Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8056a24-f3c4-3c03-b60f-4b7dbc85383d.roa
File:                     a8056a24-f3c4-3c03-b60f-4b7dbc85383d.roa (raw, json)
Hash identifier:          XMk8MnYHXiNI6mgc7xP0MDdLkFqNakXr65b5ztLJK6M=
Subject key identifier:   AC:9D:49:5B:25:4E:2E:CB:76:96:25:39:72:09:17:56:54:E4:9C:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D54663F976FB6138E60DA
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8056a24-f3c4-3c03-b60f-4b7dbc85383d.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.201.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:54:66:3f:97:6f:b6:13:8e:60:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=ac993a86-6014-47b5-8111-4c79540c94b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:5a:d8:94:5d:cf:8d:d9:d9:3d:58:03:f6:
                    3f:3b:9b:b1:f5:83:fe:0a:a2:23:de:05:61:83:67:
                    81:fa:3a:5a:7f:8c:be:d3:96:54:c2:11:de:e2:46:
                    3b:34:3f:bc:eb:f1:cb:a5:2b:9c:63:9a:dc:45:a0:
                    e3:32:1c:f7:2c:4d:97:ef:12:95:38:83:9a:08:27:
                    49:4e:5d:ec:24:05:1b:ea:39:5a:89:17:a9:99:7b:
                    3d:1f:07:b3:76:c3:c7:bb:16:64:e4:90:9f:da:67:
                    ea:2d:6b:3f:90:29:b0:67:73:fa:6b:44:7a:4b:49:
                    f5:35:ab:e7:a8:24:99:78:6e:a7:e0:1c:71:7e:a2:
                    2a:a5:a2:93:94:d6:47:39:db:89:b1:b6:64:63:b5:
                    51:88:d1:6e:a5:d8:78:ba:9c:9a:32:fd:75:98:ac:
                    93:87:2c:64:91:b8:8c:e8:44:51:4b:0a:a1:94:0a:
                    44:85:14:b5:a7:a4:50:7d:cc:ab:9a:4f:87:fa:67:
                    c6:1b:7d:5f:65:12:5a:88:37:1c:ef:83:9a:e9:60:
                    c2:1e:a0:e4:0a:0f:49:16:42:5e:d5:98:c5:e3:d7:
                    85:0f:c7:fa:04:95:2f:25:c2:a6:4c:a4:d5:e3:b8:
                    80:9f:c5:32:cc:2b:98:04:e0:08:06:c0:58:98:4d:
                    aa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:49:5B:25:4E:2E:CB:76:96:25:39:72:09:17:56:54:E4:9C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8056a24-f3c4-3c03-b60f-4b7dbc85383d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.201.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:dd:99:95:00:17:4f:0f:bb:08:2e:19:68:46:90:85:1f:
         2d:b0:3d:8b:ca:3e:04:a0:ec:1e:ff:0d:de:6f:ca:d3:ad:ff:
         36:91:0c:e5:f2:ad:b4:f3:ac:14:1c:54:ef:7d:c1:9c:8d:aa:
         53:37:ad:43:1e:d6:8f:d9:ad:73:2f:bb:e0:72:57:6f:39:c3:
         d2:74:61:61:6c:89:b3:9d:14:f1:01:79:16:ac:cb:cd:ad:87:
         1a:5b:01:ad:83:c3:62:9f:08:ab:f0:08:f7:7f:c6:e0:86:76:
         d0:bf:01:3e:4d:95:c7:c9:06:e9:32:0a:16:9c:3c:21:3f:84:
         66:62:47:c6:1f:c9:af:9a:fd:6b:60:99:c0:9f:fb:96:e8:e1:
         3c:ab:9d:c6:7a:5e:22:0c:66:7e:e0:36:d2:d4:a9:3c:12:a2:
         e5:e6:34:25:c9:2a:c9:a8:ad:ca:d9:7d:32:de:99:20:df:71:
         8a:87:8e:90:46:db:72:4b:1f:5e:6d:1c:c1:06:39:26:7d:12:
         26:78:2a:a5:81:c2:ee:c2:89:af:f0:08:df:3b:03:bb:bc:a6:
         30:d0:8d:32:2c:e6:f5:72:2b:d2:a6:04:71:b9:4c:6e:e9:8b:
         34:6e:77:1c:4c:98:b9:6b:fc:42:0c:10:f8:1d:2e:73:2e:70:
         78:66:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:05:29 2026 by rpki-client