Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdb2da8b-5481-38bc-b235-7265b9693156.roa
File:                     fdb2da8b-5481-38bc-b235-7265b9693156.roa (raw, json)
Hash identifier:          09MvQskuLrf5eyBQnXe6+1IhpweQs7D7jh/jZzJpWl8=
Subject key identifier:   58:1B:7A:5E:16:52:EE:9E:AE:5A:EA:EE:FF:80:AA:22:D9:53:15:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA87025CB9D6C68B30BE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdb2da8b-5481-38bc-b235-7265b9693156.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.198.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:87:02:5c:b9:d6:c6:8b:30:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=c0bee248-a467-45d3-8b7e-16fa00b6e0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:3c:b6:d9:45:3d:a4:e9:55:54:77:6c:0e:
                    8d:b2:7a:f6:0a:8d:e4:89:f8:a1:ef:b7:6d:82:b3:
                    f3:e0:0e:e3:9d:e3:11:4c:ed:c5:e4:d3:d5:74:a0:
                    c2:ea:c7:7f:a5:72:26:c1:53:47:df:a5:b7:43:1c:
                    b3:1d:2c:4a:1e:7b:b6:5d:1a:8b:3a:e5:a3:2a:3e:
                    c2:2a:c8:c7:c7:c7:cb:c8:36:c5:6b:dd:2a:e0:93:
                    12:8b:a4:93:9d:d4:50:45:3b:d3:49:97:d7:2c:db:
                    7b:72:b0:70:fa:bd:fe:42:0b:d9:17:9c:e5:50:22:
                    92:ba:2a:ad:53:21:2d:fb:f4:f3:e1:75:f5:95:ba:
                    d7:02:a2:69:82:5c:d5:14:5f:7c:c4:01:b7:7c:7a:
                    ec:f3:b6:d0:f9:7d:89:08:2c:d1:3c:ef:79:d2:38:
                    ce:49:d5:96:ce:a2:11:52:60:54:fb:38:7b:bc:1e:
                    9d:11:d2:66:a9:3a:40:1a:3a:e1:4a:cf:6a:4f:ef:
                    f9:c9:40:67:bc:f0:3b:73:9b:58:86:e0:7d:9a:4b:
                    e1:ef:16:3c:17:1f:a7:91:3c:1b:50:ff:cc:8a:49:
                    1e:7c:91:0d:dc:5f:3b:61:0c:93:6f:9f:93:9c:e6:
                    33:f7:b1:00:97:58:6d:3d:99:19:90:61:10:5f:f6:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1B:7A:5E:16:52:EE:9E:AE:5A:EA:EE:FF:80:AA:22:D9:53:15:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdb2da8b-5481-38bc-b235-7265b9693156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.198.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:58:e3:8b:88:72:51:44:80:f5:3c:eb:06:07:de:bc:72:03:
         5d:e0:5c:18:60:94:a3:da:65:c9:4d:8b:05:7a:de:47:07:d5:
         83:e1:b8:07:d2:32:92:a7:f9:87:6d:da:00:3c:18:4e:fc:69:
         4c:68:5f:ca:7b:7b:48:4a:18:a7:9b:72:a9:1b:ad:71:51:fa:
         b6:cb:08:be:76:76:e6:ce:e1:4b:78:38:30:f2:46:6c:b2:d1:
         a8:0e:6e:1c:5b:30:44:77:1a:ed:c6:ab:70:9a:b6:f7:67:57:
         79:4f:17:12:45:39:02:2c:4b:98:14:54:27:3a:59:06:b9:a5:
         b8:56:85:9e:03:e7:91:87:0b:77:60:01:f5:25:f3:64:e5:30:
         18:cd:3c:94:15:ad:0c:42:45:a0:34:ea:ac:90:d4:dd:a0:51:
         77:eb:44:0d:8f:21:b6:78:c6:2b:ad:9d:f3:ed:ec:d4:e8:d9:
         ca:59:0b:b6:e7:a6:72:86:7a:72:68:3e:bb:91:73:2f:3d:ac:
         f4:f8:5f:ae:7d:92:71:42:88:70:b8:f8:d6:db:30:5c:3b:d6:
         84:d5:09:c6:c1:cf:36:fe:2f:6c:d2:53:6d:8d:2c:ac:10:a4:
         ee:91:48:a6:d1:a9:00:e0:53:8e:a8:59:95:35:ac:b3:f8:5d:
         c7:44:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:22:29 2026 by rpki-client