Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa
File:                     d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa (raw, json)
Hash identifier:          o4DxwKkbIBynGq/tFKx3LuWoSTVl0M6fhIuVtr8lqXQ=
Subject key identifier:   2F:D1:3C:22:4E:F9:A6:9D:57:E2:70:EB:96:F4:E8:D1:AB:A2:07:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC565B7611D420929529EA980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        75.221.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:b7:61:1d:42:09:29:52:9e:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=f4e3b409-458c-4f50-85b2-09f88121e41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:33:43:a5:4c:a5:b2:83:b9:63:44:36:71:
                    96:4e:11:2b:63:9e:47:0f:10:37:c6:14:ea:52:20:
                    d4:7f:35:af:b4:ea:6a:af:7a:e6:16:96:4d:d3:5a:
                    3c:89:09:b0:0f:c0:ac:60:e1:7e:69:31:36:fe:fd:
                    bd:79:eb:67:5e:84:cd:01:5e:f6:90:85:63:66:c0:
                    cc:62:7b:1e:87:50:05:e0:84:3b:b5:cb:8c:a0:25:
                    13:5e:c8:66:49:34:9a:1d:c1:53:76:77:32:c9:f8:
                    70:3e:9b:00:bb:23:c8:f9:94:97:4d:cd:c0:d7:67:
                    18:cd:d2:f2:e1:91:70:39:3e:c7:0f:93:bb:ad:18:
                    99:07:94:64:8b:aa:f4:9f:ba:42:c6:5b:ca:bd:a2:
                    93:d5:81:87:2a:b2:62:74:7b:94:d7:54:48:c2:aa:
                    70:47:94:c0:78:02:11:6c:17:c8:11:88:ba:c2:0a:
                    24:48:10:17:7c:95:a2:32:4d:76:11:8a:40:68:c2:
                    7d:6d:7a:82:b2:f9:fa:73:4e:6d:6f:34:01:88:d3:
                    79:de:d7:fc:5b:5a:e8:0a:d9:77:6a:96:31:71:b5:
                    87:79:06:b2:64:89:70:15:50:1a:54:04:d2:ea:11:
                    5a:a0:43:71:2d:39:23:d9:f3:2a:46:cd:8d:6a:1c:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D1:3C:22:4E:F9:A6:9D:57:E2:70:EB:96:F4:E8:D1:AB:A2:07:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:5d:4a:34:b9:d4:02:03:f1:f7:10:67:3f:84:f4:80:e9:
         0c:0b:07:2c:30:0f:61:22:8a:b2:5f:e8:85:4f:db:71:eb:9c:
         72:87:55:37:56:44:34:7d:2c:66:ee:ca:de:6e:db:9e:01:01:
         ec:77:c1:f7:24:7d:c1:1f:77:eb:11:86:ee:7d:9b:c3:9d:8e:
         5b:0e:20:ba:22:ce:70:5d:22:de:75:04:4e:7e:a4:ec:54:bc:
         3a:c2:76:7f:1d:69:d8:86:b2:c9:3a:85:b0:5a:01:d9:75:58:
         e3:9e:55:59:23:1f:f4:86:29:ad:02:7c:b6:27:b5:c4:42:1e:
         b5:64:6b:85:c6:fa:7d:a4:c0:10:8d:71:27:4f:f6:ce:ae:ae:
         7a:b0:c0:57:43:2f:0e:e3:32:84:52:32:04:5b:d5:e8:46:24:
         2c:b3:65:0c:e1:0c:d1:9b:65:53:fd:48:01:38:0b:b0:5c:ef:
         9a:2d:00:50:49:be:09:d8:47:b9:d9:fe:59:80:05:51:14:c1:
         f1:03:86:02:58:88:8d:f8:b8:df:50:24:58:87:3c:26:3e:8b:
         8e:64:94:56:9f:be:ff:1d:2c:7f:44:c6:5a:76:e3:a1:1c:2d:
         9d:2f:7a:dd:1e:51:0f:4b:9c:3a:61:3c:84:6e:b2:ae:70:80:
         4e:5e:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:25 2026 by rpki-client