Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b36ac031-095d-32ce-9e62-a2ec285217d3.roa
File:                     b36ac031-095d-32ce-9e62-a2ec285217d3.roa (raw, json)
Hash identifier:          YahVT/8Lnvd9+ik0tiGyzq1G6hAPA7yOjeZ/IXAEBKg=
Subject key identifier:   22:E3:A7:3F:70:43:A8:76:D4:34:9C:31:83:5C:31:2D:EC:B4:B6:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC565B57ACDDCCDCB2215CF92
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b36ac031-095d-32ce-9e62-a2ec285217d3.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        75.211.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:b5:7a:cd:dc:cd:cb:22:15:cf:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=be667082-7d38-4219-9600-31b569a1c65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:22:99:22:78:db:ab:1f:7f:5a:96:d9:7c:b0:
                    40:5e:10:63:c3:af:d8:9b:3a:26:ab:0c:8b:52:dc:
                    e6:39:3d:86:ea:91:5d:1f:a7:c4:ac:93:6e:4f:fb:
                    3a:5a:fd:57:15:92:9d:0f:ba:23:47:8e:2c:0b:d9:
                    cf:71:28:c3:c9:1e:8e:3d:d3:be:38:09:c0:a6:e1:
                    f2:f6:06:f6:93:68:eb:ad:ba:a4:22:e7:10:38:3f:
                    f0:ff:c5:7b:e8:51:10:38:ef:3e:d9:24:0a:72:e0:
                    48:28:83:6e:6d:95:59:f9:e9:8e:31:d6:80:76:fc:
                    d3:62:85:50:e1:a3:e4:b4:0b:62:c0:9f:88:f9:1a:
                    60:4c:37:a0:ba:46:5f:0f:69:4c:12:7c:4b:f7:94:
                    df:39:a3:9e:b7:31:9c:c9:74:22:f7:38:f5:ed:66:
                    ae:41:6c:e3:73:7c:39:47:16:b4:9f:6f:7b:5d:b9:
                    27:41:b5:68:43:2a:c8:8b:51:ce:af:13:e2:ca:0a:
                    ac:c1:2e:de:fb:b1:c2:fc:d3:70:67:c5:6c:74:5f:
                    82:1f:ee:54:e5:38:3b:2e:fe:e2:2e:96:98:d0:a7:
                    ce:16:8b:1c:8e:1b:c2:36:6f:65:91:bf:fb:3f:00:
                    d0:1b:0d:c8:f5:15:4c:05:b4:f2:2a:00:9e:20:45:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E3:A7:3F:70:43:A8:76:D4:34:9C:31:83:5C:31:2D:EC:B4:B6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b36ac031-095d-32ce-9e62-a2ec285217d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.211.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:4d:7d:04:fb:97:f5:13:59:23:ac:24:81:e1:db:d7:f6:
         85:81:27:d2:b3:9f:70:64:75:3e:3a:dd:fa:66:74:c9:bb:71:
         de:ea:eb:0e:46:69:7f:bd:ff:d1:eb:cb:0c:a3:9d:7b:3a:31:
         f0:87:cd:14:17:bb:ba:06:89:97:38:5b:a2:09:e7:6b:be:b1:
         ca:6f:22:2d:67:06:04:94:c5:70:28:07:24:58:b7:b3:ff:4b:
         c1:3e:c2:ee:16:d2:13:56:c3:39:a6:22:39:be:bc:43:21:d2:
         ae:9c:65:85:9a:fc:39:6e:94:bc:81:7f:a2:35:77:26:a9:8c:
         ee:6c:c4:4e:c0:09:e6:64:8b:71:f2:4a:95:57:f7:51:4a:89:
         b6:d7:df:91:2d:e2:3a:74:57:38:76:10:4d:a0:7d:18:06:b3:
         38:fc:f7:5a:60:aa:3b:86:f0:5c:f6:ef:69:d1:a3:5b:94:90:
         82:61:57:36:99:d0:02:1d:1e:90:35:db:86:3b:b7:60:3d:e1:
         4e:33:94:28:01:fe:aa:84:c9:3f:2e:cf:42:d2:29:11:17:00:
         90:91:15:5c:d2:c3:f3:8c:da:25:34:e1:f2:51:1c:dd:6a:70:
         f7:40:04:e9:3a:91:20:98:58:4f:27:c0:a2:32:d1:e3:e5:39:
         04:d6:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:01 2026 by rpki-client