Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa
File:                     603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa (raw, json)
Hash identifier:          YbMJiGMXiYmkQgu3lO9LpkpZD0QrUuZ8fOSkmL8x1+k=
Subject key identifier:   E4:16:B7:A8:49:32:5F:10:75:2B:DC:83:E9:56:3F:83:77:BD:2F:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8F3DBAF128303D122A07B400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     12222
IP address blocks:        72.246.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:ba:f1:28:30:3d:12:2a:07:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=8465c893-8305-4e36-8e6f-04e3d672b49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:d7:03:61:59:32:2f:f8:dc:97:bc:c8:1f:
                    9c:90:7b:9b:ef:67:37:de:cf:12:da:f8:ce:c6:ca:
                    77:d9:b4:50:76:5f:95:9e:80:67:d8:90:a1:7e:34:
                    71:04:ec:da:a7:00:a0:08:5e:91:2f:55:74:b1:54:
                    27:c7:1e:27:1d:92:35:b5:05:30:df:bb:8c:98:ee:
                    d7:cd:d7:8a:51:5f:c1:78:b3:98:47:ef:71:78:3f:
                    82:9d:00:c5:b2:f3:c5:0c:e3:09:44:81:80:27:c0:
                    71:80:a5:7c:a6:39:0b:1d:68:f9:b9:ad:ff:fb:db:
                    41:aa:96:0d:2e:d7:8a:5b:86:1a:85:d0:ea:8c:10:
                    44:e4:0f:14:d5:46:78:20:21:7d:14:f8:9d:d6:ed:
                    18:ad:58:9c:49:2d:77:bc:c7:46:8a:53:fd:21:e2:
                    af:4d:42:20:af:a1:1e:ad:78:c3:01:4f:89:ae:7a:
                    2a:7f:22:23:cd:e5:e2:70:23:54:fc:af:fc:22:ce:
                    d0:ff:ac:77:5c:63:69:06:09:3e:61:46:69:f4:43:
                    f2:7b:81:4a:35:97:15:bf:06:a3:c9:98:93:be:2f:
                    df:1b:29:74:63:62:13:d2:46:b0:52:a5:ea:e7:30:
                    86:d7:7b:cb:a3:2d:42:a0:e9:4c:6b:6d:fc:3c:6f:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:16:B7:A8:49:32:5F:10:75:2B:DC:83:E9:56:3F:83:77:BD:2F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/603e6bb2-52b7-31a0-acb7-fd8ecd5d2a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:54:42:4d:cc:fb:24:b8:ae:ec:1f:3d:69:8e:2e:49:0f:e6:
         3e:63:bf:67:7b:08:1a:92:06:5f:66:a3:ae:b4:d0:47:3b:aa:
         fd:0e:25:be:0e:a3:7a:fc:0a:9a:54:78:d2:68:ed:55:cb:82:
         e4:92:b6:ba:cb:7a:7c:fd:35:69:aa:24:ac:68:1d:bd:bb:d0:
         af:e1:5d:11:cb:2b:48:3a:d0:46:2c:71:2f:d3:ed:cc:3d:a8:
         50:33:fd:72:cf:73:ee:a0:76:80:bf:49:c9:25:29:78:a7:2d:
         76:ec:70:f1:00:ae:81:7d:46:ac:be:c3:6b:ce:43:08:f3:ed:
         4c:5d:46:b3:6e:62:83:33:b3:1e:1a:37:34:4a:1a:47:64:32:
         6d:af:fe:c1:f2:0e:50:1c:92:ed:2d:20:1f:9a:73:ec:6d:17:
         6f:ad:e4:fb:91:83:78:07:5a:c7:eb:c4:8c:5c:8e:f3:f1:f0:
         e9:9a:36:76:39:8f:ee:3e:b0:51:de:b3:1a:d7:f1:84:8a:97:
         4e:ea:61:93:3d:59:b6:2b:76:f9:c2:b4:9b:6e:f5:bd:2d:f3:
         a4:9f:c2:54:1a:4f:45:92:43:0c:31:fb:7d:75:30:60:e1:d5:
         a0:d4:2e:2c:fa:94:e7:20:50:6f:bb:15:f3:9b:28:a3:b5:07:
         c0:12:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:40:20 2026 by rpki-client