Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd89eaa8-8018-3cab-89c5-193f22b37608.roa
File:                     fd89eaa8-8018-3cab-89c5-193f22b37608.roa (raw, json)
Hash identifier:          se6TshlU0nL2TTFXYlTfCH3yFI/mKFBEVc+NFlwg+2w=
Subject key identifier:   2D:CC:43:24:C5:22:F8:A6:2B:A2:A1:99:4E:2A:DC:2B:D9:17:A4:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC565B42E864084C6EA35CBC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd89eaa8-8018-3cab-89c5-193f22b37608.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        75.205.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:b4:2e:86:40:84:c6:ea:35:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=19673c9f-b523-4907-a08f-4be26af9cb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:75:39:fa:fc:d1:0e:44:d4:f6:f9:45:a5:
                    11:70:b4:cb:2d:46:6c:4a:2b:b0:3a:54:2d:9a:13:
                    0e:d7:b4:34:26:6f:c6:12:99:58:76:be:0b:c8:3b:
                    dd:38:fc:8f:98:50:c3:7c:b2:85:eb:41:0f:ae:d7:
                    0f:fc:b1:22:97:33:06:fd:16:45:4b:f1:f5:af:8a:
                    73:36:59:48:03:07:9e:d4:dd:aa:f6:1d:7b:e4:b7:
                    62:5b:5f:a6:de:12:14:5a:96:28:19:af:34:14:6f:
                    d9:28:98:5f:b6:1a:98:24:a8:38:d5:fb:75:cc:03:
                    1d:e1:35:35:f4:f7:ce:11:85:83:33:e2:39:af:8e:
                    a3:3c:66:be:20:c9:9c:8a:b8:ed:51:76:b8:c4:35:
                    1c:fb:47:16:d3:8d:04:80:b0:c1:25:31:6f:9d:29:
                    c5:0e:8b:2a:4d:18:fd:ec:96:80:c4:61:bc:43:b3:
                    8b:45:27:ae:0b:5b:af:77:02:85:c7:a0:1d:d0:a0:
                    98:10:5c:42:b0:53:27:7c:8d:5d:67:22:91:bd:bf:
                    04:55:d3:d6:b4:c3:75:69:f3:44:3d:0a:cb:15:dc:
                    da:77:9c:32:f7:31:3f:87:85:fa:48:c8:30:4a:57:
                    c6:61:c0:44:1d:ef:ff:36:b3:50:db:bc:a4:fd:4c:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CC:43:24:C5:22:F8:A6:2B:A2:A1:99:4E:2A:DC:2B:D9:17:A4:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd89eaa8-8018-3cab-89c5-193f22b37608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:a6:a4:44:c4:4e:43:60:55:7b:f6:b9:6f:8b:e5:2c:72:
         05:74:bd:dd:b8:d7:79:69:b6:4d:95:1d:5a:fe:7a:34:8b:70:
         11:ca:5a:3a:eb:74:07:b6:ed:30:96:d8:9e:5a:79:b1:9c:c0:
         c5:90:b7:e9:9a:91:1b:45:4f:5c:b9:c0:3b:bc:64:e6:d6:88:
         ea:c0:a1:1b:b2:68:9d:5c:8c:f9:59:35:d5:0a:63:46:e2:93:
         bc:cf:d8:5d:f9:16:ee:8b:91:60:98:ac:89:31:af:69:b1:7e:
         ba:70:d7:bc:3f:3b:21:41:70:a1:5f:e2:39:86:ff:3f:af:f0:
         fe:2e:9f:c5:46:bc:aa:7b:46:57:d5:ae:8a:ec:e1:dd:49:df:
         36:99:93:f7:64:60:88:89:94:30:8d:7a:5b:ea:43:5b:ba:7c:
         30:5f:e3:b0:06:5d:4d:be:3d:67:a3:a2:f2:90:e7:f6:2d:22:
         81:8f:52:56:14:27:06:40:32:e4:20:56:09:bb:4b:31:31:72:
         af:ca:c5:0f:ec:5b:45:ee:7b:99:56:1a:0d:4f:98:95:47:fe:
         98:40:36:b0:57:13:4f:4f:9a:2e:4a:1f:89:71:f1:e6:9b:18:
         86:9c:96:c0:59:e8:f9:52:0a:31:65:e4:d9:52:28:d6:a3:82:
         19:65:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:16:48 2026 by rpki-client