Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/4e72a060-d627-36ec-89a5-e2019e424f01.roa
File:                     4e72a060-d627-36ec-89a5-e2019e424f01.roa (raw, json)
Hash identifier:          pHsTa0DS7KVooDvH9yvCt/ofXD8pw7arwGq3fRZpeBg=
Subject key identifier:   30:A5:6D:5C:2C:30:FB:8F:FB:55:50:1C:D0:72:29:E4:2C:24:0B:37
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584F5A32A3A5BE8E7C807EC7B6C0
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/4e72a060-d627-36ec-89a5-e2019e424f01.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     397373
IP address blocks:        167.100.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:a3:a5:be:8e:7c:80:7e:c7:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=256d78d7-e577-4930-bccd-421e08a10858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:7e:8b:cd:88:95:21:df:d8:04:a4:2c:70:
                    fd:73:79:10:4a:ce:63:f3:78:f6:ac:51:d9:fb:b2:
                    5f:4a:12:7b:be:76:ff:9b:c9:07:6f:da:1d:ee:17:
                    bb:3a:de:aa:8d:4b:8d:26:9b:ca:fb:85:a1:fe:10:
                    40:5e:db:ed:e6:27:79:5f:fc:e7:f1:8b:4c:26:cf:
                    2d:f9:9e:bf:0f:fe:3d:2c:ee:d8:8e:78:54:a6:67:
                    55:e7:2b:41:5f:9b:c5:40:1f:19:98:37:14:56:a5:
                    15:7b:35:d6:91:78:89:55:d4:0b:3b:55:ed:4e:32:
                    1e:6c:02:7f:b8:8d:49:e2:e9:0a:94:36:af:56:14:
                    60:e8:72:27:94:2a:1e:ce:f4:3f:68:62:88:8a:f0:
                    bc:d1:7b:99:e5:69:42:00:b4:07:9d:15:7d:a4:47:
                    c1:07:db:32:07:74:5f:7a:66:13:25:e4:38:30:0c:
                    b3:47:23:d0:f9:27:93:bb:93:7f:80:9f:f0:5d:ec:
                    1f:f1:bc:93:ef:dd:9d:96:8c:2a:50:f0:74:a5:e2:
                    82:c5:9a:f1:d1:38:3a:18:41:17:17:01:97:d8:d6:
                    cc:dc:a1:88:2e:d1:c1:51:31:22:4c:5b:3a:12:1d:
                    c5:f8:72:90:39:16:21:7a:c3:0b:52:0f:89:77:1d:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:6D:5C:2C:30:FB:8F:FB:55:50:1C:D0:72:29:E4:2C:24:0B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/4e72a060-d627-36ec-89a5-e2019e424f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.100.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:01:91:39:27:0d:92:c4:9f:bc:50:84:29:6f:a9:fe:54:86:
         37:44:63:da:1e:f6:fd:f3:21:b0:5e:ba:98:8f:d4:74:f4:3e:
         b6:1c:6b:76:9a:e8:51:31:1c:93:13:bf:d3:28:3e:74:95:fd:
         07:72:ea:29:5f:95:81:ae:9e:26:3d:30:46:c3:1e:99:45:99:
         b5:44:af:13:b7:e2:66:16:4e:bb:6f:87:f2:17:83:22:5a:68:
         c2:ac:e6:e3:7e:6a:ff:ef:9e:57:72:b6:0b:21:08:25:2f:d1:
         a6:84:1e:1c:4a:f1:eb:26:37:2f:1e:95:29:35:20:c3:f5:02:
         2e:e6:ca:36:6d:95:21:1d:c8:6c:5d:96:59:29:4d:4d:e5:96:
         1c:12:a5:01:e8:12:fb:e4:c8:f0:b6:5d:da:b8:93:1d:5a:f0:
         7d:00:e6:e1:07:8e:e8:7c:7c:38:de:f4:59:88:8a:d2:e0:67:
         04:2d:e5:fd:c7:41:45:cf:bf:0b:e9:c5:60:0c:26:b9:92:f3:
         a3:bb:6e:2f:26:5c:ab:f3:0f:27:bb:d4:e4:cd:f3:a6:dd:7f:
         b3:3c:e3:6f:f1:fa:c2:70:77:89:01:d2:e4:1e:89:ac:67:5b:
         fd:63:20:aa:05:ff:7d:c1:37:ad:bc:ec:b4:f4:03:27:1d:8e:
         2b:ac:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:05:52 2026 by rpki-client