Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5418ecc5-8e2a-320c-892f-5357a5cd1d75.roa
File:                     5418ecc5-8e2a-320c-892f-5357a5cd1d75.roa (raw, json)
Hash identifier:          Y4K9FpekeKOnmfztctAF+4dZwTiQtu+yFiNCjhyHW/Q=
Subject key identifier:   EE:BE:53:7E:0D:1A:82:8F:3C:07:AD:DE:33:DF:EF:66:BF:0D:A5:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EDF5C8908D40035C0FED8BF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5418ecc5-8e2a-320c-892f-5357a5cd1d75.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        75.255.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:89:08:d4:00:35:c0:fe:d8:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=cd58a9be-487a-4d5b-bd36-4968744604b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:27:b0:95:8d:e7:ee:90:45:d1:07:c1:e8:
                    f7:29:39:b9:a0:1b:56:81:de:97:01:f0:b9:a1:c8:
                    f8:14:a0:d1:ab:0c:bf:f5:f6:5a:26:b4:94:fa:a7:
                    8f:21:67:2f:a2:5a:6c:b6:82:d8:be:3a:45:d5:72:
                    85:58:ac:ea:a8:cf:fa:cc:db:77:8c:a7:1e:0e:92:
                    65:41:09:7b:52:d5:5a:cd:ab:13:35:8d:4d:34:b2:
                    8f:89:21:1a:b3:cf:73:b3:ba:df:a1:71:3a:1e:77:
                    a6:f5:9f:9c:23:95:da:ee:19:b8:85:50:8c:49:4e:
                    42:b0:47:9f:81:49:d0:54:87:d8:23:7c:30:46:ef:
                    34:06:28:ad:03:bc:da:f6:de:fb:43:c4:b4:ad:26:
                    f4:77:9e:b6:24:2d:b5:8b:08:88:f2:cf:de:7b:b4:
                    46:45:67:d9:ec:a9:34:5f:e5:61:83:17:e7:b9:eb:
                    65:2d:4d:64:1f:31:39:e4:93:9e:78:2e:0c:49:ec:
                    fa:ae:53:f5:0b:b5:6c:75:2d:83:6d:76:ee:e7:d4:
                    b3:56:18:02:7e:c5:5c:b6:bd:e8:05:8e:b8:a7:4a:
                    05:0d:a6:3a:87:4b:99:80:18:2f:d5:85:d0:d7:d4:
                    f9:f7:08:10:67:cb:0f:de:42:d1:8d:b5:a6:4f:43:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:53:7E:0D:1A:82:8F:3C:07:AD:DE:33:DF:EF:66:BF:0D:A5:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5418ecc5-8e2a-320c-892f-5357a5cd1d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.255.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:38:12:42:83:da:32:38:67:47:34:f9:74:15:82:1a:ee:63:
         b2:41:40:ba:66:c9:85:a3:b7:61:0d:ab:f8:d6:40:aa:74:41:
         b7:08:d2:85:fe:2e:6a:86:35:1d:2c:43:79:f3:4c:f9:3e:22:
         72:65:a9:34:8c:ce:c1:cc:37:f0:36:8a:71:50:35:3d:64:87:
         d7:ee:42:4b:41:e9:cc:75:98:ca:83:12:c8:a1:c3:a4:0c:29:
         31:1c:0b:eb:1f:b8:0f:ce:8c:95:53:e5:c8:1b:28:71:98:c2:
         8d:e8:3d:42:7d:43:25:e6:ba:46:e0:83:0b:a9:fc:80:54:b2:
         09:bb:dd:7b:14:1f:fa:90:c4:7a:9c:4b:a4:af:9f:83:8f:a4:
         c2:2d:96:34:81:66:14:49:c5:e4:a3:87:9d:ff:f9:21:3e:02:
         29:d3:a3:fb:60:d0:65:64:ef:66:a6:69:d9:da:1c:6d:10:c5:
         be:3b:da:1e:8c:c4:bc:32:04:72:01:5f:3c:ad:3a:12:60:43:
         24:ba:20:65:00:70:3a:e2:98:6e:d5:cd:63:9d:d0:a9:8e:17:
         3a:4d:2a:f8:93:fc:46:9b:2b:2d:26:12:46:da:6f:3d:47:a3:
         95:86:f3:b5:64:4c:26:19:9d:09:6e:bb:60:db:e3:0f:5a:1d:
         87:2e:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:44:20 2026 by rpki-client