Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbabbc7-3d45-35a9-9665-b80de44d9d71.roa
File:                     0cbabbc7-3d45-35a9-9665-b80de44d9d71.roa (raw, json)
Hash identifier:          tP9mPWrEQJYS+aHm4X0TX5VLc2rcTm5CIEbZ1VcN8fQ=
Subject key identifier:   2C:6D:34:EF:1C:4B:24:8F:BD:5D:18:2B:92:2D:F8:6A:4C:56:63:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CB2872CB1FE6704D95D9B6680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbabbc7-3d45-35a9-9665-b80de44d9d71.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     3855
IP address blocks:        199.172.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:2c:b1:fe:67:04:d9:5d:9b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=0fe79080-d2fc-48c5-96d4-ad31b440451c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:fe:de:44:9c:e4:4a:4a:81:a3:58:70:34:
                    ef:c6:bb:db:ed:87:7f:46:7b:a6:23:6d:2c:31:f3:
                    9b:bd:56:d6:67:be:4b:30:43:dd:cb:c5:49:36:43:
                    7b:2a:af:3f:a0:b8:a7:44:d7:cc:15:ce:de:72:9b:
                    f7:6a:d0:a8:e0:30:3b:43:60:75:03:2f:0b:b3:29:
                    52:5b:44:d7:de:40:c3:4a:73:b2:2f:a5:75:c0:b1:
                    6f:1b:2c:ca:c8:c4:a7:23:b3:4f:a1:41:6f:13:49:
                    2a:51:83:06:52:b6:1e:65:83:35:94:bb:d2:ce:6b:
                    c7:b9:c6:7c:f3:50:fe:e6:37:47:e2:c8:53:4e:a0:
                    70:57:33:4f:ab:fc:fb:e9:5a:7f:37:be:20:88:76:
                    b3:4b:37:ae:fc:90:af:72:d8:e5:ca:6a:d5:a5:ba:
                    2c:55:e5:96:3a:ab:f2:3c:d2:cd:62:57:7d:e8:be:
                    ca:0a:0c:8e:5c:c1:d5:bb:b4:b3:75:b5:ff:c8:70:
                    be:1c:2c:5f:0a:75:2c:14:91:15:c4:53:5c:a5:5b:
                    c0:af:1c:9f:53:52:88:81:14:16:a6:5b:20:30:60:
                    60:3c:12:0c:89:fe:46:3c:90:a5:98:bf:3e:9d:ac:
                    43:f3:52:d9:56:ac:ef:76:10:4d:2f:35:66:00:9b:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6D:34:EF:1C:4B:24:8F:BD:5D:18:2B:92:2D:F8:6A:4C:56:63:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbabbc7-3d45-35a9-9665-b80de44d9d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b7:3c:fc:73:e7:45:9a:85:3e:02:62:35:c4:61:1d:a5:c6:
         42:e1:83:fa:fc:12:61:98:1c:e3:86:21:30:c8:39:69:04:1e:
         0c:d2:0c:f3:a1:37:7f:ce:03:aa:b9:65:56:e6:f7:24:93:62:
         82:bd:8d:0e:15:e7:d6:1c:0a:34:b6:ec:a6:13:13:b2:a5:e0:
         ba:ed:1c:c6:8a:1a:cc:56:78:a1:2a:e4:5d:b4:02:a5:bb:96:
         4e:5f:75:7e:d4:a4:00:9e:4f:01:32:3c:03:05:42:d7:bf:33:
         e1:e7:b5:bc:90:93:a5:36:4a:1d:62:eb:cc:ba:e1:fc:2f:4b:
         13:5b:6f:76:41:21:26:50:17:82:88:a9:f0:74:0c:5e:9d:b1:
         37:5f:fd:45:77:e5:ef:93:9d:56:eb:8c:54:b7:b1:22:c7:80:
         6d:b2:60:30:e4:d1:2c:c3:df:c7:c0:f6:19:16:bc:17:e7:36:
         14:65:65:02:0e:2b:f7:cc:d6:49:14:cb:14:62:df:bf:fa:83:
         9b:26:4d:81:ae:35:2d:92:55:b8:a0:c6:f2:41:cf:40:23:67:
         93:9c:ca:6a:c7:78:ff:6d:b9:f9:4f:95:d0:26:87:f9:60:44:
         6a:30:06:e1:a2:3f:9b:d2:8a:79:fe:8a:ca:f5:b8:bc:37:59:
         37:f4:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:20:43 2026 by rpki-client