Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de66a03b-f7d1-3d21-968a-e779030a73af.roa
File:                     de66a03b-f7d1-3d21-968a-e779030a73af.roa (raw, json)
Hash identifier:          eJ+18GghNt7Gl/UYwthSMMmXF3MPq/kVXGS1T3czBlc=
Subject key identifier:   91:E3:13:5D:C7:50:9D:F5:06:D0:6D:8A:D8:D4:28:EE:60:8D:17:CC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8C6F303A7C2F2E233940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de66a03b-f7d1-3d21-968a-e779030a73af.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.221.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8c:6f:30:3a:7c:2f:2e:23:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=421b4842-ef44-4f49-bc7d-bf6f1b0fc0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:82:19:e0:48:0a:cb:8a:41:02:4d:5f:59:
                    e4:05:00:66:9e:13:95:87:6f:c6:22:03:6a:99:64:
                    61:ed:79:a4:27:9e:13:0c:fd:d2:f8:c9:43:04:c0:
                    f6:2a:63:79:eb:8a:e5:48:4d:c8:22:17:12:aa:ff:
                    9e:1b:85:3f:ec:2c:50:c3:1b:4e:69:3f:7f:6c:e7:
                    75:88:19:71:b1:1a:f9:02:ff:53:54:4f:a5:7e:fa:
                    68:be:ee:df:87:b9:ef:5b:6d:3c:af:3e:54:4c:10:
                    88:86:0a:4d:d0:2f:3e:d5:7d:ab:a0:70:b7:fe:4c:
                    1b:9c:16:2c:53:68:1c:16:87:49:76:e4:be:3b:9f:
                    8b:2f:2d:ef:78:94:3a:f2:cf:41:e6:99:c4:0b:fe:
                    ad:97:35:1e:8c:25:75:cc:fe:85:f3:2c:b5:fc:2c:
                    42:2c:d2:ed:b5:56:b7:25:31:d7:2c:ec:98:60:85:
                    8a:36:98:36:01:e9:2f:38:cb:30:8f:31:c3:12:4f:
                    40:40:83:d1:66:8b:2d:ad:bc:39:57:4b:d4:98:d9:
                    b2:8e:d0:7e:6a:90:7d:02:07:f4:f1:a8:20:cb:23:
                    54:1b:4e:21:9a:84:40:dd:0e:74:bc:3d:3d:03:e0:
                    4f:9a:12:fd:56:e8:73:5a:9b:e0:bc:30:c8:de:ff:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E3:13:5D:C7:50:9D:F5:06:D0:6D:8A:D8:D4:28:EE:60:8D:17:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de66a03b-f7d1-3d21-968a-e779030a73af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c3:78:8b:3e:60:d1:d0:c1:6c:23:97:25:6e:00:66:a3:11:
         1f:ac:5a:38:cb:54:ef:3f:6d:39:b8:e6:2f:7f:74:4a:a5:af:
         2d:51:18:05:78:71:86:f1:b8:73:c1:a6:e6:76:43:e9:9f:c6:
         f8:b5:7b:4c:0d:0a:22:93:57:c9:ac:c5:36:66:2c:e9:a7:82:
         46:c6:9a:13:bd:6f:7e:43:e8:bb:ea:96:e5:c8:fc:f0:ae:e7:
         c7:6b:77:5a:9c:a8:29:cf:b6:01:5d:c2:20:97:c6:7e:b2:0c:
         a6:be:a4:46:9f:87:8a:31:0b:96:f7:e3:11:19:28:52:a8:5e:
         b8:44:2e:20:a6:dd:79:b1:cb:79:eb:7a:69:bb:39:05:79:12:
         75:89:e8:fd:3f:98:57:7c:95:dd:b2:41:7c:0d:7e:36:68:82:
         f6:71:15:d9:23:1c:e9:f8:32:4d:9a:c8:e2:b2:f1:02:a7:cb:
         1a:44:7d:56:13:7e:01:21:ef:f7:60:87:e7:7b:81:7e:c2:00:
         44:91:93:de:c6:06:93:b5:ac:e0:8c:5a:5b:28:72:e8:f3:d3:
         fe:9b:30:28:ac:41:5d:e9:5b:0b:99:5e:03:88:43:be:3f:14:
         47:0f:36:71:be:85:a5:16:8e:2e:e5:f2:33:2d:8d:41:0c:cb:
         93:b1:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:20:41 2026 by rpki-client