Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c23fe5ac-a167-3ea9-88ca-dff3d9b02b48.roa
File:                     c23fe5ac-a167-3ea9-88ca-dff3d9b02b48.roa (raw, json)
Hash identifier:          KzQedPfAgUHfCvALoNOzlec386letElFtsw0WkQzt9g=
Subject key identifier:   0E:0F:8F:9A:7B:DD:2E:8D:EF:2C:4C:25:C8:51:77:4D:70:CD:8B:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE0C1E8621E598CE96B153C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c23fe5ac-a167-3ea9-88ca-dff3d9b02b48.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22394
IP address blocks:        198.225.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:e8:62:1e:59:8c:e9:6b:15:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=c1d5f4c8-8c02-4b2a-91ef-3136f15bc0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:90:45:7b:f2:03:0c:26:d0:d9:a3:64:8d:24:
                    12:2a:de:1f:63:2a:1f:71:10:aa:6c:8a:39:ce:6a:
                    c4:52:31:78:2c:a2:c6:c1:09:ce:68:df:2d:d8:70:
                    95:5d:27:29:cf:54:c0:56:5d:ad:9d:f1:81:01:97:
                    22:ba:3d:40:5d:80:4b:59:17:18:88:28:8a:18:e7:
                    e8:28:43:cb:a0:21:53:b0:49:89:d5:50:4c:80:f8:
                    9e:ea:79:b5:65:36:ab:85:d4:36:42:70:c7:69:f9:
                    a9:39:4f:10:96:a5:0b:82:35:f4:93:d8:b9:dd:85:
                    11:74:06:e1:4c:4e:e4:cf:0c:b5:37:a5:15:99:3c:
                    5e:c5:ac:3d:ec:e3:ca:9d:f7:4e:7f:45:b7:2e:dd:
                    8e:24:d9:f0:f3:7e:33:35:76:55:35:97:2c:62:fe:
                    dd:d0:4d:7c:70:26:2b:91:e4:8f:a0:1c:3d:d8:67:
                    37:87:0f:6e:59:5a:17:b3:b1:74:d4:a6:18:fd:a8:
                    ed:e8:6a:aa:79:23:4d:97:e7:2d:5b:c3:4d:3f:cb:
                    d9:69:97:9b:34:03:92:98:ea:0d:82:5b:25:96:f4:
                    66:64:e9:cf:d5:c2:b6:f7:6e:f4:8f:ff:1e:4d:1f:
                    02:b4:01:71:5c:8a:23:e9:42:ac:e2:a6:79:19:04:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:8F:9A:7B:DD:2E:8D:EF:2C:4C:25:C8:51:77:4D:70:CD:8B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c23fe5ac-a167-3ea9-88ca-dff3d9b02b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.225.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ee:fb:d2:eb:dc:ec:9c:83:57:71:9f:80:fe:88:65:a8:86:
         22:8f:81:cb:2a:a5:3d:b9:6b:6e:fd:4e:78:87:e8:0e:fc:39:
         eb:31:90:eb:fa:43:96:0c:b3:16:be:49:0d:56:21:ba:14:e4:
         38:cc:3d:35:d1:45:d0:f7:20:c8:89:1c:58:15:9e:f7:3a:1c:
         fe:83:5e:55:bc:72:89:20:43:9b:78:07:c2:5a:72:9c:f2:36:
         41:cf:49:2b:d8:80:bb:81:22:94:b2:c7:55:c6:74:08:64:4e:
         83:4e:3e:ca:29:50:64:b4:a7:9f:87:7a:3a:f1:0f:84:21:40:
         ea:6e:4c:ad:8d:8f:22:33:7d:bb:a1:f3:8f:4a:5e:ab:0c:f8:
         a4:f0:bc:be:31:e1:65:7c:46:8b:fb:6f:4f:77:2b:20:f2:b9:
         05:7e:65:40:b1:97:74:23:20:ae:74:6d:9d:ad:bf:85:66:fa:
         51:88:2f:e2:01:c1:6b:3a:96:7d:9d:10:33:5e:04:db:78:22:
         80:42:0b:fb:18:f4:79:aa:f0:60:1f:c7:2e:0e:9d:a1:ea:b5:
         63:80:a0:8c:45:d3:fa:a9:90:28:fd:16:4b:37:28:d9:48:6e:
         05:17:aa:d6:0a:a3:46:f7:d3:e4:9e:47:d2:8e:ed:49:b5:15:
         84:94:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:48:23 2026 by rpki-client