Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7b1868c-d5d3-3edc-ab4f-165ecca53be6.roa
File:                     a7b1868c-d5d3-3edc-ab4f-165ecca53be6.roa (raw, json)
Hash identifier:          Y8bYeRAP+E+iQhfkQeMvBj1zkmj2Zq2DMWj9NAdy1t0=
Subject key identifier:   95:18:52:0E:7E:FD:B5:52:27:A3:5E:E6:E4:A7:0C:23:74:9E:77:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3CF9C715DA020BB824DA7180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7b1868c-d5d3-3edc-ab4f-165ecca53be6.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        75.255.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c7:15:da:02:0b:b8:24:da:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=fba5b476-ab33-4cad-89c2-6cc809af3511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:0a:34:46:35:de:41:f2:d7:8d:fa:f5:c8:
                    92:29:d7:1e:0f:f9:96:0c:f2:45:bd:9f:63:9b:e9:
                    ad:75:f3:ee:38:9e:3f:06:d6:33:62:f4:9b:99:31:
                    14:cd:01:8c:40:c7:ad:35:b8:7d:c2:24:21:d1:58:
                    89:51:c6:4f:9c:c0:05:b2:ca:3f:98:0b:e3:4a:00:
                    92:ec:4e:66:53:f7:1f:8f:ed:45:e9:f7:81:a8:ad:
                    f9:e0:97:47:93:1d:5e:44:5c:03:7a:dd:84:e4:3d:
                    f5:59:71:5f:89:7d:e0:c6:ff:95:47:a0:48:b4:01:
                    32:1a:55:d8:cb:e6:2d:40:45:62:7c:2c:fd:d1:a5:
                    86:77:69:ea:fe:5b:49:94:4d:a6:16:96:b0:73:45:
                    85:9f:da:0f:44:7f:ed:a3:a1:e8:db:19:af:f3:ac:
                    9a:f8:31:75:9f:df:24:d9:79:ab:81:b9:e9:66:53:
                    d2:e6:f9:d7:20:4d:c4:d7:b5:33:d2:b0:e0:31:27:
                    eb:47:6d:ac:2a:bc:5c:5e:5e:71:b7:6d:bc:22:57:
                    8f:92:ba:7f:9c:99:70:bf:6c:27:0c:c3:f4:43:51:
                    95:4e:88:3d:a9:29:36:b7:cf:8b:80:76:fc:6a:c5:
                    57:6e:33:95:0c:4a:2d:20:7b:dc:d9:31:8f:b7:b4:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:52:0E:7E:FD:B5:52:27:A3:5E:E6:E4:A7:0C:23:74:9E:77:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a7b1868c-d5d3-3edc-ab4f-165ecca53be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.255.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:de:56:d9:c5:59:63:06:e0:b9:83:e4:08:ab:e1:83:9b:18:
         81:ab:fa:b8:1a:6f:71:5a:d9:2c:d1:ef:25:ce:d9:ca:7b:93:
         a4:59:9f:77:4e:76:3e:be:60:82:52:20:3b:62:fd:4d:f7:10:
         0a:9a:1c:8d:8f:db:ef:af:4d:39:67:5a:44:d2:ca:2b:ca:e0:
         bd:16:60:a5:e6:c3:f9:e6:01:4d:c9:6c:06:bc:2f:13:a3:74:
         8e:d3:74:91:08:2e:a5:46:82:8f:49:be:bd:a7:7c:85:0e:97:
         3f:25:34:7a:25:a1:33:f5:c1:30:90:68:0e:66:92:bd:6a:31:
         5a:e6:de:71:41:b8:20:78:03:db:a4:b0:a9:3b:f5:dc:de:2e:
         f7:15:1f:d0:2e:38:77:ca:19:b7:41:b8:da:ba:17:ed:b8:49:
         ab:c9:c7:1d:33:e9:a5:dc:d5:7b:88:f4:da:44:3a:cb:44:07:
         b0:a5:9a:b0:93:4a:94:44:3c:3d:3a:6b:bd:e2:73:66:84:20:
         e3:f3:21:80:4c:e0:df:d9:82:63:0c:99:5f:8c:d0:9d:42:ac:
         f5:d9:0f:bb:1d:6a:76:70:13:29:2e:85:35:15:ac:3f:49:3c:
         89:5c:28:5a:fd:07:46:25:9b:fb:b2:6c:74:34:f7:d5:c1:0b:
         b1:f7:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:41:53 2026 by rpki-client