Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa
File:                     1988590f-aafa-3f41-b2ea-8df5d93e3730.roa (raw, json)
Hash identifier:          njMm58+g4jqh4SVTCafMsy/towxFAkaUUCKZSsXfkeU=
Subject key identifier:   50:FD:92:67:3A:31:70:66:B2:1D:11:19:B1:E1:09:33:46:62:23:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5E62D7AC29843C5A15A71C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     3855
IP address blocks:        199.172.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d7:ac:29:84:3c:5a:15:a7:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=3ab45e04-4d22-491e-b844-48a246f9c377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:79:65:1b:56:36:26:4f:5c:6e:58:0f:1b:
                    7e:c0:38:0f:43:be:e5:20:40:29:06:2d:03:35:de:
                    b5:dd:a4:9e:5e:83:34:da:f2:6b:de:a8:4a:b3:4d:
                    e0:d6:19:d9:13:73:08:0d:cb:af:55:88:b6:ba:7e:
                    f6:02:52:ce:16:62:07:54:b0:d7:ee:3b:16:8e:a2:
                    8e:3c:fc:22:79:45:4f:74:c7:34:e9:00:62:70:f9:
                    62:e5:27:d4:2e:52:02:62:8f:2b:74:c8:39:87:24:
                    e3:35:84:08:c3:2f:96:cc:b5:40:8c:10:fd:4d:c7:
                    18:b1:5b:15:a3:81:e3:93:71:b0:61:ca:1a:c4:a8:
                    a2:03:91:85:3c:15:a8:69:67:b3:07:fc:d8:28:8a:
                    65:aa:86:14:26:62:f1:ca:04:f9:9d:7e:e9:d1:a2:
                    af:67:1c:74:cb:70:7d:84:38:a8:25:27:98:f4:5c:
                    9c:01:3a:81:8a:2f:63:47:f5:e2:cd:62:73:62:7e:
                    6f:c1:5d:8f:d7:43:8d:97:27:b1:05:ef:4b:72:51:
                    0d:7f:c7:26:f4:e2:77:b4:ac:77:7f:25:23:c0:31:
                    40:8b:3d:92:bd:8a:f7:82:0f:33:cb:84:7f:60:c8:
                    64:51:ca:2f:a4:e6:a9:7a:1c:35:64:5e:78:32:c8:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FD:92:67:3A:31:70:66:B2:1D:11:19:B1:E1:09:33:46:62:23:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1988590f-aafa-3f41-b2ea-8df5d93e3730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:78:77:d6:24:a0:28:20:83:bd:b7:ac:be:c9:80:55:05:4a:
         5e:de:f0:11:23:1c:5f:77:dc:a3:1a:16:b5:e1:af:4a:00:74:
         fc:ef:dd:17:32:de:6d:5f:87:46:e7:55:e5:0a:4e:85:ef:17:
         42:ed:ca:bc:6c:8d:7a:04:e9:5f:b5:f6:80:78:f5:57:dd:30:
         e9:6c:83:9e:70:f5:f9:f5:35:25:dc:51:a1:fa:c8:d1:7c:57:
         a0:f4:62:b0:12:51:83:52:e9:8e:dd:f4:c6:f9:f4:83:6f:cd:
         34:f2:8e:3f:06:74:11:62:4d:6d:a0:a1:10:ea:20:50:16:66:
         78:41:09:dd:3d:3d:4e:e4:0d:b4:0e:45:d0:6a:ca:34:e6:a0:
         d2:a9:fb:05:83:dc:a0:1b:1c:34:df:31:4b:ad:a6:8c:89:61:
         f4:8d:03:e5:ea:ea:1e:be:1f:2c:5b:67:01:a1:d0:63:35:da:
         6d:de:90:f3:df:6b:1a:bd:85:98:b6:4c:68:a6:53:85:88:05:
         96:d7:52:20:96:6f:57:b3:6a:7b:6e:e1:0f:df:c1:86:9f:71:
         2f:64:f3:74:8d:46:1d:ac:20:ed:cb:22:95:ae:3d:79:de:9f:
         87:2e:43:4a:fe:1b:20:fd:0a:60:aa:f5:bf:cc:91:be:2b:1d:
         98:eb:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:15:05 2026 by rpki-client