Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f72ee645-d729-3e02-95ae-b6ea357e2fa9.roa
File:                     f72ee645-d729-3e02-95ae-b6ea357e2fa9.roa (raw, json)
Hash identifier:          81y8arS7zFNTEEWLx78k9UhADMfMyODWJWkXGNusxzo=
Subject key identifier:   BF:79:B6:F8:0D:60:0F:EB:4C:B7:9A:E4:07:52:FE:42:43:42:80:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA8F4DC3CEB3F6D404F300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f72ee645-d729-3e02-95ae-b6ea357e2fa9.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.242.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:8f:4d:c3:ce:b3:f6:d4:04:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=d11fd046-3641-4971-a42b-e42d19e643af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:6e:7a:02:73:7d:1f:81:0c:08:f6:1b:a1:
                    dc:59:1a:1e:53:26:46:c9:c4:9f:4f:92:b5:0a:32:
                    53:72:4e:1f:d8:b0:9a:47:9d:18:f3:93:3c:60:7b:
                    53:ed:b9:79:1f:f9:e4:cf:ca:a7:01:69:71:01:de:
                    9e:67:85:c4:27:51:37:50:40:11:a4:cf:6d:0e:7f:
                    1f:06:6f:dd:02:ae:0f:1d:79:3d:50:cf:9f:83:5f:
                    32:3a:58:53:bd:01:13:9e:5d:95:07:e9:90:29:34:
                    fd:b8:21:5a:1f:ff:01:a6:fc:84:50:c9:41:4e:6c:
                    1f:83:fc:2f:9c:5a:23:b3:ca:10:b3:4e:4d:fd:e4:
                    8a:36:89:0e:cd:5c:8f:dd:7c:e8:09:d2:6c:8f:d1:
                    55:93:c5:0e:59:d8:42:d8:18:e6:14:86:1d:91:98:
                    92:b1:d0:9c:84:5d:f7:a0:e0:c6:91:84:04:a0:2d:
                    ad:94:6d:1f:22:48:b8:5f:e7:a4:37:00:9c:1b:e1:
                    8f:4a:d0:a1:77:aa:31:e9:c6:d3:f9:0d:b3:39:5f:
                    05:35:c3:63:15:24:ea:7e:bf:23:51:15:bb:af:24:
                    15:08:4b:2d:e7:12:59:07:e4:94:0f:e8:13:11:85:
                    c6:f8:2c:e0:a8:d2:1a:f3:7c:17:6f:b9:35:21:d6:
                    f8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:79:B6:F8:0D:60:0F:EB:4C:B7:9A:E4:07:52:FE:42:43:42:80:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f72ee645-d729-3e02-95ae-b6ea357e2fa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.242.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:94:ed:cf:96:5d:c0:25:08:ba:a1:cc:2e:a4:8d:5b:8b:d0:
         c9:58:cf:a5:84:07:3a:1d:43:ec:77:2b:28:c4:46:31:79:7f:
         81:e8:1f:7e:45:cc:7a:75:dc:46:6f:f1:36:3e:14:fd:c3:0b:
         8e:d0:6a:81:9f:bc:7d:e5:0a:6b:84:48:7b:c0:dd:7a:68:e8:
         0d:48:e4:fc:2e:7d:34:f2:79:b4:8f:22:c8:e7:40:49:88:d7:
         a6:b7:88:29:d5:19:5f:c2:6b:8c:6e:ab:15:3c:bb:67:4d:a8:
         ef:5d:cd:88:d1:c2:e1:34:d8:3f:9c:18:06:94:02:39:c6:fd:
         1a:97:81:d6:be:0c:7d:c9:87:ac:c7:d1:c2:e3:76:da:a0:54:
         2e:51:f8:b9:f5:5f:bf:20:2d:3c:5f:a8:06:bd:36:fe:b1:d8:
         36:7f:f5:e7:3d:e4:36:06:8d:cb:8e:9f:7b:59:ab:1e:58:6b:
         05:17:03:50:9c:4b:8e:0b:9b:2d:64:b1:29:c8:d5:86:a0:64:
         2e:8b:e6:78:ec:32:72:5a:2a:46:cb:b3:40:7c:e5:5e:57:91:
         6a:5a:95:14:b4:0c:63:61:1d:8d:7b:be:81:42:d6:3d:fa:5c:
         e2:73:6e:ff:94:dc:aa:cf:59:eb:6b:ba:67:81:84:c6:e6:5f:
         e1:1c:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:15:57 2026 by rpki-client