Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e345a5a-ecec-38e3-aafe-85ec2f84c1ad.roa
File:                     5e345a5a-ecec-38e3-aafe-85ec2f84c1ad.roa (raw, json)
Hash identifier:          +K8IZPwpD5eN+zL/d1cIl6NYuBKvea9S8WsrH2kYFYo=
Subject key identifier:   3F:10:8D:EF:05:71:11:7A:1A:2F:CF:D7:72:4B:8B:A8:D7:A7:DF:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD6DDB431107A8552D6180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e345a5a-ecec-38e3-aafe-85ec2f84c1ad.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     701
IP address blocks:        151.198.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:6d:db:43:11:07:a8:55:2d:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=bd431b69-babf-4136-a199-3cd63d98dcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:bb:ce:fc:c2:8e:b0:40:71:25:f3:38:19:
                    06:f1:fa:42:d6:f2:cb:37:9e:a0:e3:00:78:2a:46:
                    16:74:9c:d9:74:fa:21:46:57:12:eb:ec:56:fb:57:
                    0d:39:99:61:a8:91:5d:bd:cd:6a:ae:96:e6:93:eb:
                    b7:fb:e5:97:26:be:cb:7f:50:4f:10:39:db:b3:25:
                    9b:9d:3e:94:d3:1c:0b:7e:a6:a3:2c:fe:d4:30:b0:
                    e7:83:22:f1:ad:c9:d1:87:e3:e8:10:24:81:54:2d:
                    ca:41:66:a9:b8:6e:d7:fa:fa:ca:0d:3a:d2:3d:38:
                    8d:9f:db:31:e5:04:99:46:b3:96:8f:48:eb:db:2e:
                    de:65:1b:8a:3c:fc:f9:11:db:1b:d0:e7:bb:ff:48:
                    95:63:32:ba:3e:c9:38:04:6e:fe:ca:c3:07:a0:99:
                    30:8f:a5:c1:53:c1:7e:81:84:f9:75:7c:a4:ca:5a:
                    17:cf:7b:9a:ce:b7:87:b1:65:24:3a:a0:a7:49:b6:
                    fa:9c:83:7a:67:fb:4b:3a:25:99:2d:16:21:6e:0d:
                    01:a2:52:c5:9f:f6:7a:a5:b1:7b:e2:17:80:61:af:
                    a7:c6:cc:12:ad:24:de:1c:e3:bc:dd:78:9c:3f:81:
                    b7:f0:9a:39:5e:1b:cb:16:52:c5:0f:64:09:d3:df:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:8D:EF:05:71:11:7A:1A:2F:CF:D7:72:4B:8B:A8:D7:A7:DF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e345a5a-ecec-38e3-aafe-85ec2f84c1ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:19:3f:69:d7:d6:9b:c2:92:df:50:42:da:36:d3:d3:37:
         d2:2c:a4:46:8c:ba:53:5e:5b:84:e0:01:1c:71:89:5b:55:57:
         f1:00:bf:2a:a1:df:c2:5d:a2:df:ef:e2:7a:a4:5c:60:4e:57:
         22:20:a5:23:c6:0e:05:d9:0d:2d:ec:12:f7:7d:87:b2:29:5f:
         b8:7d:ee:e2:c8:1b:0e:27:e1:e0:bc:e8:1d:8f:76:e5:d3:2a:
         48:d8:3c:4b:b3:de:b3:6b:b7:10:62:aa:ff:0d:11:89:e7:3c:
         30:87:b8:c0:51:81:36:90:f4:8f:9a:11:4b:94:27:4a:6b:e3:
         a4:7e:42:e6:63:29:33:be:98:ce:f8:64:6b:9a:06:73:3f:34:
         57:34:4a:d9:a0:ac:dc:02:ff:df:46:ca:b2:50:ef:8f:3a:a4:
         26:ba:f2:48:0b:0b:58:f2:40:e7:2f:4f:49:15:f1:15:c8:c4:
         f7:9f:b3:de:50:a7:81:c3:84:2d:53:e9:0f:93:76:f7:a0:31:
         96:10:fd:d9:11:94:30:e2:ad:89:d9:78:4d:21:54:93:5c:21:
         ef:dd:71:8d:5b:7c:ba:9b:47:6f:3a:0c:e4:9b:cd:66:ed:ff:
         78:80:23:1a:c1:98:18:67:76:07:cf:b7:19:c2:90:b9:4e:ec:
         ab:bd:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:19:09 2026 by rpki-client