Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6b9e630-e029-3aff-8fcf-2b5d72d8463c.roa
File:                     b6b9e630-e029-3aff-8fcf-2b5d72d8463c.roa (raw, json)
Hash identifier:          ER9IF3Q+14lyqR8rRqvjNLzycKK3KGtguU+fJxnqrDA=
Subject key identifier:   7E:07:1F:03:18:CD:32:FC:3E:30:3E:56:10:85:BA:10:20:D2:DA:D3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CB2874D414CB9386CCD119010
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6b9e630-e029-3aff-8fcf-2b5d72d8463c.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     3855
IP address blocks:        199.172.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:4d:41:4c:b9:38:6c:cd:11:90:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=18a96103-a92d-4198-9c77-7136209b51ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:86:e6:34:87:88:d0:61:6e:12:db:c2:94:8e:
                    88:0e:93:ef:07:5d:1f:40:36:11:0a:ef:5b:7e:83:
                    5f:7b:d4:4d:89:00:3d:25:ab:0e:a6:e9:5c:53:b3:
                    06:bb:69:33:bd:ec:26:c6:f7:61:a7:b8:48:12:84:
                    d1:82:18:b4:53:ad:03:09:6b:e5:74:0d:a4:80:4a:
                    d1:00:eb:da:e0:96:24:48:8b:b8:ef:6b:0b:c4:19:
                    e7:34:03:f5:b0:a5:f4:63:72:51:e8:22:9b:79:91:
                    94:79:6f:90:31:8a:08:d9:ba:32:52:fe:4e:22:ee:
                    bd:72:c5:25:10:52:6e:c8:2b:a6:ff:d6:5d:fd:8f:
                    ad:70:77:ef:6d:60:51:dd:3d:a2:a3:73:b2:60:40:
                    56:f3:5c:89:31:53:b2:bd:71:4c:ee:e9:18:50:77:
                    f4:5c:77:37:ac:84:41:9c:f5:7b:f4:9c:d3:2a:95:
                    bb:4a:fc:01:ce:8f:c4:78:ed:06:35:fb:8f:dd:12:
                    d9:08:eb:4d:63:37:b0:27:61:00:fe:0e:dc:2e:10:
                    44:0c:70:1a:c3:ce:5d:5b:9b:f3:c5:ce:ac:c1:52:
                    57:eb:9e:bb:d7:1f:dc:36:69:bd:18:66:46:94:2a:
                    f1:39:a1:9e:37:6d:4e:10:c0:be:8f:8f:67:84:71:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:07:1F:03:18:CD:32:FC:3E:30:3E:56:10:85:BA:10:20:D2:DA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b6b9e630-e029-3aff-8fcf-2b5d72d8463c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:84:8b:59:68:d4:ca:c5:b3:a6:2d:92:32:dd:7c:3e:26:d9:
         24:7d:a6:9a:77:7e:cd:02:f6:af:93:b8:d1:db:b8:b8:86:d6:
         f6:11:2a:69:51:68:af:7a:85:78:54:de:8f:db:d3:69:76:20:
         61:02:03:6f:c5:5a:9a:0a:0e:e8:c6:dd:0e:03:5f:f1:9f:4f:
         c4:ee:b6:9d:29:37:91:67:ba:c1:9b:30:9a:a7:ca:dd:af:84:
         f0:95:eb:06:e5:de:16:33:0d:bb:2a:45:10:be:b8:8c:de:c4:
         d5:98:0a:1b:fd:38:d6:37:5b:62:fe:a3:b0:e8:12:4f:4f:53:
         c2:39:dc:77:44:c1:17:ac:7a:5b:a9:5e:32:db:b3:c9:33:27:
         64:53:53:2a:4e:ac:fc:f1:f7:85:a3:3e:0d:e9:c1:8a:30:a4:
         d1:c6:f7:35:bb:f4:1e:6b:a0:20:3c:76:0d:37:52:fc:ee:fa:
         fb:dd:49:22:7b:69:90:c6:9d:e9:b2:30:18:4b:c1:10:55:e7:
         0c:df:86:c9:ad:96:bd:d1:80:47:39:98:41:ae:30:e5:3f:c5:
         34:29:9d:6e:05:8a:9e:85:e3:67:46:b6:1a:29:cc:26:f7:7b:
         d5:21:1a:81:d8:e6:36:5b:ef:f5:56:23:7a:93:78:bb:70:88:
         93:8d:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:20:34 2026 by rpki-client