Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be47b5ed-06fd-32eb-b093-fd82b6dd7e99.roa
File:                     be47b5ed-06fd-32eb-b093-fd82b6dd7e99.roa (raw, json)
Hash identifier:          +uQ8HjpwgfCcf2b1RzZdAd0daG+VOvlYFgiDRyxSgIk=
Subject key identifier:   7C:98:64:BC:03:F8:8A:12:6E:E2:D2:93:85:5A:A3:D9:6D:90:58:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC565B50D594CCC72B6671480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be47b5ed-06fd-32eb-b093-fd82b6dd7e99.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        75.209.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:b5:0d:59:4c:cc:72:b6:67:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=f6d4b77a-d4e7-4246-a4cb-d52349c89f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:4e:51:bd:76:bc:aa:69:4c:6d:f3:88:5a:
                    b4:f6:4e:70:3c:d8:05:16:74:a1:47:98:5d:be:53:
                    fc:47:6b:cf:32:43:94:af:0c:04:02:b6:ca:f9:17:
                    2f:1a:0c:10:49:af:0d:2d:47:84:4a:49:d3:ac:f6:
                    2a:60:a1:65:2f:99:6e:de:9a:83:7d:fa:d5:30:b0:
                    31:a6:70:56:1b:83:f8:5c:2b:a5:d0:dc:3a:93:e6:
                    a3:3b:ae:8f:1a:6f:06:b0:10:5b:d1:fa:c2:ce:19:
                    1a:a0:eb:8a:dc:76:6b:54:71:1c:cf:4c:8d:64:18:
                    48:81:67:80:45:3e:7b:d3:14:a2:c5:6e:6f:30:03:
                    9e:6f:57:ce:fb:82:fc:01:0b:8e:8a:27:4e:f4:a8:
                    d3:6d:f0:b0:37:1a:4e:4f:59:e0:d3:41:50:8a:6c:
                    ef:06:49:6d:ac:4f:dc:b6:c7:ff:cf:53:f7:8a:d4:
                    5b:36:5a:82:57:c9:a0:88:eb:6a:61:39:b6:a4:6f:
                    47:dd:c6:1d:c6:5a:d2:75:41:15:e6:e6:a0:5c:5a:
                    af:04:c2:99:5e:54:2b:e0:7f:85:c7:c7:a1:02:37:
                    bf:bf:50:d4:31:7c:d8:42:35:cd:51:d0:6b:60:ac:
                    2d:2b:a0:a3:11:6a:f1:5b:08:29:81:5f:97:ae:fb:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:64:BC:03:F8:8A:12:6E:E2:D2:93:85:5A:A3:D9:6D:90:58:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be47b5ed-06fd-32eb-b093-fd82b6dd7e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.209.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:a3:1a:a2:da:ad:51:54:72:4a:25:51:8d:67:c1:ba:5b:
         90:7c:c1:a0:bd:7a:9e:45:cb:af:b4:08:07:ef:94:f5:f6:39:
         94:a5:99:04:3e:74:2e:1c:c4:92:c7:18:fe:3b:a6:8e:d2:86:
         f1:a6:c5:44:0b:9c:4e:75:2e:66:64:64:2e:fb:d3:ee:8d:00:
         1b:f9:5b:be:c0:b5:ed:fe:32:5a:40:05:c9:23:48:77:c3:20:
         22:e1:b7:c9:47:f2:1d:5e:00:a3:e6:84:83:8b:a5:45:20:69:
         b7:51:6d:a7:d4:00:68:0e:60:78:87:e2:2a:d8:26:8e:c0:67:
         55:4b:47:c9:35:0f:22:33:46:10:b5:ba:00:47:f0:5a:7f:de:
         67:c3:0e:4d:38:08:2f:5e:35:d6:ae:cd:b0:e9:ae:78:23:00:
         19:b8:eb:60:24:43:8a:b9:ba:45:ac:0d:4a:82:e4:61:6a:1b:
         82:d2:f2:72:06:df:fe:57:05:f2:d1:00:c4:d5:fa:93:5e:50:
         41:c8:39:8f:fc:e5:3b:58:e4:c2:13:3a:7a:ab:c6:4d:30:39:
         58:97:18:4a:58:49:36:41:0e:c0:40:72:fa:81:1d:84:3a:71:
         9c:48:e0:d6:49:c8:78:c4:0c:ea:e7:19:ae:35:34:d1:a5:9a:
         b9:c7:36:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:12 2026 by rpki-client