Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa
File:                     3838a5d3-147b-300b-82be-16f0366fc707.roa (raw, json)
Hash identifier:          rcYRx/duxmWFWw7nQ9rCHXwyBHhhWY43NmF0kHUUBnQ=
Subject key identifier:   ED:2D:DB:BF:CA:16:1E:E9:05:10:C0:E5:0E:56:B2:ED:F0:7C:03:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F15CD05CA0D4A62B7DE4D3C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     3855
IP address blocks:        199.172.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:05:ca:0d:4a:62:b7:de:4d:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=3d55df92-931e-44fc-9bf7-98f3cc8acdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:dc:4e:cb:97:ed:13:58:b9:a7:18:52:af:
                    28:e7:d1:50:8e:cd:d6:5a:2f:eb:87:fd:49:91:9d:
                    68:4d:0b:46:ab:8a:47:7e:6e:3b:d3:9a:58:78:d4:
                    27:87:0b:46:49:e7:59:13:33:a4:7e:ba:c1:4b:ef:
                    3e:62:2c:8b:ef:30:ee:5c:d5:22:fe:88:f8:f1:9b:
                    45:9c:b7:d7:3f:3d:15:03:39:9a:a1:36:bb:d9:c7:
                    b4:46:94:95:79:d9:c7:50:8a:b7:50:90:fd:88:41:
                    f2:a4:8f:02:5a:f2:81:77:4d:ff:71:8e:c7:2f:4d:
                    80:18:9e:25:45:3e:fd:d3:6d:b0:40:bb:4e:e6:13:
                    41:5f:4c:60:5d:49:11:27:76:14:e7:ef:dc:c7:a6:
                    e2:87:40:35:20:72:4c:10:61:06:3e:e4:00:72:ba:
                    bf:3c:ba:14:2a:e6:cf:fd:37:8d:3b:81:79:37:d5:
                    cd:29:15:f3:61:1b:65:d3:06:02:45:9c:18:fa:a3:
                    80:d8:b2:3b:63:6a:be:f6:2d:23:18:44:ce:9c:36:
                    59:de:e5:9a:8c:49:04:27:53:c7:62:bb:99:45:14:
                    49:1a:7b:4a:a7:ca:ed:d5:aa:3b:9f:89:f8:0a:e0:
                    1d:0a:2d:a8:04:10:5e:52:41:e9:67:9b:39:13:91:
                    d2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:DB:BF:CA:16:1E:E9:05:10:C0:E5:0E:56:B2:ED:F0:7C:03:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3838a5d3-147b-300b-82be-16f0366fc707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:19:48:cb:33:d1:38:2c:55:38:56:3d:d8:0d:9b:6a:10:4f:
         c1:16:d7:3f:8e:f4:31:67:9d:e4:f8:8c:4a:05:5c:0f:70:32:
         6c:59:4e:ab:c4:73:b1:0d:7c:e3:72:74:b8:0d:6c:ef:1b:7b:
         7a:52:86:32:29:44:dd:9e:04:16:fa:a7:71:ee:57:82:0f:90:
         a4:01:aa:15:20:37:94:ef:a4:c5:34:17:a5:d3:1d:a8:bf:23:
         54:f0:25:14:aa:21:d1:f6:05:74:d3:3d:31:f3:f4:31:37:22:
         f3:7a:17:80:29:12:07:f0:27:b5:d4:f1:c7:f2:65:dd:51:51:
         7f:34:aa:1d:7e:c0:b7:cd:45:3b:40:45:94:b0:ff:58:50:a2:
         68:09:15:9a:6b:47:a7:19:e9:a5:20:70:e1:46:53:3d:19:eb:
         2e:19:0f:ae:51:b7:63:7b:88:01:78:c4:9c:5c:35:1a:d7:ca:
         33:56:04:a5:cb:78:52:fe:d1:7b:21:5c:7e:79:fd:4c:9e:ea:
         8c:31:dc:66:02:e7:4e:3f:1b:fb:a1:f8:a0:ba:b7:a1:1d:d1:
         33:7d:32:45:de:fd:85:b7:cb:02:34:fb:01:01:dc:17:d4:34:
         e9:1e:f9:fe:99:28:4c:60:af:ce:89:1a:1e:0a:cb:45:3b:5c:
         33:e6:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:07:22 2026 by rpki-client