Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecc68c24-43b9-36e4-bffa-22f310bfa903.roa
File:                     ecc68c24-43b9-36e4-bffa-22f310bfa903.roa (raw, json)
Hash identifier:          U5GaV3awtpEvXrDJ01v/zw/CLSz0QGDlubVYZbnUdsM=
Subject key identifier:   50:5D:85:2F:49:45:BA:C1:5E:DC:A6:F3:A5:44:32:F8:AD:25:BF:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8C57E6A1C8F069E2F080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecc68c24-43b9-36e4-bffa-22f310bfa903.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.221.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8c:57:e6:a1:c8:f0:69:e2:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=40e57397-0d10-4ada-ace6-ce2406b6ba2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:e3:6c:68:1c:8b:7c:9e:4d:31:82:ec:68:
                    1f:00:91:eb:58:7c:65:0a:60:6c:16:a8:2d:87:14:
                    b4:fa:13:33:3c:36:97:4c:f8:75:b2:10:f4:63:3e:
                    9f:da:07:76:36:a3:34:4d:25:c5:6c:09:a6:d0:d8:
                    68:12:c6:a5:aa:bc:ca:63:59:65:fc:f8:d5:d1:ab:
                    20:39:0a:59:71:ec:e3:12:92:f8:23:64:d0:c6:9b:
                    f7:24:7d:31:f9:61:a0:59:bb:7d:30:54:ab:46:94:
                    d6:a8:cd:58:85:1f:2a:57:1a:ea:3f:41:70:1c:45:
                    6d:76:ad:2d:52:78:5a:e6:2f:22:16:eb:a8:c4:3c:
                    ef:b7:2a:dc:66:78:1e:9a:56:6d:cc:7a:0a:87:5c:
                    9e:17:68:d5:44:0a:05:cf:80:33:37:1e:90:80:a3:
                    24:c8:05:58:3c:85:8b:e2:91:d9:85:55:f6:3f:75:
                    b6:e6:92:5a:8f:41:8a:03:38:64:1f:e4:af:76:4c:
                    ca:9f:3e:0c:64:45:08:bc:22:23:d3:2b:6a:9b:c8:
                    3f:fc:41:23:e9:e0:fd:1f:9e:b3:e6:87:c7:70:c5:
                    af:43:1e:ef:b0:a8:d7:80:ab:27:bb:fc:19:f7:c7:
                    6a:f9:96:ef:1e:06:4b:24:65:c9:51:d9:a6:cd:15:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5D:85:2F:49:45:BA:C1:5E:DC:A6:F3:A5:44:32:F8:AD:25:BF:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ecc68c24-43b9-36e4-bffa-22f310bfa903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.221.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:e0:77:35:79:9a:ef:d1:9d:44:6b:e4:3e:27:2c:2b:7f:
         03:42:14:a2:cb:06:1e:94:7a:82:6b:f4:cb:95:94:b2:eb:c7:
         02:57:b3:a6:b5:9a:7e:c8:ae:e8:cf:81:bf:7f:1c:ee:0f:2e:
         82:d2:7b:ad:2c:35:81:22:de:7e:db:0d:0a:f7:31:dc:05:f6:
         c5:c0:71:30:df:80:c0:4a:7e:1a:57:a3:a2:23:0a:35:ae:27:
         1f:63:24:80:87:3b:8a:9e:c5:0d:76:6a:1a:58:f7:d0:1a:a8:
         75:f4:2b:4d:af:dc:7c:78:89:ef:d1:b0:e9:3a:37:31:2d:1b:
         9f:ac:ee:cf:38:cb:88:db:e8:ef:27:c4:c2:17:dd:e6:4c:8b:
         ce:a7:a8:56:d1:c9:09:80:a5:53:20:71:f7:ae:d7:5a:79:28:
         e5:03:4b:86:ba:d4:47:b0:4d:18:59:76:e5:3a:07:15:8f:3b:
         1f:36:33:0a:62:6d:57:30:81:56:85:6b:5d:39:05:89:e2:56:
         e2:3a:45:fa:b4:1f:02:a5:26:b4:bb:a8:a0:2e:8c:a0:10:5e:
         cc:3c:a6:ed:ad:cd:f1:3f:96:e5:2b:08:97:8f:00:4a:c9:55:
         f1:1a:7a:e0:49:2e:17:0f:ec:5b:f4:c0:c5:16:52:74:8c:3d:
         73:9b:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:32:12 2026 by rpki-client