Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25953b38-f414-313d-8116-238b15a20456.roa
File:                     25953b38-f414-313d-8116-238b15a20456.roa (raw, json)
Hash identifier:          xexRrn5SBYfnkI7F3IOMX5FkFZuvZi/NnDy6XZ3LaZw=
Subject key identifier:   CF:83:F4:B8:10:58:58:17:25:C2:EB:61:0C:23:1E:98:87:0A:E6:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6C0FBDA342B71397A6570C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25953b38-f414-313d-8116-238b15a20456.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     701
IP address blocks:        96.228.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:bd:a3:42:b7:13:97:a6:57:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=aedc8cf8-e5d7-4d9d-9d02-0b4e96181e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:57:51:e0:76:47:d9:39:b2:f0:7a:43:f4:27:
                    9d:dc:63:20:ee:3a:6f:a5:ae:c3:92:d0:8a:0f:5f:
                    e8:50:ce:ca:41:5c:52:d9:2f:a1:c2:2a:1a:da:9c:
                    9d:d6:9d:30:e0:c9:d4:1b:a1:6f:a7:8c:4a:dd:87:
                    48:f0:d8:78:0b:75:6f:35:68:41:2e:c1:ff:0b:ba:
                    49:7b:b5:1d:f3:92:24:3d:33:74:03:4a:05:2e:85:
                    f7:10:3a:b8:b3:e4:29:63:4e:e8:c8:a0:f3:02:df:
                    51:93:d3:8f:99:b9:41:86:f9:b1:96:27:48:3f:43:
                    8e:d5:17:c5:ef:37:7b:40:af:3e:5c:2f:c5:95:f2:
                    4c:fb:db:5c:00:29:f6:13:bb:35:63:6e:77:9e:42:
                    92:56:da:18:4a:a3:4b:3c:51:ac:39:5e:75:3f:84:
                    37:2b:cc:83:8a:fe:27:93:26:d4:e9:77:67:66:27:
                    d1:2c:4f:eb:cb:24:84:65:2c:e3:aa:ba:d4:38:64:
                    c6:9f:89:e3:0c:c6:a9:da:46:11:dc:16:ae:b8:3b:
                    6b:91:e1:f6:45:e8:06:bc:a2:aa:39:e3:1d:22:44:
                    07:0e:10:4e:bf:17:1f:1c:b9:1c:42:21:c9:c3:a7:
                    f8:bf:5d:d8:62:6e:05:bc:d9:86:20:6e:24:4b:24:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:F4:B8:10:58:58:17:25:C2:EB:61:0C:23:1E:98:87:0A:E6:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25953b38-f414-313d-8116-238b15a20456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.228.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:0c:ea:bf:11:f4:30:34:f2:22:b1:30:a7:61:39:a9:06:
         f5:7d:44:f2:8e:54:2d:10:ad:28:d5:68:01:3f:e8:d4:1f:80:
         c5:9f:f7:7e:a7:25:dc:47:15:7d:f6:1f:0b:12:f7:87:52:fa:
         f8:7f:e5:94:50:a3:4d:c8:6b:b3:2d:48:62:56:ef:ed:07:10:
         22:e9:b4:f7:d6:cc:fd:f4:4e:e5:d1:f0:e4:c8:7e:fe:26:92:
         ff:b2:f8:4c:01:17:7d:a7:4c:9c:84:f4:92:64:9d:91:5c:46:
         2f:e3:ca:fe:4a:6f:f7:4c:60:5e:19:09:7f:5c:59:60:67:55:
         b2:2f:54:d2:8d:89:61:be:ff:5a:2b:45:74:5c:b0:e0:38:ca:
         7b:bf:61:4e:17:56:3a:bb:d2:e9:54:8f:6d:8e:08:f9:fc:bc:
         6b:fc:00:7d:ac:2b:bd:4f:f2:18:c3:d4:1c:f0:cc:62:47:da:
         a8:cc:40:8a:fb:10:66:37:ba:bb:59:5e:97:26:95:78:99:9a:
         43:84:6b:8b:13:93:71:57:15:b1:c2:b9:2d:f6:59:98:29:c2:
         7d:45:6c:e0:c1:89:5a:b7:1f:ee:97:6d:96:b8:6e:de:1a:ef:
         9f:6e:44:83:e2:13:5e:31:56:13:94:29:53:cc:f8:4d:8e:76:
         00:3d:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:21:24 2026 by rpki-client