Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44dcead4-3972-36af-8cd9-597bb891b74d.roa
File:                     44dcead4-3972-36af-8cd9-597bb891b74d.roa (raw, json)
Hash identifier:          a4KasyPXx/13HtpE4rz1KdEmhE4Prv2dV50ohoJfGt4=
Subject key identifier:   20:3A:7C:AB:8C:4E:EE:A8:88:B4:1D:26:D9:CC:DF:3D:FA:6E:06:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F1B2F83CFF534957901E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44dcead4-3972-36af-8cd9-597bb891b74d.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     22394
IP address blocks:        198.225.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:1b:2f:83:cf:f5:34:95:79:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=783291e3-4209-431a-aad1-74142a980402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:a6:3d:e8:e6:2d:f1:52:e3:e5:0e:3b:80:
                    22:dd:af:2a:dc:52:7a:2a:46:6c:bd:b6:83:40:ab:
                    b6:23:7b:11:73:4e:be:fd:ed:d4:68:77:1a:9a:e5:
                    d0:53:61:73:d2:93:81:84:ee:47:23:36:03:b1:1a:
                    47:a2:0c:92:be:74:41:81:bc:a4:49:f9:0d:ba:36:
                    36:d6:3d:05:7b:65:54:61:7a:c6:b2:5d:b7:70:96:
                    58:0e:d7:5e:d8:99:76:1e:19:06:02:5c:86:7e:46:
                    93:d6:78:34:58:7a:d6:9d:dd:95:20:3d:68:07:fe:
                    2f:a0:13:e5:1e:af:bf:79:e3:93:28:a2:55:75:75:
                    3d:f7:67:a0:11:24:29:8a:9c:6d:08:b4:c5:31:23:
                    66:0a:4a:bf:6e:43:16:e2:1a:20:db:e7:c5:ff:af:
                    47:e0:55:82:a9:93:c4:01:d1:0e:56:2a:ef:0c:6f:
                    57:8b:43:40:f1:15:58:74:2f:74:84:de:8c:7e:ae:
                    65:e9:36:6c:a5:35:e1:85:0c:c3:6c:4c:3c:71:72:
                    46:83:49:43:bc:05:c5:21:3a:8e:18:4b:87:0d:97:
                    43:16:2c:41:8d:6f:bf:a9:84:9f:d5:e2:27:56:88:
                    bc:11:07:1e:07:84:75:a9:d5:7c:b5:b9:ab:85:69:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3A:7C:AB:8C:4E:EE:A8:88:B4:1D:26:D9:CC:DF:3D:FA:6E:06:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44dcead4-3972-36af-8cd9-597bb891b74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.225.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:97:78:b7:a4:c3:e4:d8:8f:86:50:bb:81:a3:9d:2e:9d:
         f6:01:6c:d3:90:03:e8:80:a7:32:68:a4:7f:94:01:37:f1:6c:
         8e:64:78:38:1f:03:cb:14:bd:0c:15:24:88:05:aa:1e:a4:bf:
         cd:51:b2:21:98:ea:1f:ce:4d:cd:16:08:52:2e:81:06:29:b8:
         cf:7d:ea:56:9a:e0:2c:5b:88:0a:48:7d:71:fe:7f:11:da:5b:
         15:4b:67:93:40:75:6a:15:5c:26:ed:bd:44:6b:eb:8e:b7:12:
         69:5f:39:59:93:91:76:02:73:90:d7:c9:df:5b:35:17:92:ad:
         24:ca:8d:14:da:a3:a7:19:74:ea:83:33:27:0f:18:64:41:ba:
         fb:74:ab:08:0e:7a:cd:69:a9:62:95:8f:1c:83:83:90:c4:50:
         48:67:34:09:b8:ca:16:c8:c4:39:4c:1f:d6:bf:d2:a9:25:43:
         ad:98:cf:ff:a8:da:37:3a:9b:d8:93:f9:1c:05:57:ce:d3:b8:
         37:c4:84:cc:55:2b:55:f7:5a:b7:6d:3a:d6:c9:b9:e8:76:08:
         d1:cc:5d:b2:c6:b4:f5:c8:cf:41:21:62:97:23:c4:9d:1f:15:
         82:e4:08:66:60:1b:9f:d5:31:e0:3c:4d:f2:07:d9:c4:85:55:
         33:b6:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:01 2026 by rpki-client