Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2a281e-a092-327b-81b7-b742a2ebcba4.roa
File:                     0a2a281e-a092-327b-81b7-b742a2ebcba4.roa (raw, json)
Hash identifier:          1PeiZ83eUUcZts2ahCbZp7YgydJ9vBksvJHZxRpVFwI=
Subject key identifier:   0E:D5:72:1E:7F:DF:B9:6B:E1:F7:C3:89:FE:2C:C5:48:49:F8:8A:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB75DC9A45EA57C0D88F120
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2a281e-a092-327b-81b7-b742a2ebcba4.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        96.238.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5d:c9:a4:5e:a5:7c:0d:88:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=66904f57-71ad-47a4-8704-dda5466d081f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:a5:a9:62:7e:bb:4a:81:3c:17:2a:07:57:
                    53:71:be:22:36:5a:1c:ed:e7:07:ac:f1:9c:80:3c:
                    7c:39:48:da:a4:44:6b:6e:93:11:8f:b1:b1:bc:3d:
                    bb:44:d7:55:86:b9:55:05:81:f3:c6:64:1b:82:21:
                    34:d4:a5:da:f3:e3:4a:74:8c:96:0e:f0:7d:96:f2:
                    67:3d:95:2b:02:de:de:13:a9:44:12:58:37:d3:d8:
                    b3:7b:05:f9:30:a1:da:6d:d3:1b:ad:27:61:55:5f:
                    c5:52:24:68:4c:c8:5a:6b:f0:0a:b4:4c:6f:8a:fd:
                    db:2f:16:8c:c2:0f:14:9c:4d:7f:8d:ba:73:92:25:
                    3a:ce:45:ae:35:a8:97:c8:68:69:32:c0:f5:a6:65:
                    1a:11:23:17:ea:3d:f9:37:32:fd:39:54:d8:67:b9:
                    19:96:38:49:ef:c6:d4:c1:cd:bb:e7:98:00:2b:e9:
                    c6:e6:1b:ed:47:3d:f9:95:b8:ce:54:0a:fd:78:36:
                    2b:f3:7b:37:f3:ea:fd:07:ae:62:53:6a:97:ef:4d:
                    2a:d8:c1:38:2f:d8:e1:13:99:18:1c:62:7d:91:1d:
                    02:9c:80:67:98:bb:34:28:56:67:bc:e6:95:52:66:
                    2f:06:f9:fb:77:81:f5:f0:06:c9:32:6b:8f:e7:0c:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D5:72:1E:7F:DF:B9:6B:E1:F7:C3:89:FE:2C:C5:48:49:F8:8A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2a281e-a092-327b-81b7-b742a2ebcba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.238.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:dd:07:43:00:43:40:df:bd:96:a6:3e:e8:ba:2c:a9:b2:e2:
         01:e9:98:ad:35:ac:67:e9:e7:ff:60:a0:dd:7a:31:0d:17:1b:
         80:f6:be:aa:96:e0:ff:d3:7a:c3:27:88:62:b4:b1:e7:e3:4d:
         1f:d1:39:27:99:75:48:9b:64:5b:ec:ee:c8:b0:94:66:d0:c3:
         1c:2d:11:5a:d2:e7:ba:45:35:47:ac:7d:be:9b:ca:8a:56:2e:
         f0:13:50:25:53:a8:d9:d4:c9:38:4a:44:aa:0b:76:91:3f:50:
         eb:a4:b8:ca:f7:9f:fa:8f:d4:d8:ec:2b:b0:a5:65:eb:b0:5c:
         a7:c2:18:08:90:2b:74:c1:a0:a0:27:20:1f:94:6f:1f:d2:c5:
         22:0b:41:65:78:b0:07:3e:b6:7d:26:9f:6b:46:dd:94:a6:af:
         4a:f4:a8:6f:ed:f7:dc:74:75:7f:fb:96:76:f3:01:b3:d4:d5:
         66:48:24:0f:14:7f:34:9b:5f:0b:f2:83:3b:f6:79:8d:39:b2:
         a9:0c:c3:a7:f5:57:81:69:f6:29:a4:8a:6f:66:bb:57:e2:56:
         77:e4:24:f4:9c:f9:8a:9f:e4:8e:58:d8:68:dd:f8:9b:68:b0:
         4c:7f:13:39:88:b1:a6:c7:82:2b:41:97:6e:7a:17:72:b7:fc:
         0a:a5:4a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:02:17 2026 by rpki-client