Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3efcf810-6bf4-3241-bb0b-489c7c95be77.roa
File:                     3efcf810-6bf4-3241-bb0b-489c7c95be77.roa (raw, json)
Hash identifier:          gN+nihlT5a/D0R0KOq0/sBo7bREwhPEuxqZS7Bqmpgo=
Subject key identifier:   E9:23:69:AB:12:CF:9E:37:0D:34:1C:A6:08:42:59:30:73:C7:87:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F521355AD06ED45E2F7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3efcf810-6bf4-3241-bb0b-489c7c95be77.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        198.226.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:52:13:55:ad:06:ed:45:e2:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=4e700cc4-5acd-4947-9d15-3cca0ccccc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:d9:a5:ca:73:4b:ee:ad:1a:55:99:88:66:
                    79:e4:7d:52:69:a5:eb:03:8c:f2:66:2d:d2:de:93:
                    f9:ed:b2:8b:4d:0a:7e:db:bd:f7:ac:02:da:b2:ee:
                    b1:de:ff:af:c9:df:c7:19:c5:01:45:98:ce:aa:c7:
                    c2:0a:79:6a:e1:b9:b3:ce:23:88:78:1d:e8:49:ab:
                    56:63:9c:db:47:f7:39:e4:38:d7:8c:57:b8:9a:55:
                    1a:fc:6f:b3:9f:82:24:2e:30:88:b4:c2:63:37:f1:
                    7d:e6:44:27:21:67:49:d1:90:4a:82:db:31:38:60:
                    4e:7c:e2:9a:c2:19:c0:3a:96:11:69:b4:76:d1:cd:
                    4c:36:62:df:26:82:98:e5:82:cb:1b:f8:49:c3:b0:
                    48:54:ff:23:f7:a8:5f:13:da:33:ea:a9:6f:62:45:
                    33:db:ba:3b:da:43:cf:bc:bb:5a:a5:57:d2:b0:3c:
                    8f:71:1d:b8:f4:ff:7a:c3:a1:dd:26:68:98:8d:e2:
                    0b:9b:7c:a6:3b:5c:7a:4f:4f:a3:89:5d:1d:46:46:
                    e1:39:0b:55:99:3c:af:ab:75:86:26:49:5d:2d:15:
                    e6:b8:96:4e:86:75:7f:f9:0e:92:2c:1c:33:68:dc:
                    70:e2:a5:7c:e5:03:4d:fd:50:48:da:b7:22:5e:24:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:23:69:AB:12:CF:9E:37:0D:34:1C:A6:08:42:59:30:73:C7:87:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3efcf810-6bf4-3241-bb0b-489c7c95be77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.226.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:14:2a:df:34:a3:fc:a4:21:60:ad:47:55:fc:70:90:e3:98:
         7a:e8:fe:11:41:42:3e:7c:e7:8a:36:57:60:b7:c9:54:3d:e5:
         b1:34:a6:b1:05:e0:70:84:9e:4e:7b:a4:03:d3:62:0c:2b:cd:
         89:e0:28:16:10:53:bb:65:3b:39:1a:83:cb:95:6b:ec:7b:71:
         4a:87:99:29:08:b6:79:b6:b1:22:15:6a:6f:b5:c6:5f:6a:48:
         ff:b1:ee:ae:97:fb:53:cf:a4:56:c6:47:10:c4:c8:b8:35:96:
         78:1b:c0:a9:23:4f:fa:95:ef:e5:81:00:1d:7f:00:69:4b:ab:
         6e:0f:b0:e6:52:5f:67:2a:89:76:3d:46:9f:52:2d:8c:c7:85:
         d2:56:2a:00:28:dd:48:f7:45:95:c3:40:81:2f:49:3b:0e:ba:
         c5:d4:67:ea:14:f6:c2:a7:2d:4e:9e:e6:60:b3:2f:d7:04:70:
         fe:78:91:1a:1b:88:bc:b3:0f:3e:8f:17:12:02:04:84:ed:6e:
         6c:93:fd:33:4a:e9:31:12:51:54:2e:7a:11:cd:88:b1:db:1f:
         e5:ef:97:f7:f5:a9:fa:12:61:bc:1e:ad:0c:08:4a:d8:9c:36:
         21:1a:a5:5f:3b:de:17:a3:50:d5:36:92:b6:34:bd:96:29:7d:
         bc:d9:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:43:19 2026 by rpki-client