Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc0010de-932a-3b57-83b9-fb6540770c02.roa
File:                     dc0010de-932a-3b57-83b9-fb6540770c02.roa (raw, json)
Hash identifier:          tE4gSqSz05KcsjMdtgh/Muc76LvFukxfjM9cs6P9qVc=
Subject key identifier:   CE:4A:83:12:66:01:00:B0:97:54:5D:0B:93:55:C4:A4:B0:4D:E2:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC565B8E991E0AED5F3D70D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc0010de-932a-3b57-83b9-fb6540770c02.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        75.236.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:b8:e9:91:e0:ae:d5:f3:d7:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=38c2aef8-8229-40d4-9bc4-d83b0d319504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:d2:b7:7e:ff:02:51:4b:38:6d:d5:22:d2:
                    a6:a5:39:31:80:b5:3c:d6:de:06:26:7d:94:c1:71:
                    b4:b2:f7:b4:a7:3e:f1:d3:c7:08:29:bb:ee:a0:8e:
                    4b:5d:47:89:69:e0:68:68:0f:03:d0:8f:32:c2:c9:
                    de:23:06:0e:66:36:fb:18:a6:f4:10:2f:99:6d:8d:
                    41:cf:1b:ea:bf:16:56:a2:e9:91:b9:d2:3a:b8:c8:
                    b5:e7:a2:32:da:2c:18:bb:1e:67:6f:09:48:50:da:
                    d7:aa:cc:b8:86:4b:1b:ad:7a:8b:3a:f2:15:8f:1d:
                    b6:d1:36:58:46:96:86:f4:4b:ef:31:e4:90:0e:af:
                    c5:0c:25:42:be:c0:93:91:6f:ac:6b:cd:92:a2:a7:
                    fe:7e:cd:ee:c9:61:c4:c0:0c:58:50:35:f3:b8:ff:
                    e1:b7:54:aa:cc:d8:4a:cb:2e:ab:33:02:8d:e6:10:
                    e6:5e:59:f2:13:ec:05:fd:88:c3:ba:84:ad:57:58:
                    1f:3f:4f:54:0d:28:f0:2c:f7:b6:22:ad:08:05:b7:
                    bb:a7:fd:d4:5b:ab:85:66:8b:53:76:12:0d:95:8e:
                    1d:2c:65:f0:d7:56:87:2e:10:8e:78:17:82:ae:1a:
                    54:2e:10:31:5a:84:51:61:f7:b8:f8:3c:39:f3:a9:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:83:12:66:01:00:B0:97:54:5D:0B:93:55:C4:A4:B0:4D:E2:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc0010de-932a-3b57-83b9-fb6540770c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.236.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:4d:a3:a0:15:5f:df:c6:50:73:24:ec:65:b4:82:bc:e2:
         24:85:99:22:3e:8b:12:dd:0f:22:42:0e:29:cc:5a:67:74:ca:
         4a:77:19:65:84:e8:18:23:72:2b:e0:41:4e:1a:33:a7:be:a5:
         1a:5c:47:15:6f:80:d1:df:a3:ac:7d:7d:e7:d6:40:5c:9e:9a:
         53:93:73:86:d2:0a:9d:c2:01:ab:db:49:3e:95:84:cf:64:64:
         e0:ec:0f:a3:05:16:9d:1e:94:aa:a9:17:46:c9:f7:38:90:4e:
         b0:6f:85:1e:26:d9:55:47:07:a2:30:ce:fe:c3:48:aa:93:30:
         75:9a:58:1d:f4:cb:bd:16:97:ef:ff:c7:eb:e4:cd:aa:55:5c:
         f9:b4:79:05:ac:98:75:f8:7a:89:57:7e:bb:64:ad:b1:25:99:
         79:e0:33:a2:ae:5d:fe:df:db:b9:3e:4c:2d:92:47:52:70:10:
         15:9f:47:36:d8:e6:fe:93:aa:9f:1e:15:bf:c5:74:d8:e6:92:
         5c:e3:15:05:5f:87:37:1b:03:4d:87:6b:94:fb:db:b8:3c:40:
         fa:bf:5d:0e:1f:89:b2:5c:3a:c0:3c:e7:2d:e4:45:c2:d2:d7:
         3a:0e:c8:52:73:69:9c:9b:fc:02:85:af:b8:6a:12:00:d6:9e:
         0a:e8:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:10:26 2026 by rpki-client