Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e409f8-4e3c-38ea-b9d1-715dc355a12f.roa
File:                     87e409f8-4e3c-38ea-b9d1-715dc355a12f.roa (raw, json)
Hash identifier:          xio5mpq1acSHjkKnu5zYDc8E7DF1o6rsjCtfCgeWZZA=
Subject key identifier:   74:B6:6D:7D:A4:50:71:25:02:DE:6A:69:D8:82:67:5A:5D:53:E8:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D5B08A90559C734761520
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e409f8-4e3c-38ea-b9d1-715dc355a12f.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.239.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:5b:08:a9:05:59:c7:34:76:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=1f8afb5e-9a22-4593-875a-6172be6a11db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:ea:eb:87:e3:e7:d4:33:5b:51:12:66:a7:
                    33:27:50:77:28:bb:1e:c3:4d:8a:78:55:22:e2:bb:
                    38:5b:b4:0f:12:91:97:ac:b4:ab:d9:50:de:b9:30:
                    17:47:d0:14:0f:ba:de:36:29:ae:e0:f2:76:cf:be:
                    6d:85:b3:00:de:d5:ee:db:e1:ae:f6:1f:40:f8:2a:
                    e9:dc:02:e6:ae:85:91:67:ef:6e:9f:9f:71:26:ed:
                    90:cf:f7:0c:c3:31:c4:a4:00:e3:25:a6:a9:6c:e6:
                    aa:2f:b1:a6:88:11:19:ea:86:b8:2f:5d:9c:61:25:
                    f2:39:f0:fb:1a:e8:9d:67:1a:cb:2b:3b:ee:ab:0b:
                    32:47:14:34:af:ca:da:32:17:c5:32:c1:4d:c2:0b:
                    17:48:de:cf:f1:41:11:19:52:19:02:9e:bd:7f:0f:
                    ae:cd:5c:39:48:9d:86:47:51:c9:ee:a7:ea:ff:ef:
                    ef:8c:e6:4b:24:8a:5e:df:af:bc:49:26:be:34:35:
                    3c:82:7a:98:c3:2d:22:11:72:d9:d9:73:4a:2d:d0:
                    b7:54:06:85:36:f8:62:39:59:11:20:67:04:16:e6:
                    c4:07:9e:e5:27:ab:1f:e7:fd:f2:9d:ec:79:7a:3b:
                    78:fd:16:6c:5e:c8:50:d1:30:37:e5:2f:c1:be:6b:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:6D:7D:A4:50:71:25:02:DE:6A:69:D8:82:67:5A:5D:53:E8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e409f8-4e3c-38ea-b9d1-715dc355a12f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.239.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:52:12:c4:a4:c8:e5:00:10:36:95:e0:8a:e9:c3:81:88:
         87:01:84:8b:67:89:2d:84:ce:e5:46:89:3c:05:09:5b:6c:ba:
         4f:45:5c:5d:6f:e0:ab:c4:42:ba:3a:d9:44:f5:81:c1:56:47:
         c8:dc:a9:4b:d5:71:41:d4:b3:29:4a:0d:17:12:b0:af:14:0b:
         69:27:08:7c:a9:d5:18:62:08:ec:7f:e3:04:67:d9:c5:48:65:
         c6:bf:57:1a:7e:2a:48:7b:aa:87:1b:d0:75:88:01:40:39:dd:
         1e:2e:ab:2c:00:6d:e8:b9:37:96:e8:a9:0e:6b:87:5d:b8:13:
         27:43:ce:96:c2:bf:bd:ae:b7:3a:e5:2e:56:1b:e5:45:2a:ab:
         d9:de:89:dc:8e:7c:36:71:cf:52:8e:fe:b2:ab:7b:98:ef:8f:
         62:58:d6:c1:c6:25:a3:0d:e0:65:e3:7c:5e:46:36:d0:f2:4e:
         e8:61:14:fc:78:bd:ae:11:7f:07:f7:40:ea:28:ba:a2:a9:5f:
         f7:a4:a1:ab:c2:35:f8:36:23:c6:b0:e7:bb:8d:a6:d2:b0:21:
         58:de:0a:bf:c2:74:a0:b3:97:69:b5:e0:d0:c5:62:0f:96:7e:
         35:0f:d4:87:2e:5d:39:a5:42:6e:3e:a8:56:3f:9f:08:eb:c2:
         47:49:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:05:45 2026 by rpki-client