Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/752f9eda-1a4e-3dfb-bfe2-07133cd52d81.roa
File:                     752f9eda-1a4e-3dfb-bfe2-07133cd52d81.roa (raw, json)
Hash identifier:          Jcl7JweUe03HD1kKau1nO5HayeeP9H9ZF5dSvajnXXs=
Subject key identifier:   60:41:4D:35:B2:14:FE:97:83:BF:46:50:56:DF:5C:DF:10:AF:FE:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D70F8DC3F0EE9FF703F041500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/752f9eda-1a4e-3dfb-bfe2-07133cd52d81.roa
Signing time:             Wed 08 Apr 2026 19:13:32 +0000
ROA not before:           Wed 08 Apr 2026 19:13:32 +0000
ROA not after:            Tue 07 Jul 2026 19:13:32 +0000
asID:                     6167
IP address blocks:        75.254.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:f8:dc:3f:0e:e9:ff:70:3f:04:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  8 19:13:32 2026 GMT
            Not After : Jul  7 19:13:32 2026 GMT
        Subject: CN=00f7dd98-c216-44eb-8084-91ffd9a918ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:cf:e1:ec:f6:2e:bf:1f:3a:9d:5a:fc:5b:
                    f5:e0:95:06:09:d8:23:a7:5c:9f:0b:db:b1:f4:1f:
                    22:f9:57:16:db:e7:27:80:56:d2:e9:f2:ce:f1:6b:
                    49:9a:b8:8f:d4:3c:08:b2:62:c2:f7:47:c8:fe:35:
                    b9:69:82:1d:2d:c3:e2:f9:07:c8:b7:05:16:e5:f3:
                    46:79:25:a1:f1:10:0c:7f:4e:7c:5a:39:e0:ae:ee:
                    ed:7b:de:19:55:90:d2:46:ab:56:f2:6b:ac:74:df:
                    3b:e7:32:23:e8:57:71:fe:ac:42:18:20:de:0d:ab:
                    e8:76:d2:97:28:99:5b:4c:6b:f1:6b:12:84:6e:58:
                    03:e8:84:68:2e:c0:74:8e:6c:08:d4:01:ef:7e:e3:
                    dc:db:c2:bb:6a:8c:d0:a4:db:c9:39:ef:b0:63:86:
                    ca:e7:90:50:80:97:cd:a8:1e:54:5d:d7:b3:51:74:
                    29:89:1c:15:05:8a:d9:f0:62:62:54:f1:d0:21:e5:
                    7f:30:bd:70:7f:a2:ff:bd:51:a6:af:22:e6:0c:10:
                    cb:00:ff:54:f2:ff:dd:96:c2:4b:fe:26:51:92:c9:
                    a9:f0:43:d3:a4:12:7e:b8:4d:cf:6c:42:2b:6d:3d:
                    11:56:21:01:4b:2b:19:41:32:5a:94:3d:45:b9:ab:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:41:4D:35:B2:14:FE:97:83:BF:46:50:56:DF:5C:DF:10:AF:FE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/752f9eda-1a4e-3dfb-bfe2-07133cd52d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.254.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5d:ca:c7:bd:39:ae:49:ac:8c:6b:32:d7:28:20:88:30:f0:
         7a:24:a6:0b:de:c2:ee:2f:e7:aa:34:1c:47:d5:9b:22:c5:3b:
         da:d0:0c:4f:ab:7b:46:f8:60:2c:c6:d8:ec:2e:44:eb:3b:26:
         dd:a2:2f:76:1b:12:97:81:3c:4e:25:cc:45:70:a2:4b:42:87:
         71:e7:52:06:cd:67:f5:e8:b5:c1:16:90:dc:cd:ee:5a:2e:74:
         4d:67:51:37:63:4c:48:92:17:91:31:cc:8f:1d:a3:3c:12:e1:
         e9:44:bc:b8:7b:01:d5:f5:dd:9e:be:f2:4a:d1:73:39:3b:50:
         a5:dc:54:ce:83:d0:fa:41:d2:c3:d9:ca:4c:b3:6f:78:21:33:
         2f:f1:00:10:ac:4b:a6:6b:6d:3e:1f:9e:77:5c:c3:18:22:c2:
         19:77:ef:93:aa:43:e5:d1:cd:41:11:dc:a1:71:6d:94:6b:62:
         52:63:26:cf:9b:1a:52:29:be:95:de:90:40:5d:2d:d7:0e:73:
         f8:c8:19:80:1f:2c:91:9b:a4:4c:62:6e:47:ea:e2:9f:1d:7b:
         31:45:39:00:70:76:38:a3:c6:3f:f1:a6:0b:d3:06:fc:9b:75:
         62:9e:df:1d:db:cf:cd:ea:3c:60:dd:15:de:44:a7:36:83:8c:
         e1:8f:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:13 2026 by rpki-client