Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87511345-4688-32b8-bc83-58e21b17929c.roa
File:                     87511345-4688-32b8-bc83-58e21b17929c.roa (raw, json)
Hash identifier:          oMdE+yeE5AzBJ+p8y/gxCRJjLyg6/UgNJlmfAy99kEc=
Subject key identifier:   B9:87:8A:FA:CE:BB:F1:92:86:F7:36:23:37:08:EB:E7:61:33:86:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9E989ECC406991A6DA5E2F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87511345-4688-32b8-bc83-58e21b17929c.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     16224
IP address blocks:        206.136.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:9e:cc:40:69:91:a6:da:5e:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=bbcad2f9-b84f-4d8b-91c1-d79fa2679cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:92:a3:56:a7:4a:b8:ec:20:c5:75:fe:d7:ed:
                    4a:83:b8:8d:d8:46:7f:00:03:5a:61:30:a0:f3:f3:
                    c0:55:6b:e3:c9:56:7b:08:f8:4a:5f:d4:16:4b:5b:
                    52:83:12:d6:05:b9:0a:65:19:41:1b:7c:38:41:9e:
                    0d:25:ae:4f:de:39:bc:65:d5:ef:af:b4:fe:81:e5:
                    c1:50:fc:bf:39:ba:87:2b:79:78:2a:05:4c:6b:e4:
                    62:0e:0f:1e:de:fc:df:bb:77:90:cc:c5:2e:8f:e9:
                    51:1d:1c:52:aa:4d:c1:1a:35:87:ac:34:79:a8:a0:
                    e0:79:1d:97:7f:aa:82:d1:31:ec:85:96:fd:80:25:
                    7f:63:b0:bb:e9:93:16:2d:87:82:df:b6:4d:e8:b0:
                    86:0d:97:cc:04:7c:3b:e8:e1:9f:a5:4e:64:a6:96:
                    26:0a:27:b1:0f:93:1c:69:d6:40:46:c1:40:60:81:
                    b3:74:2e:2e:8f:20:aa:de:51:64:e0:e9:9f:d7:d7:
                    79:84:ec:49:43:7b:f3:3d:6c:5b:e0:c6:35:4f:79:
                    f7:48:18:37:33:94:e0:2f:93:59:6b:7d:8c:96:e9:
                    e5:5b:c1:6b:82:b2:61:79:f9:82:e6:ea:56:53:ac:
                    4c:fa:2e:fb:f0:81:f0:a1:20:e4:47:6d:8c:97:bc:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:8A:FA:CE:BB:F1:92:86:F7:36:23:37:08:EB:E7:61:33:86:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87511345-4688-32b8-bc83-58e21b17929c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.136.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:96:ae:6b:e5:59:66:6b:68:aa:43:b2:59:cf:ce:b2:4c:ce:
         86:76:c5:03:25:36:6f:a9:e4:f3:6e:84:fc:b3:d0:f7:65:48:
         2d:8e:f8:a6:83:eb:0e:56:c0:c2:6e:87:c2:f1:af:a4:1f:5e:
         a9:d8:4c:01:90:05:4c:ca:95:7b:e8:28:01:39:72:69:b3:0c:
         d7:cb:61:05:14:a4:a5:ed:a7:4d:43:45:e8:b8:83:53:15:99:
         b0:cc:10:39:b9:6b:27:bf:a2:6e:0f:b6:b6:1b:7a:0e:cf:10:
         46:e1:92:12:a5:38:29:68:03:ad:e6:a7:89:e6:2d:fc:a0:e0:
         cc:fe:27:62:d9:db:0e:44:83:9e:7e:e7:7e:a6:37:e7:76:6c:
         da:23:1d:0a:53:78:fc:89:7c:12:4d:c8:a0:80:fd:c6:e7:0a:
         a0:c6:ca:c3:f6:34:b7:09:5c:6b:b0:c9:64:9e:a4:bd:ae:22:
         25:15:a3:66:76:ea:4b:a5:20:de:17:c6:88:b2:38:3b:5e:ff:
         68:e7:ca:c2:4b:4e:d1:78:8e:b2:ce:bd:76:c7:11:ae:c7:61:
         9c:7c:5a:b9:2e:6a:c8:d9:3e:d8:83:6c:51:77:b8:d9:bd:5d:
         b3:37:e9:7b:e1:1b:86:70:a8:a2:a1:64:58:99:a0:16:eb:bc:
         d7:ad:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:43:35 2026 by rpki-client