Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa38b243-8db7-3a9f-a27e-54e84c73a347.roa
File:                     aa38b243-8db7-3a9f-a27e-54e84c73a347.roa (raw, json)
Hash identifier:          TBXswJpDP4fftyDo2DkMjxVUEf5ouE3ahQUy5hOcdS4=
Subject key identifier:   0A:09:8C:CF:B8:63:88:B4:AC:AE:1B:96:73:7C:58:DA:D3:ED:96:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F82ADD32A0BAC91854DE15900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa38b243-8db7-3a9f-a27e-54e84c73a347.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        198.226.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:d3:2a:0b:ac:91:85:4d:e1:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=020eacbc-206d-426a-9bc6-4463a7753b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:68:35:ac:6f:92:2a:6d:78:9e:5f:bd:0b:d4:
                    53:4d:d8:81:fa:50:d4:61:74:03:e6:f4:bc:f3:44:
                    28:67:11:70:bd:2c:f0:e2:54:2a:fc:90:a8:29:a9:
                    85:d1:2b:3c:1b:f0:0f:e2:a3:64:0f:fe:a9:43:6b:
                    7b:e2:81:f6:50:cb:96:8e:9e:10:19:38:85:ed:8a:
                    25:96:de:8e:2f:b1:a3:28:2a:6e:b0:57:ff:57:be:
                    91:a0:13:fc:08:79:74:cd:15:19:33:04:49:68:8d:
                    4d:9e:eb:75:d9:77:f0:b4:70:d6:3c:10:d6:dd:f9:
                    73:ec:16:fa:c4:44:9f:d8:bf:82:a0:bf:1e:65:06:
                    60:3e:b0:68:69:bc:90:0b:fd:3f:dc:66:c2:6c:a4:
                    32:10:9c:5c:4b:12:5b:aa:4b:f2:9d:79:5b:71:1e:
                    27:c6:d1:5e:11:2d:73:02:37:7e:93:4b:af:5b:ea:
                    d2:31:90:9b:70:2e:99:12:d9:4c:84:06:65:fd:2d:
                    7a:2c:66:f2:0d:1f:6f:06:ed:c0:23:6e:44:78:e7:
                    9d:c2:d3:f6:c6:69:7d:6e:d2:9a:e6:2c:6b:70:8b:
                    6b:19:03:6e:2a:ad:1c:9e:dc:ad:e8:d9:f0:b0:9f:
                    81:80:f0:f4:fa:9d:ff:8e:9d:26:85:bb:9a:78:c4:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:09:8C:CF:B8:63:88:B4:AC:AE:1B:96:73:7C:58:DA:D3:ED:96:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa38b243-8db7-3a9f-a27e-54e84c73a347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.226.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:20:c1:55:3a:7b:7c:dd:66:a9:16:c7:a9:8c:1c:0b:4a:85:
         6b:4c:c9:86:33:a4:75:66:ff:f6:71:44:d3:52:ad:4e:20:4f:
         f3:b9:e0:bf:48:1e:fe:d1:fd:4c:fe:29:9d:54:96:33:78:5c:
         e2:47:04:62:24:9a:d1:20:ab:eb:11:0b:82:17:b6:63:bc:ff:
         da:63:97:45:1e:85:c6:34:bb:38:cd:0a:e8:12:82:47:a0:18:
         fa:95:f7:e4:86:1e:da:82:ab:44:4d:23:07:69:ee:6a:3a:8b:
         e1:8a:c1:e3:ce:e1:2e:01:95:86:6a:7b:f5:17:1f:f0:bc:c0:
         75:8f:08:4f:49:b2:1b:00:21:4a:9c:a0:87:4c:d4:5c:2e:08:
         18:63:31:f1:a0:82:03:0b:31:50:98:5d:4e:06:b0:c2:1f:fa:
         1b:1c:ed:75:af:8a:1e:e4:c9:23:87:05:1b:53:8b:4f:07:ec:
         85:eb:a9:cb:a8:68:13:e6:9d:cb:71:42:a2:c0:f6:99:b5:e2:
         16:e1:df:13:f0:3d:fa:78:11:e8:28:4e:94:01:ea:4b:f3:a2:
         66:d5:ed:cb:e5:5d:1d:fb:50:d5:35:d0:d3:20:a2:ad:1e:ee:
         33:86:54:61:78:57:d0:88:47:e9:e7:0f:da:03:aa:42:53:37:
         ac:8b:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:24:46 2026 by rpki-client