Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebc3c838-2c9e-3973-b92d-805839f5266b.roa
File:                     ebc3c838-2c9e-3973-b92d-805839f5266b.roa (raw, json)
Hash identifier:          Xr50eNFJoo6xfce0MndIDOaLck0t5Xpv7L+8Ow+SHUk=
Subject key identifier:   3D:A2:69:39:F8:9B:E3:38:B0:69:D0:9C:EA:84:7C:86:60:25:3A:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F480D53C3A7B5777FC72B3F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebc3c838-2c9e-3973-b92d-805839f5266b.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        75.198.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:53:c3:a7:b5:77:7f:c7:2b:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=a5bb112b-9268-4b4e-a63c-abf61063775d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:36:4e:e7:fd:f8:a1:49:9a:fd:ac:a5:ca:f8:
                    96:d2:8d:29:dc:61:60:9f:3e:0c:17:ab:c9:ea:1b:
                    be:7e:b4:fa:90:04:a8:39:67:dd:bd:30:23:8c:3f:
                    d3:7d:ed:68:d6:d1:d5:31:09:1d:1e:3c:f6:8c:40:
                    3e:00:d8:01:3f:ea:4d:95:1b:53:9d:64:c3:b1:0e:
                    27:7e:fd:cd:cc:bf:78:57:c3:e1:d3:51:5d:d5:24:
                    b8:01:86:cf:4e:b9:bd:e2:d4:32:11:f5:17:22:bb:
                    84:25:7e:56:27:44:3b:2c:bb:ac:aa:6c:26:89:dc:
                    97:2e:b1:c3:1b:e5:b4:1f:4e:d9:fb:eb:5c:77:ed:
                    a1:44:1d:54:d5:68:92:df:c3:3f:95:06:3c:b3:0e:
                    9f:cd:e1:ec:4b:eb:ac:5b:08:b6:44:24:9c:46:cd:
                    1b:93:96:1d:7a:a5:b0:d8:d1:a6:56:08:22:82:41:
                    ed:c3:f0:81:bf:3d:0d:4b:e9:06:2c:ea:2d:67:e3:
                    88:aa:ba:a3:49:50:7e:ee:28:50:f1:bd:47:3f:77:
                    54:51:ac:a4:f3:f3:81:53:1e:42:c3:b5:80:a3:54:
                    49:50:86:40:63:0a:50:f0:4c:bc:1f:46:0a:33:9f:
                    28:97:43:79:af:0a:63:19:cb:d1:1c:c5:ad:88:42:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:69:39:F8:9B:E3:38:B0:69:D0:9C:EA:84:7C:86:60:25:3A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebc3c838-2c9e-3973-b92d-805839f5266b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.198.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:42:a3:6a:c6:d3:49:36:53:14:c8:96:60:3d:7a:01:e7:44:
         9e:43:41:14:bc:f9:bc:6d:0c:09:30:ba:52:06:07:69:c7:7e:
         26:94:67:41:76:8d:51:ef:11:ab:a8:cf:33:5d:86:38:26:98:
         a3:61:07:b4:42:22:50:47:fb:0d:e0:6a:d5:55:51:33:c1:6f:
         27:86:28:03:11:29:91:62:32:e7:a0:b0:0d:d7:a6:4b:81:46:
         de:99:d8:f3:c3:0c:61:db:d1:7b:c8:34:d2:16:4f:fb:ae:5f:
         15:12:82:36:26:cc:33:cc:cf:be:0c:57:ef:dc:e0:cc:ee:02:
         dc:7f:94:76:4e:3f:de:ac:81:fd:71:8f:98:da:69:09:47:87:
         fd:62:c9:07:9d:91:15:9e:d6:aa:c6:99:b4:9e:7c:9e:b4:c1:
         78:92:a9:23:a9:93:b5:e7:04:9a:0f:fb:bc:e2:08:ed:df:a7:
         95:e2:cf:49:e3:07:05:2f:54:7f:d5:58:63:ec:74:36:a4:28:
         a6:06:b8:40:58:8d:b1:f5:30:f5:e6:bb:cb:50:96:1d:92:f7:
         c7:36:9c:1f:0d:0c:8e:8b:a6:2a:00:26:1f:b0:61:e8:73:a7:
         f0:b7:ca:36:05:20:c9:8a:44:dc:72:cc:6a:88:c4:8f:2b:ab:
         c4:6f:1c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:22:47 2026 by rpki-client