Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e52ef993-7bc3-35ba-8f94-cee47a88ddbe.roa
File:                     e52ef993-7bc3-35ba-8f94-cee47a88ddbe.roa (raw, json)
Hash identifier:          i8r+H6GKJaoS3YG36xJbtFU0MFbZaNLB3+BZqJFNSDw=
Subject key identifier:   8D:73:B6:AA:5F:C1:DE:CC:00:63:70:96:E4:4A:49:C6:12:DE:75:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D56C19ECC8BA453AE5F60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e52ef993-7bc3-35ba-8f94-cee47a88ddbe.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.208.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:56:c1:9e:cc:8b:a4:53:ae:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=1c68642e-02f9-4573-a952-931c36225cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:1d:66:67:ca:6e:50:70:a2:51:48:34:5f:
                    18:fd:a6:4f:81:54:99:74:3f:48:4c:83:e5:93:fc:
                    fa:66:b0:d8:94:05:82:4d:e0:5e:5b:c1:cb:13:2e:
                    f5:af:0e:fa:f9:d0:96:06:c8:e1:aa:b8:05:c8:0e:
                    0f:e0:d1:00:19:a8:d4:5a:a2:4e:06:28:83:9a:74:
                    f5:9d:00:6c:43:5d:1d:e1:94:96:64:a0:78:0f:c9:
                    c4:23:a3:4e:4e:70:c1:0f:e0:32:12:38:13:4f:20:
                    9d:9b:3c:f4:73:b8:39:73:ea:51:d6:0a:f7:79:49:
                    a9:78:43:d8:70:dd:26:e8:79:8e:15:b5:7b:71:5c:
                    41:76:8a:c8:a2:0e:a7:c0:8f:32:33:69:09:01:75:
                    f0:06:a1:66:81:1b:24:88:98:1c:6b:92:e9:4d:05:
                    2d:e9:d5:a5:79:87:e9:b0:ab:18:c1:94:f7:90:37:
                    88:e7:9a:c3:87:a1:b9:e8:8e:85:41:0f:4a:13:66:
                    d1:cd:c7:a3:26:c9:15:1f:94:79:b5:ac:a7:1f:91:
                    70:a5:3e:22:8b:13:78:e4:0f:52:12:05:48:4e:4e:
                    fd:a1:ab:4d:82:42:f4:df:46:72:ee:f8:03:08:0f:
                    30:14:b4:96:b2:52:67:b3:d6:bd:67:ae:3f:6b:71:
                    bf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:73:B6:AA:5F:C1:DE:CC:00:63:70:96:E4:4A:49:C6:12:DE:75:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e52ef993-7bc3-35ba-8f94-cee47a88ddbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2d:26:c2:6f:0d:16:df:cd:30:74:c9:59:53:f5:44:55:8b:
         e5:e3:df:23:69:a2:5c:90:3c:50:d8:f8:5d:ce:f2:e6:b8:9a:
         95:a8:2d:c5:d1:6e:a8:dc:a2:25:55:ef:b0:bd:f1:52:73:8f:
         4a:9e:7f:9a:b1:86:07:dc:0d:7d:28:b4:d2:b7:7f:e4:62:e9:
         1d:ef:ec:38:00:41:10:ca:04:62:23:ef:39:4b:13:d5:3c:24:
         6a:74:d4:b7:06:c9:d3:67:81:5c:73:45:9d:0e:88:6d:44:af:
         53:8f:aa:7d:70:e7:c5:63:57:05:d5:4a:6c:3f:63:19:16:b6:
         e0:c9:c2:a2:de:a5:76:83:e9:81:e9:09:25:e3:4f:2b:d3:3d:
         38:97:70:2a:97:34:3f:6d:62:5d:cc:41:e4:1a:e6:96:f7:5f:
         c3:d3:54:96:04:81:58:c8:dd:70:c1:18:cc:50:1b:3f:79:33:
         bf:82:92:b9:8e:ae:a1:e6:f9:4a:df:a2:80:48:cc:b7:8b:01:
         7f:c4:9c:bc:92:30:47:30:2c:c1:35:00:c7:3b:b8:bd:c4:6f:
         33:21:41:75:7f:23:5e:4f:fd:06:f9:e7:a5:6a:2a:86:ae:74:
         2a:61:c8:dc:b3:b4:44:8b:d3:be:61:32:0d:f8:85:60:b1:14:
         c4:8d:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:39:43 2026 by rpki-client