Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa
File:                     3acf301c-9ec5-387a-aab4-0c7bec71a379.roa (raw, json)
Hash identifier:          wIIkASwaWHPZ0hqXysm2uRm3PNXyj3gVUW41bGQqqKs=
Subject key identifier:   CE:F1:E4:01:88:24:4E:A4:AB:1B:D4:69:C5:DA:D0:E2:5C:3D:66:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A9A51135BCFB788E3A880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        192.48.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:9a:51:13:5b:cf:b7:88:e3:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=18e280c1-dc87-47e3-91c2-6ac865d0c68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:d3:5a:09:38:b3:15:8c:9c:ce:db:2d:cc:
                    a5:88:eb:d2:32:38:e6:8f:71:33:1b:87:31:18:fc:
                    42:46:02:f1:30:9c:74:3a:06:28:ef:49:00:3b:5d:
                    99:77:f4:0f:73:19:c3:40:1f:5a:16:17:c1:ce:35:
                    2a:0d:47:96:d3:3a:6a:47:89:41:38:f7:bb:b1:35:
                    b4:ba:17:3b:c5:ea:e1:c2:42:d2:a8:bd:05:48:18:
                    dc:dd:ba:c7:0b:7d:78:38:0a:89:83:47:40:65:4b:
                    21:f5:56:6f:76:fe:a3:66:2e:cf:15:52:8e:f5:83:
                    0c:7c:b4:fa:f9:31:e0:47:7d:b1:71:62:ca:cc:56:
                    40:53:70:86:80:59:8b:df:d4:53:4d:0f:9c:d5:20:
                    0f:5c:6a:ec:49:d8:44:71:fa:d2:2c:cb:b5:26:09:
                    c6:d4:cf:8f:ab:81:7a:bf:c0:b3:45:e3:9e:d6:56:
                    18:91:ac:ba:71:e0:e6:43:7f:39:9b:b5:e7:90:b2:
                    65:d7:70:95:f8:be:fa:31:51:61:90:a4:47:4a:ef:
                    e2:96:f5:d9:43:17:26:c9:d8:75:a1:15:35:d3:de:
                    bb:4c:f1:92:57:d4:57:50:27:3d:ae:79:12:0f:d0:
                    27:72:aa:a8:38:31:14:8f:4c:5b:d5:a2:4b:af:e4:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F1:E4:01:88:24:4E:A4:AB:1B:D4:69:C5:DA:D0:E2:5C:3D:66:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d4:c0:40:61:8f:fc:38:2f:4e:28:35:57:29:65:1b:25:d0:
         6b:87:de:eb:32:59:08:4b:6f:8a:10:40:a5:1d:19:23:10:70:
         e7:75:06:93:5c:e3:36:03:0d:02:aa:a0:8b:d5:16:e7:8b:87:
         0b:1f:4d:43:47:74:3b:90:e6:3d:a9:f4:3a:d8:df:14:e9:0d:
         8f:da:a6:7d:3f:cc:07:ef:21:92:f0:3a:2e:ff:13:47:7c:68:
         ad:87:06:70:a0:34:bc:a6:39:9f:be:fc:26:ce:b7:c1:18:92:
         69:7c:30:c7:27:03:b9:f3:91:ce:a5:69:a4:45:46:06:66:17:
         43:37:72:92:d7:04:84:23:3a:e4:32:bb:00:cc:a9:99:be:f3:
         12:01:6e:70:4d:ad:f7:6d:97:e7:4d:d0:f4:0a:f8:2c:50:f8:
         10:3a:11:04:3e:12:0a:b0:4f:76:26:d9:38:a0:c9:aa:bf:00:
         37:42:ae:13:44:c1:52:35:69:d8:34:a7:cc:0f:df:53:5e:88:
         55:2a:e4:61:44:03:b8:bf:3a:33:0e:17:37:fd:f7:91:ad:69:
         dc:fe:ff:39:3d:e1:46:c2:5d:40:7c:cf:f8:aa:47:af:44:61:
         af:b3:fd:a8:7a:f8:c0:6a:eb:63:af:0d:8a:b9:b6:03:b1:79:
         d4:9b:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:47:33 2026 by rpki-client