Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c672a28-3b05-384c-b875-b162b022506a.roa
File:                     7c672a28-3b05-384c-b875-b162b022506a.roa (raw, json)
Hash identifier:          FEewR8O7PJXzKuEQYzRYVN/ryoPUjPKiZRZzDr7Nm9w=
Subject key identifier:   5A:27:4A:1F:4F:CE:F1:CD:0E:66:A7:1C:FE:BA:DA:A8:D7:E7:72:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D22AC534CB7C45F042FD1C2E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c672a28-3b05-384c-b875-b162b022506a.roa
Signing time:             Wed 11 Mar 2026 18:06:16 +0000
ROA not before:           Wed 11 Mar 2026 18:06:16 +0000
ROA not after:            Tue 09 Jun 2026 18:06:16 +0000
asID:                     6167
IP address blocks:        75.255.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:ac:53:4c:b7:c4:5f:04:2f:d1:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 18:06:16 2026 GMT
            Not After : Jun  9 18:06:16 2026 GMT
        Subject: CN=bf9d79f8-0cd6-41d4-8f0c-06c53ab53cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:8b:d4:52:e6:71:94:7b:a6:66:e1:87:76:
                    d5:42:fc:17:fb:7d:02:5a:af:65:be:2b:c2:b7:88:
                    5c:b2:3c:01:83:41:31:67:36:3c:0f:56:60:3e:0f:
                    0a:45:4d:bc:aa:1c:e7:17:12:71:d1:25:a5:db:a6:
                    5b:a0:33:24:48:e0:85:3f:a3:9f:f0:01:c2:23:2e:
                    d6:8d:3c:96:5c:2a:d7:96:b1:c4:ce:52:02:df:5f:
                    c6:f1:92:54:ca:9f:16:24:8c:f4:b6:a0:46:4f:94:
                    9f:ff:69:fe:b0:04:67:58:92:3b:20:6b:cd:1b:93:
                    05:d3:e5:82:64:21:af:fa:49:0a:de:49:71:fe:61:
                    46:77:8f:e2:65:08:f1:82:e2:70:29:b2:45:b6:7e:
                    18:07:6c:38:d8:47:e1:b4:8f:2a:d3:79:6c:28:4f:
                    3f:8f:15:03:5d:67:15:fa:af:bf:02:b2:0e:2c:dc:
                    d2:7a:04:a9:db:76:22:25:83:78:62:de:38:4f:f0:
                    8d:e2:1c:ce:8b:da:ea:1e:d0:b7:33:2e:0a:86:68:
                    65:62:7b:3d:35:5d:03:ea:16:22:e9:50:de:4e:bf:
                    90:df:60:31:f6:6c:64:f8:09:e7:75:57:38:55:36:
                    16:9e:1d:dc:6b:a1:38:d8:2e:b2:8c:ba:ab:cf:2e:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:27:4A:1F:4F:CE:F1:CD:0E:66:A7:1C:FE:BA:DA:A8:D7:E7:72:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7c672a28-3b05-384c-b875-b162b022506a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.255.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:94:09:1d:0a:dd:12:99:ca:23:5f:b3:4a:cc:ac:b0:e3:9b:
         e5:2d:0b:b8:eb:17:14:10:c0:f4:dc:b6:81:2c:b3:63:71:2c:
         b9:2b:7d:d7:0e:1e:74:7b:d7:72:97:0b:38:1e:10:b5:d4:46:
         91:aa:6d:1f:67:2d:af:be:09:69:56:d2:b1:6c:3d:f7:a3:80:
         81:19:8d:28:9a:79:76:82:bd:b3:10:04:f5:b2:aa:bb:ef:1e:
         ac:47:f8:b4:72:1b:a0:ee:aa:1b:82:27:03:f1:76:08:57:d3:
         25:b4:c9:cb:2b:6b:84:07:b0:32:2f:ff:da:be:a9:f0:7e:3c:
         8e:3a:4a:12:91:26:ea:db:8c:93:d0:f7:37:ec:b0:38:5a:f6:
         c4:4e:7a:3d:ab:10:1c:99:af:fd:c2:10:a4:0d:60:5f:ef:80:
         df:51:26:c5:bd:aa:6a:35:96:65:a6:10:61:af:e0:95:5c:d1:
         34:23:de:31:4f:d9:53:a1:70:93:51:3e:48:09:8b:38:2c:09:
         b6:50:d9:99:8e:85:e5:c6:10:a0:68:e8:4b:4e:cc:3c:66:ea:
         4d:7a:d8:fe:68:5d:9e:90:b9:dd:53:11:f8:65:9e:50:19:09:
         d3:9b:17:cc:53:24:2c:d7:63:16:a7:17:42:b6:0c:da:30:29:
         37:9b:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:44:23 2026 by rpki-client