Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/73d252ea-14b2-39d0-bf0f-0733665369b3.roa
File:                     73d252ea-14b2-39d0-bf0f-0733665369b3.roa (raw, json)
Hash identifier:          mIlLWFSaSkYypzo4elaGNBg0zKNNAYxbLbC8mpTDCyU=
Subject key identifier:   5D:71:EE:CC:D8:91:ED:93:B0:37:D9:B5:CD:54:30:07:21:1D:DF:02
Certificate issuer:       /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012
Certificate serial:       010D0C9F4328584D67DFF83D4B39EB86B3176380
Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/73d252ea-14b2-39d0-bf0f-0733665369b3.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     397477
IP address blocks:        172.98.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f8:3d:4b:39:eb:86:b3:17:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=0bade57b-87f3-4db1-94f5-d3a278f3880d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:41:12:3b:72:2d:18:57:a8:d6:2b:a0:e8:
                    d5:5d:a5:84:09:c4:95:68:81:2e:96:8b:ae:1f:88:
                    7e:1e:b8:c4:c0:95:80:c4:1a:26:3b:d7:dc:69:38:
                    8b:a1:b3:ea:0e:2c:20:b0:ad:25:94:7b:d3:55:f8:
                    9f:cc:52:78:86:80:a4:f8:3d:96:d6:73:00:07:f2:
                    0e:14:85:3c:7a:4e:b4:0f:5f:d3:c6:92:ca:82:d2:
                    2f:28:4d:81:93:01:87:db:dd:8f:15:34:48:08:43:
                    01:18:96:b1:e1:0c:3e:84:87:95:ae:97:ac:6d:9c:
                    c4:6b:13:f1:ed:cc:58:36:c1:86:1b:a8:6e:df:7b:
                    c8:b6:c5:89:83:e3:6e:d0:23:a1:ed:79:40:5c:5c:
                    e0:7c:5f:b8:c9:d6:4c:07:c2:96:48:30:ac:f6:08:
                    d5:cf:d0:88:54:fb:22:a9:d9:c3:31:35:9b:7c:4b:
                    78:69:42:e6:2b:90:f5:43:fd:9b:55:11:0b:a2:ac:
                    33:5c:38:19:ec:b1:0e:66:e3:c9:cc:5d:26:57:6f:
                    11:26:f4:29:69:07:0e:b3:eb:1f:2f:dd:ff:bb:4a:
                    a3:37:9d:25:aa:ad:9a:59:ae:b1:53:bd:fb:47:2d:
                    51:b3:58:fc:fa:46:3d:8f:3f:14:cc:3e:8b:9e:58:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:71:EE:CC:D8:91:ED:93:B0:37:D9:B5:CD:54:30:07:21:1D:DF:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/73d252ea-14b2-39d0-bf0f-0733665369b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl

            X509v3 Authority Key Identifier:
                keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:e2:06:32:94:f6:ef:1d:d5:db:70:d5:d6:07:91:f2:a2:
         90:6d:3c:db:dd:35:66:5c:d6:3f:dc:3f:ed:c3:ad:96:c1:de:
         73:1e:e8:4b:40:cf:90:6a:97:fe:f9:3d:eb:93:d1:25:2f:cb:
         7a:bb:d6:72:5d:4d:55:03:4c:96:50:a9:cc:71:0a:03:7e:f7:
         90:17:a3:a4:52:0a:2b:e3:f2:90:8c:e2:b5:33:83:ec:f3:ef:
         41:5d:7e:ad:5e:7b:07:48:da:63:4f:6a:1b:d5:76:05:89:61:
         76:59:66:c9:15:10:1e:dc:ea:39:b2:48:dc:ce:bf:95:6f:6c:
         f8:a5:f1:32:8f:be:8b:62:85:76:78:98:df:1a:86:dc:10:64:
         fd:f9:05:fb:87:08:b7:8a:40:9d:51:58:99:2e:03:9f:71:a2:
         3a:c7:01:1c:64:77:f5:5b:b1:19:30:d7:ab:f3:b6:11:f3:51:
         0f:6e:37:ce:42:e8:be:f0:26:30:d2:f7:66:f4:24:75:43:f4:
         77:e1:f5:37:8b:52:2b:5a:43:5b:53:ca:1f:9c:30:03:6f:f2:
         3a:41:22:12:8f:bc:7f:ea:fa:bf:e6:e8:e2:fb:38:7e:b5:53:
         f1:f2:c3:70:36:8c:6c:3b:36:ba:cd:9b:41:ee:db:50:c5:76:
         af:b0:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 05:52:18 2026 by rpki-client