Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d785026c-5c48-372d-92f7-cf8bb376542a.roa
File:                     d785026c-5c48-372d-92f7-cf8bb376542a.roa (raw, json)
Hash identifier:          dV8kGGsWF5E9vpDCyqzN2Y3k/5wBIS6QqciSyBlnj2M=
Subject key identifier:   4A:F6:02:7E:56:72:C0:C3:0D:65:C3:4B:A5:27:4C:C5:B0:A5:9B:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8E7119F0F21E1B267D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d785026c-5c48-372d-92f7-cf8bb376542a.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.239.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8e:71:19:f0:f2:1e:1b:26:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=72af181a-f684-4807-97b6-39ca81ce8425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:ed:3e:76:78:92:d9:68:4f:55:fc:dd:d9:
                    9c:5c:b8:2e:ec:5c:0d:53:23:2c:3c:fd:a3:74:9c:
                    8f:79:8d:ec:11:ef:54:f2:35:2f:f4:28:9c:08:61:
                    06:f1:17:1e:94:5d:37:a8:10:43:41:50:f3:e1:da:
                    72:ae:c5:17:cd:20:55:56:a6:d5:b2:26:64:db:30:
                    09:72:69:33:4a:c7:4a:cc:ad:92:a4:78:32:ff:c5:
                    17:1a:db:57:b2:ed:35:aa:39:54:a3:af:9a:91:51:
                    6b:ad:8a:06:0f:40:bd:f6:3d:c2:68:35:ff:7c:56:
                    d9:29:37:16:0c:9f:fb:6c:ae:ca:e4:2a:b1:73:b0:
                    08:5b:6c:12:a2:19:9d:69:cf:f0:12:96:5a:37:2c:
                    d5:42:b0:e6:bc:f7:f3:08:d8:b3:5f:6b:e2:0a:20:
                    de:9d:73:c9:46:ee:32:e8:09:bb:c5:d8:9b:14:5e:
                    6f:3b:99:e4:d7:a9:c3:83:eb:b9:18:6d:96:e4:98:
                    31:db:9b:37:70:02:83:18:ed:cf:9d:ff:63:b5:f6:
                    bc:dd:44:09:96:4f:9d:08:7c:55:9a:65:c9:cc:66:
                    35:c0:79:95:a1:f4:5c:1f:cc:04:c5:67:e1:61:d3:
                    42:4c:16:05:c8:a7:93:6b:4b:22:40:81:17:53:07:
                    70:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F6:02:7E:56:72:C0:C3:0D:65:C3:4B:A5:27:4C:C5:B0:A5:9B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d785026c-5c48-372d-92f7-cf8bb376542a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.239.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:9c:c1:1b:2f:8c:22:8f:73:e3:c9:06:61:96:bd:10:66:
         89:1e:ac:23:d5:47:96:9a:38:4c:e8:d5:3d:2a:96:a8:99:ba:
         89:1a:e4:eb:13:cc:6f:85:4c:b7:ca:c3:0f:a3:ba:22:b7:27:
         f4:dd:61:9d:e9:28:03:e8:f4:d1:44:78:88:62:bd:71:80:6b:
         92:03:5f:05:d0:1d:b5:ae:56:9a:47:72:6a:c6:bd:9b:a6:63:
         d3:30:f0:61:a4:c9:88:1d:c8:c1:9d:17:e8:84:c6:e8:1a:f8:
         70:df:f4:55:2b:1d:9c:f0:6d:28:7e:48:b0:f3:fc:03:0f:57:
         e4:89:72:34:c3:fd:21:75:66:cf:89:67:fc:21:24:2e:45:ef:
         51:68:dc:80:37:f6:a1:00:69:96:c9:1e:52:9f:70:96:2c:7c:
         f6:ca:63:5b:e4:66:d9:5c:09:f2:a5:38:c9:be:1e:87:83:52:
         75:c6:1e:2c:af:5e:db:12:a8:e3:65:12:75:7d:0f:10:b7:5e:
         d5:3a:ff:8a:e0:3c:6b:ca:21:b1:57:b9:72:e7:42:ea:60:3d:
         ef:33:39:9f:70:c1:ee:7f:b1:a5:52:27:b8:0f:d5:83:cf:90:
         98:ba:79:f4:b8:eb:cc:b3:19:c1:be:c5:17:aa:03:dd:c9:8c:
         6d:fe:29:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:34:17 2026 by rpki-client