Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/883d27a9-8eae-347c-a7da-032f9d133dcc.roa
File:                     883d27a9-8eae-347c-a7da-032f9d133dcc.roa (raw, json)
Hash identifier:          T3dFlOYaIZO5XIGJsb3eAjJgUTb0LRmT/rlKq7f+M/k=
Subject key identifier:   6B:84:D6:D3:3F:8D:55:FE:0F:D9:75:6F:1D:1D:7B:30:E3:15:E2:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA786F80BAD0D51553FC80920
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/883d27a9-8eae-347c-a7da-032f9d133dcc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11145
IP address blocks:        198.226.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:f8:0b:ad:0d:51:55:3f:c8:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=95d0ea8b-26ba-4269-9f27-2422c5fe6ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:45:6a:fe:15:81:84:54:31:3f:32:da:b4:
                    03:90:04:73:d5:1d:9a:d3:02:41:43:f1:53:b5:a6:
                    fa:29:69:d0:6b:56:bc:9f:a5:40:41:df:ec:38:e9:
                    b2:c3:d2:d4:2b:64:70:12:fd:97:6e:4d:ec:03:a5:
                    af:08:92:d0:59:bd:e6:76:a8:21:9b:a8:a1:84:22:
                    3a:f0:14:5a:f7:1b:82:bc:58:b5:83:98:53:6b:3a:
                    12:c4:95:7b:09:a2:bc:03:5f:b6:0f:c6:38:a9:f4:
                    2c:64:26:0c:2c:c6:9e:e0:b6:f7:39:8b:10:c6:ac:
                    ba:0d:4f:f7:66:1d:9a:18:a8:05:30:5b:f3:eb:57:
                    af:f6:aa:12:94:72:9f:cb:87:c0:ac:80:b3:ae:9b:
                    b3:ef:8e:6e:40:c1:24:8c:39:8e:ae:35:d9:e9:c9:
                    84:ac:21:21:67:9a:2e:2d:95:9f:a3:1b:c4:c7:1d:
                    aa:96:e2:5e:21:35:9c:67:41:f4:b3:c7:50:db:28:
                    ca:c9:5d:95:1e:6d:14:35:e1:a5:1c:84:6f:fa:d3:
                    f2:1d:60:24:5c:0c:20:5b:2e:eb:66:38:00:5e:52:
                    1c:fc:31:f9:92:08:6a:1c:1a:27:24:59:39:1b:33:
                    b3:91:d1:ca:02:c0:59:41:c2:41:f4:b3:12:41:68:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:84:D6:D3:3F:8D:55:FE:0F:D9:75:6F:1D:1D:7B:30:E3:15:E2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/883d27a9-8eae-347c-a7da-032f9d133dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.226.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:08:40:34:4c:86:0f:5d:1b:34:f9:1e:d7:d3:a6:fb:57:
         ca:d9:36:2f:8a:a7:c1:37:a2:80:8c:2e:3b:5f:c3:46:23:6b:
         4e:06:7f:dc:a9:5a:0b:73:3c:8f:ac:12:f5:41:74:54:fe:c2:
         15:b2:50:2e:47:32:82:fa:b9:08:dc:96:24:a6:d5:1e:5c:e3:
         fa:6f:b3:04:e6:4d:82:24:77:4b:fa:e8:5d:ee:06:e3:1a:41:
         3e:82:b4:45:f1:27:ef:9f:d5:7a:5a:d1:bf:c2:45:6a:9e:90:
         6c:60:5a:d4:c9:31:f3:bb:5c:09:70:c9:1a:a8:50:e3:de:78:
         ca:06:ea:96:31:69:29:b2:13:fd:b1:ea:71:24:f6:27:ba:93:
         2a:59:14:29:7c:6a:c0:3a:2c:4d:4a:20:c8:b8:cf:9b:ac:24:
         3c:57:2e:4c:f7:57:75:10:b3:5e:51:1b:b5:e6:30:5e:2b:ee:
         a4:48:00:a1:3f:e6:39:83:13:34:d1:0f:05:6c:7c:7d:18:14:
         c7:48:3f:a4:00:fe:6d:66:7c:79:4d:ed:37:b2:85:59:7e:c9:
         f8:97:cb:db:25:20:fb:ee:85:c7:8b:8b:2d:89:0a:74:e3:b9:
         cb:4b:b0:0e:57:a1:a9:97:50:75:2a:4d:1b:83:bf:fc:eb:25:
         41:70:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:47 2026 by rpki-client