Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f9baf0-ec18-3410-ab64-ba66b6347b86.roa
File:                     b8f9baf0-ec18-3410-ab64-ba66b6347b86.roa (raw, json)
Hash identifier:          /I8oD7KJQmuC4VZAB+tQdBnwo+Yr70tUlW+rrkXbRvY=
Subject key identifier:   04:D8:63:0A:70:7E:EF:BC:AB:73:73:15:26:FF:70:5A:FC:31:E9:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D22AC522A29E5A0882499FD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f9baf0-ec18-3410-ab64-ba66b6347b86.roa
Signing time:             Wed 11 Mar 2026 18:06:16 +0000
ROA not before:           Wed 11 Mar 2026 18:06:16 +0000
ROA not after:            Tue 09 Jun 2026 18:06:16 +0000
asID:                     6167
IP address blocks:        75.255.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:ac:52:2a:29:e5:a0:88:24:99:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 18:06:16 2026 GMT
            Not After : Jun  9 18:06:16 2026 GMT
        Subject: CN=d177bcb7-0419-411a-aa54-a3f8b174dda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:f2:74:a8:07:cc:36:bd:c1:62:2c:70:02:
                    ad:cd:42:3a:f1:77:01:7c:c0:d1:3f:dd:af:6e:fa:
                    95:df:46:f1:05:d4:bf:41:b2:bb:bf:80:f4:27:7b:
                    3e:3c:7d:40:15:3f:88:5d:20:9e:6b:ce:be:3e:6b:
                    b5:eb:21:06:1f:fa:61:8f:7c:51:00:de:7f:47:75:
                    42:43:ef:d1:9d:66:eb:f5:ab:97:39:89:71:b9:be:
                    18:85:0a:cc:7a:bd:2b:68:44:05:f3:4e:13:f7:fc:
                    6a:02:bf:13:49:17:ea:20:80:39:14:4f:cd:d9:c1:
                    ae:65:43:35:c4:69:c6:39:2d:c0:47:8c:79:93:f6:
                    e6:e7:c1:dd:4c:f3:b2:e8:fe:c4:aa:73:5c:c9:29:
                    43:5e:5d:da:6e:b5:f0:cd:97:5c:ef:4f:64:b5:73:
                    65:b5:84:79:f5:e5:05:96:77:67:49:2e:70:e6:dd:
                    61:a3:cb:f1:6b:76:a6:12:6e:54:ca:e3:a6:2e:40:
                    e5:b4:cc:45:47:4d:5d:1e:00:f2:62:21:c0:9c:8b:
                    21:58:6a:01:70:e4:a0:68:3d:cc:ee:4f:6e:39:13:
                    81:41:9b:6d:7e:e2:0e:05:93:db:46:a1:c6:b5:d0:
                    00:25:76:ba:f5:fc:0c:b3:e4:79:70:8b:5f:b4:75:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D8:63:0A:70:7E:EF:BC:AB:73:73:15:26:FF:70:5A:FC:31:E9:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f9baf0-ec18-3410-ab64-ba66b6347b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.255.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:eb:f5:a7:b9:fd:e6:66:33:90:ea:e8:db:4e:71:8a:ec:e1:
         a1:20:26:ce:25:27:c1:1e:57:1c:29:0c:23:15:66:cc:11:f2:
         88:db:e2:98:17:ea:f3:d7:b9:38:3b:e0:41:02:a6:69:2b:59:
         46:68:e1:20:14:4e:e5:e1:52:a8:4c:c7:82:ff:2c:29:83:6e:
         8f:4b:2e:bf:91:c5:7b:51:b0:ab:d8:93:76:d2:d6:92:28:1d:
         f7:7d:2c:3e:49:11:30:b4:71:cc:45:83:f2:71:c2:74:bb:4b:
         af:e3:80:62:73:1d:98:da:a1:ef:b9:d6:62:43:31:e2:ff:c5:
         9a:6a:67:f2:fa:3d:2b:e7:5c:7a:e6:94:d4:51:13:97:f5:ef:
         2c:17:19:1c:9c:a5:40:47:f4:70:de:4e:7f:b6:78:bf:cd:55:
         67:c0:aa:67:ad:70:a4:b0:74:3b:3c:9d:ec:ef:3a:c7:af:49:
         40:47:5c:36:e7:ff:51:82:4c:ed:75:73:7f:00:67:d5:ac:ab:
         35:bd:0a:3e:3a:f1:86:1d:0f:13:f7:e7:48:dc:be:65:69:a6:
         4c:08:16:5c:81:f2:4c:47:cc:2c:fa:41:b0:28:04:21:99:6d:
         be:5f:1d:b8:e9:e9:f1:3f:29:69:21:4d:a8:8d:7c:9b:df:7a:
         c2:c3:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:44:22 2026 by rpki-client