Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/892b925f-b0b6-3929-968e-e26b0385d673.roa
File:                     892b925f-b0b6-3929-968e-e26b0385d673.roa (raw, json)
Hash identifier:          iKg0pjBEx39CM1xh4NFVjZL6nYbVj/GxPEyRnkciB28=
Subject key identifier:   28:2C:F9:7A:1E:F2:94:CA:60:3F:EC:01:8B:E7:25:58:19:F8:47:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6C0FBF2AA4B36245B467F740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/892b925f-b0b6-3929-968e-e26b0385d673.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     701
IP address blocks:        96.232.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:bf:2a:a4:b3:62:45:b4:67:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=802e2378-c340-4a15-9db9-6b47b71e755e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:07:5d:33:b9:76:0a:d2:aa:61:b9:bf:d7:
                    98:2f:8c:3f:f8:e4:85:64:a8:e0:68:ab:71:9b:a6:
                    88:5b:7e:1b:02:00:9a:e2:86:d0:4f:40:a3:b2:f7:
                    3a:23:52:83:45:93:3a:8b:68:bf:7f:7d:49:4f:a7:
                    18:5d:45:3c:59:fa:53:8d:40:95:4b:ea:26:96:b8:
                    06:77:57:fd:09:7a:59:df:fb:32:1f:4b:2e:7b:2b:
                    37:47:45:39:69:c0:8b:44:ad:49:17:d4:f4:1b:1b:
                    58:8c:0a:bd:a7:12:3b:7c:f6:7a:9b:93:cc:3b:f9:
                    5a:27:68:ba:0e:90:de:d4:03:9d:df:3f:90:c4:a4:
                    22:87:08:be:6c:c8:df:33:56:62:65:70:fd:3a:1b:
                    16:61:c5:bc:0e:d7:ed:e0:d8:68:c7:28:a7:28:66:
                    cb:04:e7:80:26:07:63:d4:86:84:74:40:f6:39:bb:
                    16:12:53:44:c5:70:80:92:f9:4d:02:f4:0d:26:d3:
                    71:26:f3:5c:55:59:43:38:38:42:ae:ca:9b:eb:aa:
                    28:ed:4d:84:63:2e:0f:c4:53:e6:9d:fb:90:25:44:
                    66:2e:a9:a8:96:fa:80:30:49:ae:84:e8:7e:77:a3:
                    e7:58:18:c5:6c:da:1b:4a:42:54:3f:8d:10:38:27:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2C:F9:7A:1E:F2:94:CA:60:3F:EC:01:8B:E7:25:58:19:F8:47:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/892b925f-b0b6-3929-968e-e26b0385d673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:f0:a3:41:f8:e7:00:b0:86:b4:54:2b:1a:d0:d6:17:ba:
         d5:07:f4:09:06:8b:95:d7:cc:9d:82:a3:2d:99:a5:19:07:23:
         1d:5b:43:9c:52:29:d2:44:bb:6c:78:63:a7:43:87:51:07:01:
         b7:29:83:39:e1:68:9b:d8:b0:3e:bb:a3:c0:37:f6:4f:20:81:
         2f:b7:ec:47:68:5b:4e:19:61:22:f5:b7:17:51:48:cf:af:b0:
         87:ae:9a:04:2f:9e:b1:7d:66:d7:c0:d5:11:95:63:58:b1:8a:
         8e:46:41:b2:78:a6:d0:aa:7c:e8:f2:1c:20:46:2f:9b:3d:1b:
         4c:e2:35:2f:d0:d1:0b:fa:f8:4c:56:ad:31:eb:29:38:46:50:
         b7:01:7c:9c:ae:42:76:65:40:c4:3d:aa:12:f7:80:f8:b3:0f:
         81:ef:71:c5:e6:3a:14:61:9c:b4:79:56:48:28:72:02:f4:29:
         9f:98:38:ea:81:c7:0d:82:c3:b9:a8:f5:87:f9:57:20:1f:45:
         40:ce:59:d5:c4:67:29:5f:ad:13:6e:50:22:3a:03:4e:cc:9b:
         07:d0:30:31:0b:d6:be:4e:cb:21:ec:f6:33:6a:bc:31:a6:94:
         b7:38:7e:af:a3:d5:fb:82:5d:89:c6:ad:23:ee:18:7d:f0:f9:
         bf:05:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:21 2026 by rpki-client