Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/842eb853-81b1-3065-a90d-de44cb2da3b2.roa
File:                     842eb853-81b1-3065-a90d-de44cb2da3b2.roa (raw, json)
Hash identifier:          1601uHiusySAVdBvX6VWpfnkAltNDoBgxqTWqSCdSlI=
Subject key identifier:   5A:F3:DD:7A:F8:90:69:7B:95:D9:B3:4D:1A:EE:DA:5E:D5:CB:E8:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B193280151EDA5D67F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/842eb853-81b1-3065-a90d-de44cb2da3b2.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        173.84.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b1:93:28:01:51:ed:a5:d6:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=b6a896d8-ec1e-4111-ad89-6a15a6e9424a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c0:cf:42:dc:7e:a5:5e:f9:6a:5c:18:c7:0f:
                    9c:7c:db:4a:a7:56:86:46:9c:27:e4:c6:6b:66:8b:
                    ca:65:bb:2d:a6:1b:c8:94:00:b7:92:31:9f:50:7b:
                    97:a9:32:ef:ac:2a:b5:fd:66:f8:36:56:a8:2a:1a:
                    e2:09:73:23:32:f3:83:01:09:5f:fe:8c:90:23:d4:
                    7d:07:0c:11:89:32:58:e8:d1:c2:1f:28:f0:43:68:
                    42:b4:0a:59:3b:a2:03:20:9f:ee:6d:aa:b7:aa:f5:
                    fc:3e:2c:cc:2d:4c:ce:b6:1d:01:8f:36:e1:0c:62:
                    aa:b7:51:aa:4f:ce:65:5c:80:be:ef:e3:dd:5b:2f:
                    a3:e9:7c:d2:46:2d:fe:d8:ad:11:40:aa:62:4d:da:
                    5a:e2:06:bf:46:7e:e1:f9:26:14:9c:b4:c0:ed:a1:
                    a7:04:3b:3e:c6:23:52:af:85:9f:49:b5:e8:1a:8a:
                    3c:ff:63:ad:5d:66:ff:4e:d9:29:e0:45:89:3b:76:
                    e3:a4:11:97:5b:c1:42:b3:4f:a7:7d:c2:28:68:7c:
                    78:0c:ce:72:88:74:ba:81:f7:5e:5a:03:5f:2b:cb:
                    2d:b4:af:06:16:3b:7d:a0:eb:17:26:1e:38:4d:67:
                    6e:37:2b:f2:3d:5f:a6:f5:14:6a:26:a1:4a:0a:bc:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F3:DD:7A:F8:90:69:7B:95:D9:B3:4D:1A:EE:DA:5E:D5:CB:E8:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/842eb853-81b1-3065-a90d-de44cb2da3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.84.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:80:ae:4f:d2:7f:4c:26:41:fb:2e:b7:bf:d5:7a:b9:36:9e:
         75:12:33:95:93:dc:e1:18:7b:dd:25:f8:3e:5e:95:5d:00:ea:
         0d:7c:9a:1b:60:f3:41:4b:67:de:9d:34:fd:a0:2f:6a:f6:59:
         18:63:a3:2f:c2:30:4e:5a:d7:24:e7:a2:98:05:ae:27:91:cc:
         b2:86:46:19:48:78:62:6b:ab:b4:bc:00:fb:5e:85:6e:c0:88:
         22:0f:7f:cd:ae:21:84:54:2f:21:92:17:ae:22:ae:61:7d:23:
         c6:1f:c8:9b:d2:60:75:0f:66:fa:26:51:91:b0:6a:65:a0:ef:
         4a:16:42:8b:49:e5:15:35:f2:31:87:41:96:1d:dd:f3:c1:5a:
         e1:c8:ad:9c:0c:a5:9f:24:b0:ad:4b:ef:cf:ad:d7:9a:8b:92:
         dd:d1:58:fd:67:ee:26:a0:ed:82:7f:9e:32:42:8e:21:4c:f8:
         c9:9e:e4:04:0e:78:92:d2:a8:04:46:9c:87:71:10:36:a3:41:
         32:db:66:d5:88:43:48:ea:70:e9:87:70:d3:04:52:91:5e:84:
         cc:50:4b:39:4d:5f:1c:dd:99:ba:dd:df:79:18:19:73:42:09:
         b5:73:d7:d7:d7:d3:f9:07:dc:46:14:9c:e8:91:03:ee:cc:58:
         12:f3:eb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:51:07 2026 by rpki-client