Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/73e02eef-4e68-3944-bb90-6e68cf549411.roa
File:                     73e02eef-4e68-3944-bb90-6e68cf549411.roa (raw, json)
Hash identifier:          +EbncZoKY0GAvD2HODQ22qj11G+wQcng/jeM68qnqK0=
Subject key identifier:   17:F9:1C:7C:4C:1C:70:F4:EE:0B:24:FF:D6:4E:4E:FE:E9:8E:8C:CF
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F3052630985E39F81C620D980
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/73e02eef-4e68-3944-bb90-6e68cf549411.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     21817
IP address blocks:        198.161.144.0/22 maxlen: 29
                          198.180.225.0/24 maxlen: 29
                          199.7.192.0/21 maxlen: 29
                          199.48.56.0/22 maxlen: 29
                          199.200.112.0/22 maxlen: 29
                          2606:8100::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:63:09:85:e3:9f:81:c6:20:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=b3493284-40b6-4cde-9bf2-09f2d4550663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:3f:3d:d4:62:a1:6c:98:56:4b:f2:08:a5:
                    99:b0:8c:51:8e:5b:01:aa:cf:d7:b2:13:e2:c0:8b:
                    d5:9d:c8:f4:fc:f2:86:e5:51:a0:c8:e3:84:e0:e8:
                    97:bf:50:59:32:fd:8b:9f:24:17:d5:eb:8f:ef:65:
                    ec:72:c0:2d:99:1b:6f:8b:00:6f:0d:d1:43:fc:6e:
                    dc:81:41:4f:85:8f:a3:7a:bd:96:94:76:ab:2a:97:
                    e3:f9:c7:fe:a8:f3:e5:2c:42:ec:43:e8:60:24:65:
                    11:b7:02:c7:5a:d8:b0:0e:36:ca:b0:46:78:76:b0:
                    36:63:fe:7b:d8:20:20:ad:85:02:ae:48:d6:5e:c7:
                    47:c9:5f:37:d4:50:04:2d:fa:5c:36:48:ad:81:9b:
                    b3:0c:14:a9:63:9a:5b:11:21:1c:03:da:a9:fc:14:
                    8b:88:c7:7a:87:b4:2c:78:f7:b5:0e:2b:53:11:c7:
                    ab:72:ff:37:c9:33:e3:6a:45:3b:8b:ea:10:52:03:
                    02:cd:c0:5a:63:4a:dc:83:c3:c1:8d:b5:49:a4:ed:
                    e0:d0:fc:56:34:62:6f:9b:24:42:e9:10:4d:b3:2e:
                    1c:b4:76:06:a4:38:69:9f:03:69:97:1b:66:90:1d:
                    4b:46:f1:6d:ae:c2:62:53:2f:7d:84:6c:e9:6f:75:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F9:1C:7C:4C:1C:70:F4:EE:0B:24:FF:D6:4E:4E:FE:E9:8E:8C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/73e02eef-4e68-3944-bb90-6e68cf549411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.144.0/22
                  198.180.225.0/24
                  199.7.192.0/21
                  199.48.56.0/22
                  199.200.112.0/22
                IPv6:
                  2606:8100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:a1:70:4c:76:46:17:45:17:7a:83:6c:c1:26:a6:d0:80:
         ed:5f:fc:94:94:ab:15:47:0a:4e:5f:72:57:c0:96:67:0c:4e:
         f8:54:51:0e:f6:a7:b4:5d:fb:38:01:c1:3c:dd:a8:4a:40:6a:
         00:ca:40:14:6c:28:b0:9d:f3:30:15:ce:6b:60:ca:27:c0:0c:
         cb:db:6a:ce:77:cb:fe:17:3e:d7:60:47:ae:7e:1c:e7:f3:4f:
         f5:b1:e2:fd:43:df:07:52:ea:a3:98:ec:9f:80:29:47:36:e8:
         11:21:b8:b0:52:a5:be:24:66:ad:7a:20:64:d4:08:98:de:65:
         da:99:83:46:8d:9e:34:d3:1f:19:4f:35:a5:4e:1c:64:46:53:
         4e:cf:39:ff:f4:80:13:a3:15:e1:b0:b9:01:58:15:7e:76:a8:
         bf:64:af:db:1d:00:57:4b:5b:6a:24:23:31:aa:66:0e:83:bf:
         bb:46:9c:fa:8d:dd:94:ca:2a:16:40:e3:53:c0:52:69:80:b1:
         e4:51:7f:ab:9a:26:86:cf:66:79:fa:4e:dc:38:35:73:32:b3:
         ec:fa:09:60:9c:3e:a0:ec:5e:fc:b2:bd:ac:4c:17:5c:3e:54:
         ca:ea:7d:63:e2:c4:d1:2b:17:d5:45:75:96:82:f4:be:9d:17:
         69:48:93:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:48:39 2026 by rpki-client