Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da62dfb3-01bf-36e8-ba61-c34bdfe92a43.roa
File:                     da62dfb3-01bf-36e8-ba61-c34bdfe92a43.roa (raw, json)
Hash identifier:          1TiUSeiLJtpZxsq5QhAy1ORu1tLx/dtA1p14Fd4kKOA=
Subject key identifier:   4C:8B:B1:CA:F0:EB:79:15:D7:B6:F8:1E:B6:D4:9C:FC:47:0E:85:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79381F63018F10104ACAD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da62dfb3-01bf-36e8-ba61-c34bdfe92a43.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     17119
IP address blocks:        208.249.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:81:f6:30:18:f1:01:04:ac:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=acb725c1-851e-43c8-9a54-549504184ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:71:d3:6e:42:8b:f5:5d:0c:c1:ce:a8:03:
                    4b:81:a0:d4:c1:3a:7c:f7:a8:f2:55:c2:39:81:25:
                    1b:ce:12:c7:4c:fc:46:80:5f:01:f6:6a:1e:70:64:
                    86:e7:f0:90:48:de:fd:5c:3d:ea:5a:fe:ef:56:9a:
                    84:c0:00:9f:d7:ac:06:59:d0:b0:e3:93:be:c9:67:
                    56:3d:05:6d:eb:35:ea:68:23:2e:6a:04:50:4a:8c:
                    b7:75:0d:e4:fb:b7:70:78:ed:74:b7:bc:e7:2e:80:
                    4c:a1:b3:0f:eb:25:99:ae:a8:88:0c:39:b0:5c:f4:
                    13:41:87:10:40:56:44:97:96:31:4e:9b:99:b6:81:
                    23:44:c9:61:07:92:67:4a:43:33:50:dd:bc:23:ab:
                    34:e9:b6:c1:e2:6c:a8:9f:23:67:ed:91:d3:8c:a5:
                    a9:dc:3b:ae:2d:20:da:00:6a:ec:56:95:ff:e8:fa:
                    6a:88:08:09:6d:c3:88:ff:f2:b0:5d:c3:85:c3:f4:
                    35:1a:38:af:3e:25:ec:83:f8:08:d6:fc:94:8f:fa:
                    60:9b:d5:d9:62:5c:96:9f:b0:37:c7:2c:e1:97:00:
                    f5:1e:51:97:f8:30:78:28:9f:12:c7:eb:08:df:b6:
                    78:f6:fc:56:28:16:bf:a1:cf:74:4c:63:a3:39:6c:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8B:B1:CA:F0:EB:79:15:D7:B6:F8:1E:B6:D4:9C:FC:47:0E:85:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da62dfb3-01bf-36e8-ba61-c34bdfe92a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.249.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:35:9d:72:74:df:c1:fb:33:1f:ba:92:db:a1:23:58:29:
         bd:e1:b3:60:b9:5f:c8:37:b7:db:b0:ed:09:ef:13:71:fa:0c:
         ee:92:7b:ae:10:bd:63:d0:08:c6:36:ed:f1:2b:40:e7:89:6d:
         70:cd:21:97:ee:9d:b4:c9:ef:ac:94:2f:95:2d:6c:a9:fd:8a:
         fa:7e:ff:75:67:48:17:c5:e4:dc:33:3d:ac:f9:a2:40:13:c2:
         c8:86:77:f9:c5:d8:84:6b:75:5a:94:01:18:01:6f:70:b4:9a:
         2a:71:54:7a:3a:28:d7:4c:73:d4:51:2e:e3:43:ef:85:06:ab:
         13:67:da:86:94:cc:7f:89:4d:00:81:d3:5d:51:b0:17:61:ee:
         21:6c:22:71:e5:2b:a6:51:4b:a1:0b:71:d4:d1:b6:51:27:9e:
         3a:32:ca:bc:2a:d6:a0:09:51:db:b5:5b:ec:4f:a8:f4:d7:50:
         84:d9:24:9f:02:ce:c5:95:01:50:0b:66:0f:15:d7:20:d9:cf:
         89:95:9f:02:7f:1a:45:1d:43:2d:f6:dc:5e:f3:72:75:d2:3b:
         b7:d0:b0:c8:76:8a:ec:63:7b:5c:5c:1c:5c:c3:de:85:2d:01:
         92:f7:a1:c2:35:dd:79:39:2b:28:7f:8f:6e:5e:90:02:99:7d:
         83:8e:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:41:03 2026 by rpki-client