Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88f2a385-9b67-365a-b269-07ac34c691e9.roa
File:                     88f2a385-9b67-365a-b269-07ac34c691e9.roa (raw, json)
Hash identifier:          TQD672D/RkEry79BTwUOMclz4RdL+hRejJvNtMMwOHM=
Subject key identifier:   37:05:89:2B:5E:2C:DA:D9:FD:02:EC:8F:0D:5B:33:EA:A2:8F:AA:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1E431DE3622AA4A7D4B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88f2a385-9b67-365a-b269-07ac34c691e9.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     0
IP address blocks:        198.229.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e4:31:de:36:22:aa:4a:7d:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=f7e8bd69-a219-49ab-b834-d60e5c7f36c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:9c:c4:f7:30:1f:a1:e0:73:39:d2:04:1b:
                    11:c4:44:b8:71:9d:41:90:cc:36:21:b5:38:80:e1:
                    77:16:80:de:86:d8:d9:ee:aa:53:51:93:74:2d:a3:
                    61:2b:fd:84:06:86:fc:d9:64:57:66:7e:0f:f2:c1:
                    26:56:00:69:c2:08:08:aa:24:0a:48:40:14:04:8d:
                    03:c5:b0:95:72:9c:db:cb:99:81:1b:c9:a0:e2:53:
                    df:fa:90:c7:03:03:59:af:cd:fa:e5:09:86:0c:9a:
                    81:1d:f7:5d:37:e3:9e:7d:92:38:4a:54:30:cb:d2:
                    97:41:2d:03:d2:52:bf:cb:81:28:e5:35:91:51:56:
                    05:35:c2:c4:12:b6:85:43:cf:93:2d:6b:5f:c8:77:
                    2f:67:4c:05:de:fd:14:8f:ac:b5:91:60:d5:9a:59:
                    7e:71:4a:94:5f:f3:0f:2f:91:2d:f6:bf:13:e7:9a:
                    b3:44:12:28:eb:af:f4:17:7c:3b:f3:16:e6:1d:03:
                    2a:43:7c:a2:84:20:c3:21:7d:f0:a5:cd:40:7a:84:
                    a9:ab:36:a0:98:44:70:10:4c:ef:19:93:d6:a3:05:
                    58:61:a0:1b:d7:3f:5a:fa:f2:8b:da:47:cc:51:19:
                    07:15:84:93:86:d7:a8:bf:95:80:fb:d9:4c:97:28:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:05:89:2B:5E:2C:DA:D9:FD:02:EC:8F:0D:5B:33:EA:A2:8F:AA:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/88f2a385-9b67-365a-b269-07ac34c691e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.229.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:7a:1c:f9:c4:17:a6:8f:80:6e:eb:f4:72:b6:86:64:20:
         75:a3:99:d3:7b:89:d1:bd:a4:c1:f4:87:7f:76:26:d0:8a:12:
         f3:35:f6:d1:8f:da:30:57:47:8d:b3:80:05:e0:27:e1:f3:fd:
         fd:34:5d:5b:3e:6f:20:e1:32:b9:ce:2c:88:a7:a7:ef:0e:6c:
         ef:44:3a:ba:9c:5d:f5:3f:e7:8c:38:89:52:83:4e:45:ff:c0:
         d7:aa:69:6c:e7:73:47:b1:3b:40:67:45:eb:6e:ee:79:94:6b:
         51:e6:04:59:0f:89:c3:b1:a9:31:a3:ec:cd:82:ed:05:48:a0:
         30:23:36:d2:75:71:24:e9:2f:cd:79:0e:8f:c4:42:f4:d7:db:
         7c:47:4b:4b:31:03:8a:c3:7a:36:08:4a:b6:c8:6f:e3:04:55:
         e1:51:69:a8:c1:cf:4c:46:84:cf:8c:17:f3:86:3f:f1:e0:0d:
         e5:d7:c8:3c:d0:b2:ff:4e:dc:20:d7:c4:a2:7a:bf:1b:a6:71:
         05:ba:9e:b4:d6:c3:8a:be:40:33:2c:c3:e8:e4:4f:6f:8d:d3:
         ed:71:9d:1d:55:86:e6:e6:ac:eb:cf:8b:03:ea:55:b8:de:ee:
         7d:95:bd:97:f1:30:80:b9:e4:06:7f:1c:dd:7d:0e:2e:1b:4b:
         fc:ab:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:52:58 2026 by rpki-client