Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/998bf502-983b-3c26-b839-dfe497458365.roa
File:                     998bf502-983b-3c26-b839-dfe497458365.roa (raw, json)
Hash identifier:          5Y1nwnqwAfDjOM36yDW770X0fEHZ49Pf2ZmK0diQDqs=
Subject key identifier:   2D:00:2C:92:8A:52:97:BC:49:F3:9C:D0:93:CD:10:FF:90:E0:EF:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A7B32E03587A59BA5A180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/998bf502-983b-3c26-b839-dfe497458365.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        141.153.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:7b:32:e0:35:87:a5:9b:a5:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=5b3eb127-6e83-451b-b337-f89becfe1b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:0a:2a:01:51:bf:5f:a7:cb:98:dd:ce:0d:
                    b0:e5:39:cf:66:8d:03:04:ae:9f:8d:8d:74:4e:22:
                    66:3c:06:82:c2:52:06:53:03:55:4d:55:19:71:88:
                    17:29:e8:ff:d4:b1:7f:24:d6:89:5b:b2:bf:0c:79:
                    14:96:2a:61:93:47:86:4a:9f:cf:9b:6e:ce:45:ab:
                    8f:94:1f:d7:8c:09:67:83:58:86:ac:4c:76:83:f3:
                    99:e6:e1:19:63:02:4d:ca:82:97:21:1c:8d:58:52:
                    d4:dd:03:65:fa:16:ab:fd:a3:3c:da:48:88:6b:01:
                    05:f7:fe:e2:30:3f:5e:68:f0:05:4e:3a:6c:8f:19:
                    94:36:42:f0:de:76:0d:d9:33:2a:84:bb:03:b0:88:
                    48:cb:9d:1d:70:19:a6:0b:77:10:ed:bf:3c:09:f2:
                    31:a6:f9:05:2b:51:e8:ce:db:1b:25:cc:d0:a0:25:
                    48:bd:b0:73:cd:b8:52:c5:71:e5:f3:c2:91:e3:9b:
                    51:ad:81:9f:e9:eb:41:d8:a2:fd:41:e6:60:76:3d:
                    bf:72:ed:d9:97:74:11:70:3d:78:dc:13:0e:ab:de:
                    41:8f:ec:7b:0c:00:25:c7:4d:9f:c6:97:14:2e:05:
                    99:27:44:b2:db:41:11:aa:ca:ef:18:c3:9a:f9:b5:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:2C:92:8A:52:97:BC:49:F3:9C:D0:93:CD:10:FF:90:E0:EF:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/998bf502-983b-3c26-b839-dfe497458365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.153.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:10:61:f1:0d:f3:f6:b8:bc:69:5b:7a:83:22:13:f9:76:b8:
         1f:2b:1e:12:25:8a:1f:85:c5:e3:93:83:5d:e8:13:45:63:5b:
         af:20:82:84:4a:44:e3:9a:97:1a:84:33:ef:4f:46:a7:2b:96:
         8f:b8:38:f1:63:bc:cc:7c:8b:ea:b8:2d:91:26:0a:07:9a:86:
         7c:6f:ef:96:a9:6a:89:ab:72:da:b5:c3:9f:c7:96:4a:8d:99:
         2e:5e:d3:57:25:6a:53:47:97:71:50:ff:79:ea:cf:a9:70:f3:
         2a:cd:a0:78:2a:21:6a:52:3d:1e:ac:1b:1d:14:61:c4:3f:40:
         a6:36:9d:0c:33:05:4e:82:11:27:a6:79:43:dd:f8:13:26:1d:
         84:1b:7b:6d:64:02:12:8a:4f:bd:a4:d2:82:29:ff:c4:c1:19:
         8f:1f:52:6a:ce:4c:23:41:09:fd:7b:c7:19:ee:e1:6f:0d:03:
         ac:cb:35:3d:0b:66:ad:c6:af:d1:89:4f:0d:c1:63:79:8a:a5:
         79:b4:ae:87:8d:38:9f:7a:e0:5b:bc:ab:7c:cd:c1:73:61:ae:
         d7:99:57:01:31:c9:7b:77:15:48:f7:4f:91:d3:cb:82:f8:83:
         91:1c:b2:b4:b1:b8:01:82:93:6b:b6:d6:1e:10:8b:68:fe:c3:
         d2:4d:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:11 2026 by rpki-client