Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5896e9a-c81d-358b-9ca8-daaa281969dc.roa
File:                     d5896e9a-c81d-358b-9ca8-daaa281969dc.roa (raw, json)
Hash identifier:          J2FaW5lla4Im7ZzyHL1bVlYIDIYusTkwo4ipgt6Tdus=
Subject key identifier:   9C:E4:B3:7A:8F:D3:9A:F6:EC:49:E2:FA:73:8C:A7:43:D0:0C:95:59
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAB9C1105E64AEEBC9E1D5520
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5896e9a-c81d-358b-9ca8-daaa281969dc.roa
Signing time:             Wed 29 Apr 2026 19:19:15 +0000
ROA not before:           Wed 29 Apr 2026 19:19:15 +0000
ROA not after:            Tue 28 Jul 2026 19:19:15 +0000
asID:                     6167
IP address blocks:        75.255.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ab:9c:11:05:e6:4a:ee:bc:9e:1d:55:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 19:19:15 2026 GMT
            Not After : Jul 28 19:19:15 2026 GMT
        Subject: CN=3f64ac5d-ee39-4a1b-80c8-a8e00c5a726b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b3:2a:0d:99:63:51:ea:4c:f0:57:e9:29:90:
                    b0:fc:fb:15:4b:c1:02:87:c3:c8:e5:7b:ce:ab:ac:
                    3c:7b:10:27:ca:48:41:9e:7a:9d:c3:76:88:35:5d:
                    46:04:f7:0c:50:e2:0c:fc:12:e3:bb:b3:ce:92:88:
                    b7:61:3e:7b:cb:54:92:eb:3b:d0:80:9f:59:06:42:
                    f2:08:d6:9a:2c:a6:6d:b3:1d:79:7e:23:94:d1:a0:
                    5f:31:73:f5:a1:79:43:50:29:3f:03:63:fa:f1:26:
                    4c:01:39:be:95:2e:ce:be:e9:42:dc:4b:41:73:c5:
                    19:ce:8f:10:0f:80:2b:d7:14:7c:e5:f9:9f:16:64:
                    ce:43:2f:a4:4a:e7:81:bf:cf:a9:43:05:1c:2d:b5:
                    1a:d7:64:6c:3c:5c:be:99:be:91:e9:fb:c5:a1:ff:
                    a2:21:d1:c7:36:21:66:6a:eb:85:8b:e8:ac:03:ea:
                    c2:f9:42:72:84:0a:be:8d:7e:f5:6c:cd:7b:c5:6f:
                    7b:41:7e:69:7d:2e:9c:bd:48:a2:f6:56:cf:fe:44:
                    11:14:82:f7:15:d5:99:a2:98:21:99:13:ae:09:8a:
                    63:32:66:f4:06:4b:e0:07:bd:b4:21:7f:c3:b1:e2:
                    43:71:e1:39:4e:f4:28:23:fd:eb:e0:f7:2b:53:69:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:B3:7A:8F:D3:9A:F6:EC:49:E2:FA:73:8C:A7:43:D0:0C:95:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5896e9a-c81d-358b-9ca8-daaa281969dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.255.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4c:fc:4c:f0:a9:a0:c3:86:25:15:de:9e:77:86:79:8d:20:
         b9:f5:0e:3e:3a:06:de:c5:b8:3c:23:e0:ab:56:98:ce:f6:98:
         f2:1b:7f:75:66:d2:9c:ab:75:0b:21:dc:70:64:85:79:b8:f6:
         ea:d4:b8:62:8d:d6:42:c3:51:0b:24:43:d3:63:78:df:43:73:
         42:b8:2b:58:2b:40:1c:59:66:c1:21:2d:b8:87:28:f1:a9:57:
         f0:cb:f4:d0:f8:ad:61:8a:d8:77:5a:99:36:70:5b:35:fc:42:
         ab:bb:b2:12:6d:44:31:70:c9:95:dc:9e:0a:ae:57:d8:0c:fe:
         e9:a2:73:41:b4:59:f3:39:74:74:8a:7d:ec:20:66:4a:6e:ff:
         fe:96:8e:b1:1b:4a:8a:c0:11:cf:ce:58:4b:05:1d:1a:99:48:
         ec:8c:ca:68:4c:b2:c6:f1:6f:b1:71:d9:b7:9a:03:d7:3a:16:
         14:b6:13:50:f3:52:19:c8:03:2a:bc:ab:77:05:2e:cf:ce:ed:
         ec:ff:14:41:ef:72:b1:06:c3:c3:d9:e8:4a:11:83:21:b8:18:
         8a:31:de:ec:1a:cd:5e:fa:78:57:a7:cf:1e:89:1f:9f:17:9d:
         02:9a:7d:7b:1f:f5:a0:94:c7:bb:0e:1d:2b:9f:aa:c7:22:f5:
         58:c2:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:09 2026 by rpki-client