Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e8a00f-6579-3339-a5ce-72a0a4e45bb9.roa
File:                     18e8a00f-6579-3339-a5ce-72a0a4e45bb9.roa (raw, json)
Hash identifier:          RW1EUvSOEAen1Y1ZVBsJ7EMF0clqqztw+9x9fV/xTIY=
Subject key identifier:   46:B8:E8:C2:86:DC:7C:FB:F5:99:BD:81:12:A6:68:DB:7D:80:8E:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1EAEF58623001E23B68B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e8a00f-6579-3339-a5ce-72a0a4e45bb9.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22394
IP address blocks:        198.226.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:ea:ef:58:62:30:01:e2:3b:68:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=37e4a8e0-7437-49e4-9ba6-9d80360a45ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:b7:66:99:88:c5:c5:3a:bc:a9:61:7a:e6:
                    ae:d6:d2:ce:4b:77:a3:07:05:36:72:b6:c5:08:ca:
                    33:72:88:8a:cd:8f:68:5f:c4:09:4f:05:65:9e:59:
                    2a:87:70:da:73:ce:19:0c:8f:82:b2:05:de:67:b0:
                    00:55:52:f7:8d:38:a2:0e:40:14:4c:eb:5d:f2:f3:
                    73:17:ad:b7:5a:28:1c:01:89:6b:ee:a6:f5:43:e8:
                    af:18:cb:91:f6:6e:fa:6d:7c:05:b0:3a:f5:06:c3:
                    28:15:a5:24:87:a0:da:2a:ed:78:34:31:83:97:1b:
                    a2:8c:4a:10:b8:a9:ec:71:78:ae:3a:3c:7f:86:58:
                    76:6a:6e:01:b9:67:eb:4d:47:12:6b:35:66:04:6b:
                    b4:03:ed:cd:7c:18:c4:af:27:0d:b9:55:23:8e:9c:
                    bf:a1:93:1a:57:05:cb:a6:c1:6d:71:fa:55:30:3d:
                    7a:10:ab:63:22:a6:39:4d:4d:e2:92:43:9a:6a:81:
                    1a:06:36:9b:68:94:f2:74:20:41:16:9a:25:ae:a3:
                    da:62:b2:92:a3:9e:30:a6:3b:16:72:c3:2e:5a:d4:
                    46:04:8a:87:c6:76:9e:33:b6:44:b7:23:b3:ca:d6:
                    89:b7:f7:13:13:d8:31:50:67:f1:3d:3d:ec:e8:fe:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:E8:C2:86:DC:7C:FB:F5:99:BD:81:12:A6:68:DB:7D:80:8E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e8a00f-6579-3339-a5ce-72a0a4e45bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.226.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:77:1e:68:71:ab:36:39:7b:8b:9e:d0:a6:a7:05:47:28:ea:
         1f:19:df:f9:5d:af:df:28:43:a4:c6:7d:07:c0:f6:b5:61:bc:
         a4:fd:72:c5:80:a0:8f:5d:62:62:ab:58:c1:ad:a6:1c:b8:b6:
         c2:26:fb:93:c1:6e:14:64:c3:e3:5e:84:81:8a:c1:f3:87:e8:
         f2:1f:b7:5c:f6:f3:51:2d:60:7b:38:24:1d:58:d9:fd:4b:e7:
         b2:2e:2d:43:d6:2a:31:c5:eb:bb:66:cd:7f:a1:ad:30:24:b0:
         5f:5b:9e:6c:88:4b:e6:06:25:85:ed:c4:06:16:3e:3f:6e:23:
         d2:3e:8c:5f:13:6e:3a:bb:db:f3:42:98:24:41:7f:0c:16:15:
         9a:39:a2:86:2e:ce:51:21:bd:1c:a1:77:1e:d1:f0:85:b8:1e:
         98:7b:62:f9:eb:63:40:4e:f9:35:c1:3f:00:90:6c:c5:f3:bd:
         49:f5:64:10:f5:91:e8:a9:e7:7f:69:a5:12:ab:53:3b:5c:8f:
         45:94:e6:06:16:d7:6c:95:1b:67:b7:7c:70:1d:73:5f:ec:11:
         37:1e:a8:40:ca:d9:36:d2:ea:a0:a8:fb:84:23:6a:2a:42:7b:
         6f:8b:a7:6c:6a:fb:65:86:0a:12:e7:cc:17:f0:f2:a1:0f:28:
         40:8e:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:42:35 2026 by rpki-client