Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdf801be-9a8b-32b0-b466-af9c146be822.roa
File:                     cdf801be-9a8b-32b0-b466-af9c146be822.roa (raw, json)
Hash identifier:          suEHG9Cr5FSubUUw6pkmGVbsQuIFhe847xFsHmruUE4=
Subject key identifier:   DD:DE:D1:18:79:0A:4C:18:EF:71:29:1B:12:38:F6:6E:D4:D6:E4:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6515353472B2DAB68D7BB180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdf801be-9a8b-32b0-b466-af9c146be822.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     701
IP address blocks:        199.45.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:35:34:72:b2:da:b6:8d:7b:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=55c42180-c480-4493-92e3-3fb92f8ac2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:9f:7c:16:af:36:9d:87:3c:69:21:d7:59:
                    5f:20:38:3a:d8:84:dc:51:45:55:e2:0a:c7:57:fd:
                    de:42:19:fd:2b:a1:75:83:6f:33:dc:0c:c6:fe:a8:
                    34:00:25:27:5c:19:48:fd:26:fd:d8:2f:62:d8:91:
                    5a:5c:59:28:86:67:3f:b1:e8:9a:58:06:f0:93:6e:
                    41:a6:6e:4f:67:05:6b:63:54:01:fb:6b:a0:30:2c:
                    ab:e1:a1:56:c7:ee:e1:fa:25:96:55:84:e1:4d:be:
                    7e:c0:11:06:d4:ff:d8:88:cd:92:a3:90:0b:3a:c1:
                    ed:3c:d8:65:27:46:ca:df:a3:e7:90:97:39:47:cc:
                    c4:92:fd:c4:6b:eb:ff:fe:02:63:aa:46:4c:7e:58:
                    8e:3a:85:e4:34:da:22:da:e6:49:60:3d:8e:db:89:
                    70:16:9b:ea:55:57:cb:fb:b3:5e:a0:3f:d9:7e:09:
                    f4:5c:05:d6:e9:79:91:41:97:72:c9:69:00:94:0c:
                    13:f4:b9:ea:62:e5:bd:3b:88:e4:d9:86:91:81:01:
                    0b:94:aa:27:55:cd:4c:59:89:7c:8b:58:47:ec:40:
                    f7:59:29:f9:dd:74:6b:af:65:ff:0f:5c:85:9b:cf:
                    06:92:f7:27:ae:a6:14:13:4a:60:65:8e:06:90:a0:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DE:D1:18:79:0A:4C:18:EF:71:29:1B:12:38:F6:6E:D4:D6:E4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdf801be-9a8b-32b0-b466-af9c146be822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:47:63:df:04:c5:fd:d0:8d:eb:98:77:40:2d:5f:2a:dc:12:
         f1:0d:c3:2c:05:f0:97:49:01:76:81:6c:46:15:fb:8c:ae:2e:
         dd:9b:aa:8b:47:d1:67:0f:4c:d1:97:1d:c3:e6:a9:e6:fa:8c:
         97:5f:11:cd:c5:95:7c:3d:53:68:1d:ab:09:d1:3a:9a:09:64:
         54:d1:47:a5:ab:f0:4c:f9:a3:5e:63:a2:98:ae:e9:05:75:25:
         bb:05:0e:1b:8d:48:b7:6b:84:62:71:28:79:ae:e3:ba:c4:17:
         b3:38:89:93:f3:1d:3a:8d:7b:d7:60:1f:af:bb:73:56:58:27:
         88:bd:5d:ca:24:97:aa:dd:af:19:24:a2:5c:1d:f3:89:30:3d:
         dc:4b:80:e9:d8:05:56:90:c5:d3:4e:10:7e:22:30:bc:e1:1c:
         4f:72:be:a7:91:f4:b5:52:65:38:24:29:ad:33:78:68:d2:db:
         31:71:f6:3e:20:e4:45:91:d8:5a:24:12:18:4c:8b:e4:d3:86:
         9c:ca:c6:a9:c8:2c:53:63:c8:4b:0d:f8:d6:e4:b6:bd:8d:5a:
         ec:c0:6d:b1:32:45:71:1f:e5:75:3f:ea:0d:f8:98:e6:03:b7:
         39:42:79:a2:86:8e:9f:15:04:37:92:dd:5a:6b:2b:7a:c4:12:
         06:e4:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:46 2026 by rpki-client