Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa
File:                     d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa (raw, json)
Hash identifier:          PPPVxCt3CNF2WxIwhw/1in4wA5oaVvt1EWTfdGMhpVY=
Subject key identifier:   5E:F4:34:31:42:C9:37:4F:5F:72:68:D7:A0:C9:C4:D8:99:BC:CA:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D5929FF0A3F5089C77980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.221.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:59:29:ff:0a:3f:50:89:c7:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=0d8c43db-820f-49a5-9e9a-b3e6f7f55b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:07:ca:db:01:00:18:87:66:da:e5:b0:de:
                    62:9c:b1:e0:91:04:47:8a:9c:98:f8:78:e7:c4:27:
                    62:fa:ff:b3:97:96:05:0f:be:f0:69:8d:3d:56:db:
                    eb:d4:46:03:26:d5:b9:41:4d:d0:7e:06:dc:a7:7b:
                    e0:cd:bc:80:e5:b3:99:ca:37:3e:41:96:b1:2e:2c:
                    1b:46:b6:37:51:45:98:c3:06:da:f6:ce:6a:ea:d5:
                    5b:73:14:a4:33:62:d4:80:44:07:e9:4e:d3:0b:ba:
                    9b:a7:ec:d3:2b:d9:8d:4e:be:29:09:53:c2:63:37:
                    9f:89:71:47:2d:a1:1a:ba:b8:fc:6d:39:ea:b7:46:
                    f0:0d:4b:3a:3f:15:9b:48:f3:73:ff:95:0a:bc:f8:
                    bb:a8:e8:f9:6e:33:25:d9:93:18:48:10:f6:6a:c0:
                    33:c1:c4:a9:6b:79:15:e3:86:de:ee:45:34:5f:40:
                    1c:b5:72:ff:4f:45:2f:4b:af:45:32:aa:7d:55:a9:
                    10:23:ef:13:cd:39:72:7e:4a:0a:d4:cc:b7:40:97:
                    d1:8b:d2:95:fd:d8:e7:99:db:57:ff:1f:60:b5:41:
                    80:e1:12:2e:28:75:61:fd:64:62:59:8e:32:69:25:
                    08:3d:ce:9b:eb:db:a1:d1:7d:28:f6:5c:da:bc:c3:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F4:34:31:42:C9:37:4F:5F:72:68:D7:A0:C9:C4:D8:99:BC:CA:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:ad:ee:b0:37:ef:af:53:4d:c3:62:c2:8d:e8:61:60:ce:
         6d:4d:80:c1:0c:54:9b:16:f8:fd:4f:53:dc:6c:62:6e:fd:95:
         8f:dc:92:5a:0d:14:22:67:94:ec:da:5d:c4:4b:2e:e0:0a:e1:
         b3:22:e9:d0:20:6a:75:45:63:ec:dc:c5:03:10:63:e3:3a:47:
         7f:f3:de:b3:3f:c6:fa:7f:ab:e9:90:44:ad:11:57:29:df:be:
         4b:4a:e5:d2:45:1a:95:03:13:7f:2b:c8:4f:74:8b:da:4f:82:
         80:ad:3c:98:a7:f8:35:e1:fe:e6:d0:5d:6f:32:5f:49:60:c1:
         00:5d:7f:5c:c2:b7:11:83:89:3b:af:ed:3e:85:b9:10:9f:50:
         bc:16:f4:c4:dd:e9:46:4b:67:02:59:11:35:b6:fc:3c:0c:c1:
         0b:01:6d:67:30:fc:05:84:41:2d:d1:67:0e:6c:5d:f2:50:42:
         08:cf:62:4e:78:b7:3c:d3:24:b9:61:7c:10:04:f7:a6:d8:72:
         c9:4a:a9:95:e5:1e:49:c6:c1:5d:2f:c7:1d:5d:b1:b2:7e:d3:
         cf:eb:90:18:46:1e:cd:df:4f:69:67:43:71:1a:4c:cd:72:b5:
         76:ba:43:ac:ce:26:e3:07:27:a7:f4:95:94:6b:cf:fe:fc:ba:
         4c:2b:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:37:51 2026 by rpki-client