Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fb3fc48-eeec-36e4-b8a6-a22c1b8de496.roa
File:                     2fb3fc48-eeec-36e4-b8a6-a22c1b8de496.roa (raw, json)
Hash identifier:          1QS5YeZLzUNmkeH89W2gDEfjHrOha/OUY5rvSOvQiYo=
Subject key identifier:   F0:90:A0:C4:5F:5C:5D:6C:3C:E0:F8:2C:07:F3:99:CE:C8:F2:DA:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9A7FCA20228C49F228051B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fb3fc48-eeec-36e4-b8a6-a22c1b8de496.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     3855
IP address blocks:        63.115.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ca:20:22:8c:49:f2:28:05:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=3eae61f6-0033-41f6-80bb-25b4c911f9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:22:62:a9:50:db:33:64:44:8d:e7:f6:95:
                    28:8b:d6:fa:a4:d6:d2:dc:6c:e0:7d:5e:0a:33:73:
                    4c:97:ba:68:a2:e8:41:72:33:2a:4d:67:83:b6:39:
                    d6:ee:1e:af:66:b1:75:31:0e:5a:e2:72:69:e7:bd:
                    39:c0:fc:2c:87:e4:a7:fa:63:69:f4:f9:19:e1:dd:
                    ad:51:b2:35:ab:1d:a3:8a:69:48:02:14:89:ea:70:
                    42:e8:68:79:0f:41:93:f2:04:a3:80:6c:5a:5f:42:
                    d3:07:a7:a7:35:1e:10:17:c6:d3:55:92:00:26:8d:
                    bb:5d:d0:fa:0c:88:a6:7a:9c:9f:54:bd:ab:19:df:
                    90:f2:0b:2d:47:3f:7c:ec:d9:7c:69:e3:6e:97:5a:
                    93:54:37:72:cf:a9:da:8e:71:94:bd:0f:e1:48:cc:
                    57:b5:ec:37:c2:99:99:8a:c8:74:2d:86:c3:db:92:
                    22:0c:4d:c2:24:31:f3:d5:71:f3:ae:5b:f8:93:6f:
                    0e:ec:cc:00:66:76:19:1f:e1:d2:2b:9b:cd:f0:b2:
                    83:4d:04:89:76:e7:24:a7:4e:78:1c:70:f2:f7:eb:
                    0b:52:21:25:95:65:10:d3:fb:b8:f6:e3:0a:be:07:
                    2e:66:7a:59:ec:aa:53:d1:9c:c6:39:ee:9b:42:0d:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:90:A0:C4:5F:5C:5D:6C:3C:E0:F8:2C:07:F3:99:CE:C8:F2:DA:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fb3fc48-eeec-36e4-b8a6-a22c1b8de496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.115.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:fc:4d:fd:cd:6c:b2:98:79:a4:64:9d:8f:52:db:0e:49:
         9d:9e:63:0f:c7:9a:84:ce:72:f5:a4:23:50:3b:23:08:92:71:
         e1:cf:cf:7f:14:6d:08:f9:97:71:24:33:99:b9:6a:f0:8e:98:
         c9:b9:9c:38:0b:7e:47:bc:19:60:45:ce:07:45:e3:22:07:34:
         42:c5:70:81:64:60:4b:a7:d3:70:36:60:f6:b6:4c:02:75:e0:
         d3:a8:b2:c3:06:54:da:89:03:75:ce:3a:c6:f8:3f:00:16:35:
         38:9d:4c:aa:f1:03:05:7e:83:8d:a0:07:cb:ca:5c:b0:dd:c5:
         98:10:1d:e1:c3:cb:27:83:29:16:11:24:15:60:ae:4c:84:47:
         30:b9:5a:7e:07:fe:97:66:61:bc:fe:21:9d:c0:f3:8f:aa:f0:
         ab:e8:90:a8:55:91:be:fc:57:fc:49:15:d9:a7:5e:40:82:05:
         35:7a:eb:c3:d6:fe:ab:9a:fa:49:89:0d:40:96:7c:a3:50:83:
         db:ae:74:29:2b:e2:8b:36:ae:e5:f9:d7:21:da:6d:7f:df:1f:
         3e:dc:18:57:69:14:48:85:f1:09:af:f2:00:a4:af:48:b6:59:
         5e:11:6d:11:cf:c6:79:b8:31:42:67:9a:ec:80:ff:d2:63:84:
         a3:fd:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:53 2026 by rpki-client