Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/649f949e-50e3-3451-be4d-eb0cddb31447.roa
File:                     649f949e-50e3-3451-be4d-eb0cddb31447.roa (raw, json)
Hash identifier:          /CK/AjtHT6pIhBEiQu7Zc0Rx6Vj495FAGq1PQpvvGek=
Subject key identifier:   04:ED:CF:9E:B9:46:C0:03:C8:68:17:DA:16:28:F6:8C:AE:CC:50:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F7A50034C49BABA3BF052FF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/649f949e-50e3-3451-be4d-eb0cddb31447.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     6167
IP address blocks:        75.241.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:03:4c:49:ba:ba:3b:f0:52:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=327c4e06-3bf0-46b2-9bdf-d3a156121bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:57:15:92:12:55:cb:2e:75:a6:78:94:0a:
                    45:18:cb:52:2d:92:7c:fe:7c:ff:2c:30:ac:56:82:
                    ac:52:a0:c3:97:9f:fb:8f:4e:e3:ce:80:f8:20:15:
                    10:0f:14:37:8c:c1:f5:4b:3a:b9:b2:36:8c:2c:40:
                    db:c1:06:15:4d:dd:c5:fd:e6:ab:3b:2d:e5:02:89:
                    3a:04:c1:8a:ce:fd:67:ad:66:d0:ad:c2:9f:9b:16:
                    6b:58:72:07:03:4f:5e:47:d1:9c:6b:ff:5b:78:93:
                    9e:0e:8a:4f:c9:d7:ec:ad:77:8d:c6:d8:e0:28:55:
                    65:c2:5c:47:3d:a0:28:ee:50:ff:75:a5:4d:43:d3:
                    19:4e:36:8f:4e:7e:ac:ed:f0:c4:0c:f8:d7:8c:50:
                    0e:db:75:0d:7a:d3:12:4d:e3:12:41:72:87:38:2f:
                    03:8b:34:8d:2c:6c:1e:e8:03:e8:48:e0:12:40:79:
                    d5:41:c4:4a:0d:34:00:4c:08:1d:c1:7a:c6:85:60:
                    13:62:5e:49:b7:e9:63:a8:09:72:84:75:84:cd:f7:
                    ee:22:19:7c:30:3f:c3:cc:d2:bd:4b:4d:e1:51:18:
                    7d:d3:13:65:91:ab:ce:3c:e8:a9:43:4d:2c:76:b6:
                    74:f5:cd:64:31:14:9e:6f:09:3a:91:f7:c7:25:5d:
                    22:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:ED:CF:9E:B9:46:C0:03:C8:68:17:DA:16:28:F6:8C:AE:CC:50:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/649f949e-50e3-3451-be4d-eb0cddb31447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.241.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:58:1a:f3:71:b2:6c:91:27:20:1a:bf:04:8d:b0:e9:16:
         a1:be:f2:ce:93:e3:80:2c:6e:0c:f3:42:83:ef:8d:03:63:fb:
         08:ee:2e:99:73:b6:ae:e1:e3:b1:75:9a:83:5c:75:9d:9b:bf:
         58:d4:70:d1:b5:0a:18:45:f3:26:f2:4b:99:0b:6e:cf:51:a5:
         da:8c:15:33:c9:f9:c8:fb:23:c2:c5:2a:85:a0:db:44:04:31:
         d1:3c:e0:a4:74:b1:3d:ee:a6:2a:a2:87:2e:38:a6:5b:46:bd:
         7a:e7:57:df:b0:95:23:be:75:17:e6:16:af:89:41:92:f5:80:
         dc:71:5c:b1:a3:e9:f0:ba:b7:16:00:87:55:76:22:d8:0a:c8:
         53:b8:76:81:40:11:88:6e:8d:27:26:20:e3:35:e1:54:e6:7c:
         de:5d:8a:f7:4f:79:91:c9:02:f9:f1:a2:cd:ab:fb:af:bd:14:
         0e:7a:9b:f8:f7:e9:ce:71:1a:39:40:b1:5c:61:d3:0c:8d:53:
         ef:ce:26:5c:ea:a2:5e:e0:67:50:af:5c:27:7c:fd:dc:88:95:
         51:24:e3:93:ca:69:96:55:43:2a:dc:c0:e4:e7:ac:4e:3c:c9:
         85:71:31:45:79:e3:d7:1b:b6:bc:2e:b9:46:44:3f:9f:48:ef:
         1f:a7:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:30:32 2026 by rpki-client