Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85f267dc-8cd0-3f23-abbb-336798be2170.roa
File:                     85f267dc-8cd0-3f23-abbb-336798be2170.roa (raw, json)
Hash identifier:          mLlQGJpFF+AwLcTDmmA8eloqoKMMR4PtCkDPiuUT/gU=
Subject key identifier:   65:B4:12:35:7F:D3:F3:D7:33:CB:C4:25:EC:FD:56:6E:EA:C7:2A:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5E1A5721EE95BE5BDF473120
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85f267dc-8cd0-3f23-abbb-336798be2170.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        198.225.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:57:21:ee:95:be:5b:df:47:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=0d6119ca-4d9d-43d3-868a-9a662267467e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:17:05:59:3a:7e:ad:28:a3:fb:b0:d1:1c:
                    f0:84:f4:90:c3:57:26:f6:62:2e:b8:4e:1f:f1:e6:
                    92:8f:bf:9b:88:09:12:61:b3:e6:dd:52:22:a5:22:
                    d5:c6:7f:ef:23:03:4f:cb:d9:26:26:05:e2:3e:31:
                    52:90:f2:c1:72:f1:5b:82:9b:4f:c0:b3:46:d1:36:
                    83:85:5f:79:21:42:fa:28:ff:b4:ca:37:6e:40:9a:
                    a5:2d:93:bf:89:46:a1:78:47:a2:27:3b:ac:df:8f:
                    12:06:4b:be:0b:62:7d:4a:13:73:a0:cf:a5:fd:d6:
                    1e:84:8b:b5:9e:63:6c:98:e5:46:62:5a:33:4d:ff:
                    9e:22:9e:cd:7f:29:02:58:f1:81:9a:10:5c:c5:3c:
                    5a:65:4e:ad:aa:45:ec:40:bf:ce:e2:3c:2c:e1:16:
                    17:b2:d5:3e:b0:40:7b:2f:1e:da:8d:9b:de:b9:03:
                    16:b7:7c:51:a9:48:1b:6e:58:28:8f:96:cb:9c:57:
                    35:b5:b3:8f:2e:a5:20:d4:5a:28:0b:04:35:f3:6e:
                    03:57:fd:db:d9:e9:ca:0a:b0:d8:27:e0:60:d7:db:
                    81:0a:04:94:2d:f2:bf:af:99:25:c3:32:e3:4c:9e:
                    bd:6b:38:00:72:47:77:df:59:10:67:aa:59:d6:29:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:12:35:7F:D3:F3:D7:33:CB:C4:25:EC:FD:56:6E:EA:C7:2A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85f267dc-8cd0-3f23-abbb-336798be2170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.225.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e1:fe:9e:9a:a9:0a:f8:41:97:40:e9:77:a9:51:84:19:fd:
         d5:6b:d6:1a:10:59:5a:38:cd:50:8d:85:71:72:df:52:ac:5b:
         c3:16:bc:60:49:6b:27:01:4e:46:44:36:ce:1b:9d:6d:81:61:
         52:9c:ee:4a:df:d5:ab:1c:87:fa:6a:cc:70:d2:65:61:be:86:
         62:5e:db:c1:45:7b:a2:eb:0f:f4:d2:8f:96:73:5a:be:0f:22:
         55:b3:48:43:c8:f4:b7:3b:f7:db:0f:ee:4c:92:14:4b:fc:7c:
         b6:96:28:d0:3d:62:66:80:75:f0:f9:b8:06:f9:1e:c5:a1:cc:
         db:51:b9:fc:3d:f8:e2:aa:ff:db:65:96:ca:a1:e3:99:54:e1:
         fb:94:71:91:08:3b:ec:53:12:0a:22:85:6d:9a:8e:19:66:3b:
         95:15:fa:e4:82:9c:50:33:c7:e6:ea:53:19:3a:50:76:e3:87:
         22:ee:49:8b:20:49:5c:54:9a:c9:b7:b3:3c:b1:44:7c:db:cc:
         b9:2a:2e:26:f5:c8:1b:04:f3:29:ae:0d:64:39:21:f4:4a:08:
         e0:ef:3c:14:0b:e5:81:b7:23:e0:b1:54:8d:ba:32:ff:b5:fa:
         92:b4:8e:4c:10:78:a2:df:40:f4:33:54:05:25:72:3a:36:df:
         ef:8d:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:17:13 2026 by rpki-client