Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88757dfc-745f-3220-81cc-2621bb343ce4.roa
File:                     88757dfc-745f-3220-81cc-2621bb343ce4.roa (raw, json)
Hash identifier:          4HvRALsVSGBw/NLptUm9pLs+YQkbTJsj5zlj/N8IIWg=
Subject key identifier:   37:24:AF:26:B8:4C:94:25:B0:3E:DF:F5:CE:F4:0F:F5:4A:C8:EC:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3E5F537D769BD0A447CF0000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88757dfc-745f-3220-81cc-2621bb343ce4.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        198.225.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:53:7d:76:9b:d0:a4:47:cf:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=3229029b-9d25-460d-b964-a72f0c957d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:03:00:1d:40:a7:cd:67:be:e1:14:18:d1:
                    e2:8f:d3:23:b5:0f:94:10:1c:01:f0:3e:3c:4c:50:
                    5b:3d:00:1a:cb:6e:fa:18:5a:a8:2b:cf:4b:c6:ec:
                    dd:cd:38:b7:b3:f8:3b:47:b5:86:40:3b:cf:92:51:
                    03:88:12:bb:d3:96:9b:b4:db:06:ee:26:8b:93:99:
                    39:61:a3:1e:0c:7c:a6:5a:22:cb:54:72:31:bd:8e:
                    70:91:2f:68:12:ab:95:b2:da:39:68:ed:bf:73:40:
                    97:29:95:f9:e0:25:d7:87:69:bc:f6:f2:7b:ab:d3:
                    aa:07:3c:3f:20:c3:a0:7a:88:6b:e7:97:d8:8a:4a:
                    a5:fb:0e:58:97:a3:22:eb:25:fe:01:52:39:91:7a:
                    bc:01:21:f0:80:f2:94:a8:d7:57:4a:ab:07:93:be:
                    f1:30:7a:71:82:f9:e2:9a:c2:89:27:c4:b4:a1:6d:
                    cf:e8:a8:6c:a6:57:d9:07:b3:97:69:f5:7b:a5:cc:
                    66:82:3a:16:58:88:1b:4b:32:89:41:db:6f:2e:42:
                    7c:06:06:58:73:2d:b8:b3:ac:17:a8:f0:fc:b9:15:
                    24:5e:da:67:d8:30:4f:41:e3:7b:c5:a1:2c:8c:de:
                    2f:06:ec:cc:11:8d:11:a4:3f:dc:03:de:1d:32:cd:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:AF:26:B8:4C:94:25:B0:3E:DF:F5:CE:F4:0F:F5:4A:C8:EC:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88757dfc-745f-3220-81cc-2621bb343ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.225.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:97:1b:6c:79:ac:ea:be:70:f1:e6:45:f3:df:bb:56:db:
         15:92:38:88:a0:a9:f1:0f:51:bf:17:f4:37:c0:bd:8c:77:c8:
         5b:8e:51:0f:db:f7:b6:2a:58:32:a7:7f:6b:2e:bb:fb:8d:75:
         cf:54:df:df:fe:ca:2e:c4:54:24:9b:74:59:7d:5f:78:e7:f4:
         5c:23:c1:c4:ca:80:12:0b:7c:01:d0:dd:89:04:f2:4c:e3:31:
         1e:0b:72:61:5a:8a:26:44:1e:0e:9f:08:f3:76:71:d4:f3:cf:
         44:bd:7d:3d:63:f2:f7:9e:f3:c0:2f:93:8a:a8:00:d4:b9:e1:
         5a:24:dc:92:36:3d:6b:35:bf:56:8b:f0:63:3a:a6:8a:d7:4b:
         9b:ea:74:29:86:39:63:eb:1d:a1:e6:56:ae:74:99:00:33:68:
         dd:5f:75:5e:9f:e4:77:7a:21:3e:1b:29:fe:94:1f:9b:b8:db:
         21:f5:d2:8e:9f:ae:cf:5f:3c:55:0f:12:bb:72:af:5a:1d:3d:
         1e:2a:a6:5d:81:de:2c:3c:f0:af:0a:02:7c:c7:64:0e:2f:91:
         f3:bf:45:60:b5:f0:f8:bf:ac:da:2e:b7:a7:79:fb:a7:64:45:
         92:f8:53:8e:30:c6:3a:e9:b9:37:50:43:a0:2b:83:4d:31:fc:
         46:24:ce:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:40:14 2026 by rpki-client