Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f76ed51-fbf7-38da-833a-88ed180689ce.roa
File:                     3f76ed51-fbf7-38da-833a-88ed180689ce.roa (raw, json)
Hash identifier:          jab5IigY+L3bFmf4LfqxfAg1QhncIsAeWg5nj0iNsos=
Subject key identifier:   AB:C6:6B:30:A6:89:BA:25:4F:07:19:9F:FE:94:90:5B:75:BE:37:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE2B5E419B516348FA690A880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f76ed51-fbf7-38da-833a-88ed180689ce.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     395650
IP address blocks:        65.246.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e4:19:b5:16:34:8f:a6:90:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=57683d1e-59b2-4e6a-a822-76c66d15120b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:2b:36:f5:bc:dd:00:d2:d7:71:32:a0:a7:
                    cc:48:3a:83:cc:f5:79:df:33:7a:fa:91:cd:32:27:
                    54:5f:9a:67:aa:dd:62:df:76:42:54:19:60:f7:a2:
                    82:6e:f8:1f:ff:c6:be:0e:0f:6d:04:56:09:0b:49:
                    dc:68:c4:f5:b4:88:05:21:b6:66:09:8c:db:80:95:
                    91:b8:43:76:f5:cf:80:e7:d8:5d:22:aa:42:a5:97:
                    f4:66:c0:f0:ab:98:c7:2c:f2:a7:f9:36:be:b7:67:
                    34:cc:e8:da:b8:4f:d1:07:a2:5d:22:d0:5c:17:c0:
                    7a:c7:c1:f8:14:49:ee:d9:69:e8:29:6b:a9:4a:2f:
                    28:24:40:80:2e:bc:a5:32:35:d3:ac:a5:57:67:4a:
                    c8:84:6f:80:c7:9e:c7:06:51:b3:44:d4:8b:5f:56:
                    59:24:93:74:0d:59:61:98:18:84:0e:f7:d9:1c:46:
                    90:5b:4d:63:5d:3c:2a:f0:d2:ca:3d:6c:3c:ac:ed:
                    56:be:09:49:4c:67:35:70:4b:09:bb:bf:f1:76:2e:
                    fb:56:41:1c:c4:e7:eb:63:b5:4c:c1:08:0c:8c:36:
                    89:39:5e:8b:c3:80:4c:25:01:e6:ce:fc:85:46:28:
                    dc:9b:8b:e5:71:9c:e2:71:51:c0:bd:c5:95:46:81:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C6:6B:30:A6:89:BA:25:4F:07:19:9F:FE:94:90:5B:75:BE:37:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f76ed51-fbf7-38da-833a-88ed180689ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.246.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:68:34:7c:2d:85:a3:fa:91:dc:ba:69:eb:6c:e6:0f:b9:d5:
         eb:7f:64:2d:fc:e0:77:99:bc:23:ec:0f:0f:0d:d5:3e:18:4a:
         30:24:ed:92:c6:1a:f4:b5:5b:39:b4:96:c1:68:83:cd:d1:d5:
         91:06:7d:d9:09:00:94:1b:c9:c6:ef:18:4b:9b:1d:a6:4f:ce:
         72:6b:c7:f1:3d:16:8c:db:b3:f9:86:c9:90:5a:02:4a:9c:71:
         a5:a3:01:0b:33:db:3e:e5:61:7a:3b:db:c5:98:77:9a:53:76:
         52:2c:1d:f7:21:73:74:b0:36:4c:34:43:f6:68:b4:35:7b:6f:
         c4:63:95:ec:f0:8e:ed:7e:d4:c5:8f:fb:2c:49:7e:d8:b2:84:
         a9:5e:ce:bf:2c:b0:7f:c5:f3:32:5a:fe:22:bf:f9:62:42:ab:
         c9:5b:98:3f:cf:05:7f:8a:47:69:31:33:08:1e:c0:ad:28:e8:
         a6:eb:0e:47:b5:a9:2f:eb:8a:90:15:1b:9f:10:86:2a:c3:22:
         db:d7:4a:c3:dc:b3:0b:9c:97:4a:91:f4:b6:fd:c6:f0:38:4f:
         ea:9e:f4:f3:75:5c:8b:61:26:1e:89:e9:22:11:19:85:6d:83:
         74:62:58:92:7f:dc:1c:a0:dc:41:e3:99:e9:03:67:02:bc:85:
         f3:f4:91:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 21:03:48 2026 by rpki-client