Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c487d9af-3e5f-39e3-9cbd-cf953e4fe733.roa
File:                     c487d9af-3e5f-39e3-9cbd-cf953e4fe733.roa (raw, json)
Hash identifier:          HGQgRFAl7dUtyTLoYjpBh+dJMqafszmsGR9+Vb6wRY8=
Subject key identifier:   0C:A5:39:62:7D:FB:F6:CF:D0:B3:AD:4B:90:25:8E:00:73:BD:95:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC565B6720B49978151F1EF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c487d9af-3e5f-39e3-9cbd-cf953e4fe733.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        75.215.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:b6:72:0b:49:97:81:51:f1:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=b3248393-e067-40df-809e-b36669fff47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:95:1b:b4:dc:7c:db:d7:93:91:4d:40:44:
                    9f:1a:2b:f7:2e:a5:4c:bf:f0:6f:02:d9:ab:f1:12:
                    ae:aa:c8:c3:d3:53:56:da:db:c6:53:95:45:4b:a9:
                    af:2c:bf:4e:0b:64:d8:3b:ac:15:5b:ce:ee:e3:99:
                    23:68:2d:d5:20:b5:b1:69:70:48:71:e4:a5:f8:6d:
                    67:a6:06:12:35:70:3e:1f:dd:13:6b:a3:e4:cb:55:
                    d7:bd:85:37:5e:c1:06:46:9c:d4:03:4d:c8:3d:21:
                    6d:d1:f4:81:75:25:80:c0:80:54:44:4f:07:9b:2b:
                    a6:05:7f:f7:41:f5:30:12:01:8d:16:41:27:ea:5a:
                    9e:ab:c6:7f:06:97:5a:3e:a0:78:f0:fe:31:9a:9e:
                    50:3c:ea:47:78:8c:14:1c:4e:71:e3:70:50:43:9a:
                    ba:ed:e2:62:39:2a:0d:94:48:ff:6f:b2:31:d8:1e:
                    45:35:64:0f:5d:78:95:85:7d:b6:0e:e0:68:03:6c:
                    6b:15:f5:fa:7a:7c:56:96:36:53:55:2f:21:51:da:
                    6b:a7:ff:75:b4:a4:83:d7:82:21:5a:63:c6:e2:c3:
                    f7:72:96:6c:2f:1a:35:6b:38:9f:06:da:21:93:91:
                    89:5d:6f:fb:2f:f8:2e:1c:6d:45:51:90:02:c7:c7:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A5:39:62:7D:FB:F6:CF:D0:B3:AD:4B:90:25:8E:00:73:BD:95:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c487d9af-3e5f-39e3-9cbd-cf953e4fe733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.215.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a0:e0:ec:96:c2:a4:e7:99:a8:d0:ee:d7:37:c9:0d:a1:d4:
         fb:33:c3:5a:18:0d:69:49:1f:7e:88:55:0b:2a:53:d6:a6:f8:
         a3:3b:43:55:e3:9f:24:b7:42:ee:f9:84:b2:3e:d2:ee:ee:29:
         aa:61:b6:f9:28:d9:29:c7:82:0a:35:55:4d:fc:2f:e3:da:85:
         15:17:b5:c4:51:f8:ae:94:81:31:8b:db:49:28:aa:fb:2e:a2:
         19:24:af:b2:dd:0c:d3:e5:a7:0d:8a:2a:0f:6e:bf:cc:72:ca:
         1c:7d:c0:22:69:a1:61:0a:db:c5:db:9c:e3:58:7d:15:bf:f1:
         4a:43:ee:37:9e:7b:15:bb:5f:a4:a3:38:24:3e:b7:5f:12:4e:
         59:55:08:b8:84:c6:f9:9f:4c:32:e0:84:33:45:00:66:12:36:
         fc:03:dc:7c:bd:b5:28:d4:12:04:e7:5f:b8:de:2d:27:42:3d:
         af:06:af:4b:64:30:0f:f8:76:b0:3a:ee:3d:8f:e6:73:12:e6:
         c1:d6:97:72:7d:f9:7e:6b:df:b5:14:b7:af:f8:fe:40:70:ca:
         b5:35:60:24:07:43:13:0e:b8:bb:f3:4e:56:1c:42:b2:bc:9c:
         3a:2a:4d:50:a6:4c:4b:43:d2:c7:cf:ab:41:8c:ac:09:68:b8:
         35:34:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:24 2026 by rpki-client