Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46f28d61-511b-3fff-a406-aa2ae1d6e1ef.roa
File:                     46f28d61-511b-3fff-a406-aa2ae1d6e1ef.roa (raw, json)
Hash identifier:          EfBdS3czXn5oHdAvMbUHa3zuvfeGBanI9wBKRAG/Ml8=
Subject key identifier:   A8:5B:A5:21:EB:61:0A:94:FF:7C:30:82:B0:5B:29:44:76:4E:81:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EBB11CA2E8F43C2FEE123B200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46f28d61-511b-3fff-a406-aa2ae1d6e1ef.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     3855
IP address blocks:        199.172.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ca:2e:8f:43:c2:fe:e1:23:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=319f2a6c-7f3a-440f-9bd6-614309179238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:93:1d:5d:89:a4:a8:b2:17:a2:d0:33:fa:
                    c9:1e:4c:da:15:c3:a3:f6:16:05:ab:04:d5:cc:d2:
                    ed:a7:4a:7c:01:07:26:7b:e9:97:74:64:00:d0:8b:
                    27:9f:f2:5e:4c:67:41:f2:ae:81:be:4e:ab:d8:9d:
                    3c:60:8e:68:eb:e1:27:22:f3:bd:33:c3:a2:f4:af:
                    7d:47:1b:6c:07:b2:7a:97:0e:80:5b:15:57:18:fa:
                    28:b3:79:8b:11:5c:77:e6:5c:12:e7:db:b3:e7:c0:
                    fa:c1:33:fb:10:19:fe:86:8e:0d:61:93:38:18:26:
                    eb:30:3a:26:5c:eb:85:5a:13:1a:41:1b:ed:49:fe:
                    90:34:b1:4e:3c:2d:8e:50:96:7d:3d:13:2f:62:cd:
                    ad:d9:48:73:df:c8:75:f1:e2:cd:ab:2d:dd:c1:e1:
                    03:0e:63:e3:a7:29:47:ff:de:06:d9:eb:65:76:4b:
                    4f:c4:93:35:12:72:e2:1f:9f:fc:39:ce:e3:8e:18:
                    dc:d8:77:fa:aa:41:45:a5:50:90:55:fe:a8:3e:86:
                    53:84:77:d6:69:74:fc:99:55:5f:05:47:11:03:3d:
                    0c:ea:dd:0e:04:89:f6:1b:e9:9e:42:cd:34:d8:5b:
                    35:47:9e:e2:59:6d:45:37:78:95:dd:ec:26:c8:6c:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5B:A5:21:EB:61:0A:94:FF:7C:30:82:B0:5B:29:44:76:4E:81:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46f28d61-511b-3fff-a406-aa2ae1d6e1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:20:fe:ed:50:03:d6:d6:d7:ed:6f:04:c9:64:a9:53:01:
         2d:67:5f:53:68:ab:d1:ff:c7:57:db:19:7b:4b:52:fe:96:0e:
         f0:38:cc:d0:43:15:32:2b:cc:6c:dc:81:df:18:f3:cf:7b:2b:
         81:78:54:0a:ff:12:9c:ab:b3:50:ee:34:b2:83:51:67:14:23:
         95:6d:72:2d:c5:03:1f:73:e2:75:46:fc:da:a6:8d:1d:a9:85:
         0c:d1:15:7b:00:58:10:50:ca:33:13:55:8a:a6:a6:b8:df:c2:
         ce:f0:7b:6b:d9:6c:86:b9:e6:dc:8a:5f:6d:c2:b3:af:2f:f1:
         a9:48:77:a5:6e:a5:5f:13:84:13:c8:50:c0:05:f9:47:34:34:
         b4:06:d2:38:40:da:01:32:af:02:84:69:1b:6d:cd:16:e9:76:
         90:b9:11:4e:05:fc:d6:55:07:68:7d:2d:50:94:19:58:cf:95:
         15:b4:3a:9b:9e:7f:df:24:98:d0:ef:9e:eb:a4:a2:91:8c:9d:
         92:55:43:03:77:aa:80:fa:80:e3:c7:37:ba:3b:f6:34:14:cf:
         fe:7b:e8:fc:50:db:f2:04:74:41:56:a4:1e:2e:7b:08:b5:ac:
         f8:fe:ed:18:21:a4:76:87:a4:5a:c5:ef:f2:50:2e:05:5a:99:
         3a:c7:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:44:30 2026 by rpki-client