7b:e6:0c:e5:58:2a:11:ef:
                    39:d5:23:d0:08:e2:39:38:f7:af:d8:79:a4:1d:41:
                    b9:86:bb:16:f4:9b:83:ff:8a:a1:0f:f3:4f:aa:59:
                    91:4e:f2:15:ab:dc:a7:36:de:86:19:00:73:b7:3a:
                    ed:72:4e:3c:35:9d:64:9b:e4:25:a6:a5:59:b5:80:
                    c0:b1:19:94:4a:d5:f5:44:b9:9e:f6:d1:ec:21:68:
                    3a:36:45:bb:d7:25:85:d6:30:c5:f7:80:cd:7e:ed:
                    fe:a7:01:6a:c8:c5:ac:69:22:56:47:71:a4:01:8a:
                    f2:fb:2e:32:19:a8:49:6d:10:cf:3f:b4:6b:bd:5b:
                    1e:50:49:4e:b5:f8:04:13:d2:2e:86:88:9f:66:55:
                    7b:16:b9:1b:22:74:8d:32:57:ee:8a:7d:bd:f0:ee:
                    d7:f8:41:23:ea:a9:1f:2f:1c:0e:c7:11:c3:af:fd:
                    00:1d:f8:34:08:4d:63:de:2d:ba:17:68:ed:23:a6:
                    c6:c4:b3:d3:78:bc:3e:55:c8:96:e1:c3:50:0f:ec:
                    18:40:70:82:9a:3b:2e:d8:fc:d0:97:4e:ca:f7:67:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:BE:05:E8:83:14:22:D4:AD:83:D3:93:31:85:17:F0:9E:84:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f418109-56e8-36f2-bd16-6a8f22da6670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.245.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ec:e1:34:34:7b:7f:ac:7c:18:af:80:3a:8f:78:4d:02:0a:
         0a:ae:ae:e6:1a:fe:4c:9a:df:11:cc:7e:60:8c:b2:c9:77:45:
         35:4d:dd:1e:79:ad:46:05:04:4f:4f:4a:e5:02:6e:69:09:31:
         0b:55:08:fa:2d:ba:61:4a:b6:a8:3a:31:76:71:b6:5f:35:63:
         b2:00:73:1b:7f:58:c0:fd:22:cd:96:92:3f:da:ef:7d:30:28:
         ac:df:c5:65:ee:47:16:ab:5e:71:e5:2b:2e:50:4a:7a:a3:a9:
         b9:d6:47:f3:75:e4:6e:e2:87:6a:63:cb:31:58:af:05:ed:da:
         f9:12:8a:3a:4f:04:0d:bb:fb:04:89:6b:70:45:18:85:e2:9a:
         00:11:57:6c:89:a9:71:a9:7b:4e:58:05:31:0c:03:f2:4c:64:
         aa:f0:59:33:09:e0:21:f8:86:86:8e:66:2c:64:b4:3a:5e:d9:
         4c:8e:d1:b7:b0:c2:49:14:a0:f8:15:ff:76:1a:28:eb:9b:43:
         30:1e:ae:ae:b7:c9:b6:27:f2:bc:22:38:75:29:5f:0f:7c:57:
         86:ab:72:e2:b9:67:fd:f5:e2:a3:41:13:59:df:06:8b:d9:80:
         87:a6:27:47:65:e5:e6:21:ab:cb:f6:55:ff:36:8d:e2:ea:fc:
         fa:95:6e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:00:11 2026 by rpki-client