Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc2e7e64-45cc-30ea-820e-5bcbdafb6c8f.roa
File:                     cc2e7e64-45cc-30ea-820e-5bcbdafb6c8f.roa (raw, json)
Hash identifier:          gHfBUzgKTGcJAg5rBvnfsfYPZfEsIbknhYtbMRkweMM=
Subject key identifier:   66:1B:47:00:0D:97:10:6C:B5:B3:6D:01:1B:B0:A4:A8:C1:FF:0F:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A766B7A4E5A6242D9DCB
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc2e7e64-45cc-30ea-820e-5bcbdafb6c8f.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        141.155.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a7:66:b7:a4:e5:a6:24:2d:9d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=5451c245-ec97-4918-abce-e2dab28fcc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:fe:79:43:36:5f:56:35:a5:4f:1b:fc:82:
                    db:3e:a3:da:75:d9:51:d0:db:8e:8c:17:bf:83:84:
                    ae:c3:96:26:61:36:2b:b5:b0:4c:c7:7d:e4:1d:bb:
                    79:92:42:2f:84:09:a4:61:9a:c6:da:fd:3b:53:18:
                    3e:54:32:00:91:55:c6:7f:a2:2b:cc:64:dc:3b:bc:
                    bd:c0:b0:a2:cc:d2:70:5a:30:8c:80:a2:4f:40:10:
                    0d:cb:f5:e7:e8:32:ed:2f:34:70:d7:4e:f7:9e:04:
                    6a:0d:2c:e6:0c:1c:40:9c:e1:b3:a7:da:8f:bf:fa:
                    b0:77:a6:c1:0b:00:23:92:e1:69:b1:08:f0:93:9e:
                    9d:1a:b2:3e:cb:0d:de:c6:88:66:ca:0b:36:54:c3:
                    e2:5c:0c:3c:5c:3a:8d:45:6b:48:ba:b6:3a:81:72:
                    e6:22:3f:a1:e7:17:2e:a3:95:c6:fc:58:19:41:54:
                    c2:b9:2b:ee:d1:cc:e4:93:03:fd:36:f2:3c:10:f9:
                    34:da:1a:a9:4f:69:cc:15:04:62:68:f7:30:10:ec:
                    e3:52:3f:aa:09:00:0b:66:7f:39:e8:94:73:ff:86:
                    b6:9f:7f:8a:1b:26:a1:fc:e7:5f:8e:e1:50:92:2c:
                    7e:73:45:82:f0:52:91:6c:ea:b0:f2:36:f5:f5:be:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1B:47:00:0D:97:10:6C:B5:B3:6D:01:1B:B0:A4:A8:C1:FF:0F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc2e7e64-45cc-30ea-820e-5bcbdafb6c8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b6:e2:29:13:5a:44:43:83:06:54:c5:37:6b:d7:66:0e:bc:
         a4:fc:6a:22:c3:54:ac:4e:9a:ec:12:22:7b:48:70:26:4d:bd:
         eb:1f:68:31:8c:9a:d9:45:5c:f2:04:18:4b:91:c9:c9:b7:f2:
         3c:b1:a4:b3:e7:b6:c7:0e:16:dd:ed:d8:a3:73:c2:04:79:e1:
         6b:fb:9a:e7:19:65:fe:b7:b3:26:80:ad:f9:f4:5d:95:20:f3:
         c3:14:74:ab:2c:bb:89:d4:36:33:33:18:e0:ff:06:7b:c8:5e:
         1e:39:bd:5e:a3:94:f0:9c:0f:11:13:f9:f7:11:e1:00:38:e1:
         bf:7a:cc:b4:64:f3:f7:79:3a:ba:d9:4a:52:86:40:45:b4:50:
         ec:9e:27:44:1c:27:6d:a1:a3:2b:5c:df:85:5e:aa:cc:e0:3f:
         0a:51:c9:91:17:3b:75:4e:a9:aa:71:ba:b7:ac:88:ac:5b:af:
         20:1e:32:98:5e:67:ad:18:78:97:29:b3:fd:e9:97:44:fa:5f:
         38:2f:3c:6a:63:a4:61:a2:1e:6c:83:90:88:05:36:91:0c:ed:
         89:4a:85:dc:b6:27:d1:f1:97:a8:26:ea:3d:a2:2d:47:26:5c:
         0e:85:00:a1:71:ae:f0:35:6a:8b:d7:d8:87:9d:85:17:8a:4b:
         ba:51:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:59:29 2026 by rpki-client