Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afc5fc0c-5ac2-399b-8186-c9bbd81f9db1.roa
File:                     afc5fc0c-5ac2-399b-8186-c9bbd81f9db1.roa (raw, json)
Hash identifier:          DB87/lzrbvmf5ahv0VF4LrxGYTYZMX1LdAqr447Yztk=
Subject key identifier:   40:91:85:40:4E:72:37:95:C4:59:65:6C:4D:9B:F1:8E:10:B0:3B:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B21A1F22482E8F6C8260
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afc5fc0c-5ac2-399b-8186-c9bbd81f9db1.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        173.87.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b2:1a:1f:22:48:2e:8f:6c:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=ad9eeb1b-a727-4bb5-bf52-b3ef922f1fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5f:6b:93:35:6a:3d:41:c3:45:02:3b:dc:4d:
                    32:c0:54:8f:1f:db:8d:a3:e0:5a:77:84:7b:38:ea:
                    1f:0a:d1:b4:43:cb:30:4b:eb:35:b6:aa:74:5d:33:
                    22:70:e4:11:0f:d7:d2:98:6a:1d:48:b7:53:14:4f:
                    c3:7a:57:3e:47:a2:02:24:19:6e:e4:3d:70:46:8e:
                    a0:f0:a6:ee:8c:fb:d6:e2:89:e9:8e:be:8b:13:36:
                    06:8d:86:a1:c6:64:1e:3f:c9:86:a6:dc:29:15:13:
                    84:be:56:fa:5e:cb:62:ac:e0:e8:42:e4:35:71:dc:
                    fd:d4:c7:d2:d1:12:e3:4d:2e:25:61:72:38:5b:23:
                    5f:e9:2b:8b:18:e8:40:ea:df:df:6b:1b:9d:51:26:
                    bb:40:dd:ab:cb:f6:87:26:2d:3d:69:6d:23:95:1b:
                    75:3e:eb:46:cb:cd:85:d1:3e:7e:1f:47:52:84:aa:
                    fa:5e:ec:04:a4:82:dc:b8:b9:80:d5:f3:f9:29:ef:
                    42:7c:9e:8b:ea:ea:72:7a:d8:e2:35:eb:c4:7b:51:
                    2e:69:0c:07:0d:83:13:51:85:06:ae:b4:25:a6:3a:
                    e9:d1:1f:5d:73:be:a6:db:f4:6c:5d:78:8c:a2:64:
                    99:12:1d:09:27:c9:e2:f5:29:4b:2e:59:37:a5:b1:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:91:85:40:4E:72:37:95:C4:59:65:6C:4D:9B:F1:8E:10:B0:3B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afc5fc0c-5ac2-399b-8186-c9bbd81f9db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.87.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:88:69:d5:0c:d9:c7:ee:11:f1:61:3b:6a:e5:00:ed:fa:5b:
         3c:77:76:b9:c1:6e:a9:e2:04:02:2e:8a:32:15:6b:c2:fd:b6:
         7a:15:d0:f6:ac:ea:5c:bf:93:a4:ba:ea:eb:26:ce:20:b7:39:
         33:28:8b:79:0a:ef:07:52:73:88:8a:e3:f2:25:5a:6a:32:7a:
         80:7e:00:c0:76:7f:13:cb:3b:fe:63:4f:81:e1:a9:fa:b8:9e:
         b2:0b:90:a2:b3:b2:cf:22:d6:69:db:af:88:fa:0d:a5:d2:cf:
         e2:77:0f:7d:84:fc:eb:5b:67:1c:b4:d5:e3:6b:e3:4a:34:b5:
         f5:90:20:a9:8c:18:e9:37:04:99:f5:9d:2c:b8:e8:f9:47:5b:
         2e:ca:00:a7:66:1e:d1:49:ab:da:fb:b9:3f:19:c4:c4:d8:07:
         9c:f7:45:87:e9:72:79:37:35:09:dd:6f:63:35:fc:dd:7a:a8:
         25:6f:03:24:ef:43:52:a2:94:37:9d:7d:eb:30:b1:42:36:d8:
         3b:89:9b:b9:c8:00:1f:45:be:9b:1a:d5:f3:96:66:3e:5e:01:
         bc:4f:db:9a:97:81:c2:6a:9b:20:7e:9b:4a:b0:24:44:79:27:
         0f:24:11:d0:40:76:e7:e5:05:ff:0a:89:b7:a2:4c:ff:5b:66:
         f0:85:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:07:27 2026 by rpki-client