Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ca039dc-4184-3a27-aa56-9ab056627a38.roa
File:                     7ca039dc-4184-3a27-aa56-9ab056627a38.roa (raw, json)
Hash identifier:          dN+F46gQ9owZzJm9vYKCQO30avGpgYIOZwJ7jrOWRt0=
Subject key identifier:   D4:FB:0C:75:3A:0B:CE:55:12:D8:8A:F9:99:67:E7:DC:67:A0:9D:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3CF9C7306E1399479EC65B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ca039dc-4184-3a27-aa56-9ab056627a38.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        75.255.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c7:30:6e:13:99:47:9e:c6:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=1567c560-43e4-4593-8ee9-3d3f6a4b55e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:06:bc:10:2f:3a:09:c0:bb:ce:61:90:07:
                    3d:c2:c8:57:2f:8a:4d:1b:a4:c0:86:cc:2c:15:f7:
                    86:4e:c8:44:25:30:85:7d:f2:63:e3:3a:5d:db:3c:
                    10:b5:00:1f:1f:99:8b:35:0d:bf:f2:b8:73:1a:76:
                    46:f4:b6:da:28:5f:fa:05:ea:84:c9:33:b3:ee:21:
                    b6:c1:5f:8f:6b:0c:0b:95:4e:50:b7:04:2f:8d:35:
                    d3:68:d6:03:63:88:c6:d2:b6:ec:d2:de:4f:38:15:
                    d4:c9:0a:a1:12:00:b7:59:f0:46:cd:98:53:bf:a6:
                    6b:ff:ac:bb:9c:ee:87:15:7a:1a:ca:0c:7d:95:58:
                    9e:e0:8f:9c:f0:15:c9:e6:ac:e7:ba:c3:98:58:3b:
                    33:ea:26:79:89:95:c9:9e:5f:b9:02:66:fc:59:42:
                    8b:e2:df:21:cb:ff:26:d0:53:55:30:0e:57:28:fe:
                    5b:e1:77:08:e8:e3:e9:47:62:a3:cc:ba:5e:68:cf:
                    72:01:eb:6f:51:d2:3a:42:75:6c:00:6c:ac:d0:71:
                    d1:11:7a:ec:45:dd:d4:16:88:f8:ba:6e:a7:65:20:
                    d7:92:f3:60:fa:9a:f3:87:13:9a:d0:fe:fd:ec:f1:
                    20:f6:32:2a:c6:aa:10:e5:02:ce:31:63:53:5c:d0:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FB:0C:75:3A:0B:CE:55:12:D8:8A:F9:99:67:E7:DC:67:A0:9D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7ca039dc-4184-3a27-aa56-9ab056627a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.255.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:4d:eb:b3:e9:9a:ad:c6:bd:86:3e:35:15:b0:5c:11:e6:15:
         05:15:72:bd:89:64:95:69:0b:9c:a9:75:89:6d:d2:97:4b:a4:
         18:85:bb:ff:c6:91:68:ed:ca:1f:00:f0:55:45:5d:fa:6a:bf:
         b1:54:cd:b4:82:d6:89:6c:f1:14:8a:66:a1:be:d6:23:f4:98:
         1f:f2:96:73:9a:bb:22:84:22:8e:18:7b:ea:fe:1c:46:4e:9f:
         95:ad:c3:78:4c:b6:ee:dd:84:ca:dc:78:00:22:0a:3a:9c:aa:
         6a:0a:42:9a:70:d9:73:59:24:e7:b4:8d:18:43:c5:c3:76:fb:
         b4:0a:d6:86:df:ea:b1:f8:f7:cd:c0:34:47:6b:83:6e:30:3a:
         f1:f5:c1:d8:cc:53:59:9c:96:51:ec:52:a5:e0:ff:a4:5f:85:
         0c:73:25:7c:d0:9c:a3:d8:7f:f5:80:ba:e4:f5:93:09:a9:41:
         32:37:72:e2:7a:45:eb:d0:57:be:91:a9:13:ae:04:9e:21:06:
         e2:2f:15:24:e0:3a:73:05:2e:81:94:58:22:80:82:e8:42:a6:
         62:d5:23:ee:24:9e:de:ae:30:df:ca:9a:e6:c8:5f:1e:25:d7:
         65:d4:3b:df:0f:27:3a:a2:91:3f:60:7f:69:2d:15:b2:4a:4e:
         27:3a:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:40:22 2026 by rpki-client