Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/569de9be-ac18-37c2-b721-9efe8b6d1581.roa
File:                     569de9be-ac18-37c2-b721-9efe8b6d1581.roa (raw, json)
Hash identifier:          I3efVNELyRzqqQScacFIpHZqHcehu6YGY/+tQW5PG4c=
Subject key identifier:   35:DF:10:B6:54:72:AA:36:13:6B:36:DD:1B:04:94:7A:E4:5D:9D:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB8470E18517F212C7686BFB0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/569de9be-ac18-37c2-b721-9efe8b6d1581.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        75.254.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:0e:18:51:7f:21:2c:76:86:bf:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=8d128767-ad3e-48da-90a2-b381ccce0e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:dd:55:9a:ff:60:e1:c3:f0:7c:74:98:8d:
                    59:c2:09:05:69:9e:a3:dc:37:96:98:ad:e5:ec:27:
                    ef:0f:d9:37:9c:75:a2:1f:4a:70:d5:3a:e2:53:86:
                    a4:36:83:92:de:1e:a4:fe:cc:48:de:86:81:d5:0b:
                    f4:2f:0a:75:37:31:f3:7d:d6:d8:d6:e6:95:ae:ee:
                    d3:00:70:23:0d:3f:19:6c:18:90:b6:d9:7c:b0:12:
                    91:09:ae:42:54:34:05:63:c8:70:d4:3d:59:09:db:
                    c5:c0:7e:a5:50:9f:5e:6d:3f:54:26:4c:7e:66:19:
                    a7:78:41:ef:32:25:1d:08:6b:06:7b:7b:71:d4:4d:
                    30:93:2e:c6:ca:46:7a:4d:9c:c4:26:04:6f:54:b9:
                    85:f3:94:f7:54:2c:7c:49:e3:c9:f7:97:43:7d:68:
                    31:92:9a:db:27:2e:07:4b:4b:ce:26:8e:ab:99:0a:
                    24:50:a0:5a:eb:a3:94:10:0d:db:4a:fc:72:4c:e0:
                    89:1f:20:4c:6a:9c:ec:a3:e1:33:59:48:8e:3a:d4:
                    5e:43:38:4d:78:01:81:c7:7c:89:63:70:f3:98:29:
                    2d:5c:9a:f2:71:00:dd:f7:7f:ab:f2:d1:10:1c:7b:
                    da:ad:c4:ca:58:ef:5e:49:a6:6e:82:fd:d3:d9:ae:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DF:10:B6:54:72:AA:36:13:6B:36:DD:1B:04:94:7A:E4:5D:9D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/569de9be-ac18-37c2-b721-9efe8b6d1581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.254.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:d3:74:af:1b:b7:62:08:09:d7:fd:a1:9c:9d:e3:8c:6b:
         06:62:b8:d5:78:34:5b:d5:16:80:90:24:9c:78:13:2e:5c:e7:
         4c:89:ef:7a:85:b8:72:97:e9:db:ac:98:ec:0a:30:a2:dd:b5:
         57:eb:dc:2c:21:47:be:ef:f8:4b:af:72:99:59:f2:28:c6:5b:
         47:7d:fc:c0:43:4a:ef:04:f9:94:ba:fd:96:53:e9:3f:a2:59:
         94:e0:1d:c9:15:1a:7d:ab:63:ba:24:b9:c2:43:80:20:ee:e1:
         75:9c:4a:4c:3a:58:03:49:e8:c1:91:bf:e2:20:c7:44:f8:dc:
         57:59:4d:62:87:c5:5d:a2:b4:7e:11:86:d5:a6:df:33:43:8c:
         37:52:56:07:3e:47:26:b3:59:94:1e:9a:d5:71:1d:00:c9:86:
         55:2d:2a:83:5f:07:6a:87:28:4d:5d:e3:30:6c:96:e1:ac:c3:
         40:a2:bc:98:22:83:a9:f8:0e:4b:8a:ba:27:d3:1e:10:c0:6e:
         66:9c:87:38:09:5e:ad:f2:b3:bb:a3:ae:2e:5a:86:ad:07:17:
         fe:74:10:80:55:b1:1f:cb:2e:db:54:46:e3:fe:43:d0:de:6a:
         bd:b7:bd:d3:08:24:a2:05:28:3a:b5:8c:2b:dc:55:25:e0:56:
         20:ba:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:02:12 2026 by rpki-client