Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df07817f-4248-3dbe-8b70-163602c92c9c.roa
File:                     df07817f-4248-3dbe-8b70-163602c92c9c.roa (raw, json)
Hash identifier:          F8RzZez/EtLfFiH71aKd0TskQrMlhSRBTeS2RgBzl8Y=
Subject key identifier:   A8:90:C3:3E:09:4F:EE:FC:FE:B1:AF:15:AC:70:D8:71:45:9B:1D:21
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7900D6B87BA924C7D336680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df07817f-4248-3dbe-8b70-163602c92c9c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395650
IP address blocks:        65.246.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:0d:6b:87:ba:92:4c:7d:33:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9f3ecaf2-0cc7-4f13-8184-63746129b9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:4c:21:cc:bb:6c:24:55:c1:91:79:30:91:
                    c5:7c:03:87:db:a3:0c:df:e3:c4:ae:19:4a:3a:9d:
                    91:94:56:7a:20:e0:8e:9c:76:d0:49:b2:00:e8:6d:
                    77:a6:94:09:21:85:d9:63:1e:79:cc:a8:dc:bb:0b:
                    83:1a:f5:e1:1e:c7:1b:6b:73:0d:6d:16:14:2c:00:
                    79:7b:ff:7a:da:92:ec:5d:fe:aa:22:d4:9c:1a:de:
                    24:71:f8:95:74:6a:26:d4:89:b0:4a:38:1c:67:7f:
                    ab:2d:3a:8c:42:79:5e:aa:df:ca:5f:52:29:23:4e:
                    7f:75:f0:ea:ed:da:ab:57:79:a2:73:f2:1e:89:82:
                    e5:da:d8:80:27:bb:40:66:4e:83:df:96:60:c3:1a:
                    00:8d:9a:97:f0:ad:d2:d6:b3:e6:db:ab:5a:66:8f:
                    31:45:f9:8e:24:7e:58:47:18:20:5b:c5:30:32:22:
                    37:d0:73:65:a4:66:c0:fa:ca:c9:a6:5a:e4:3f:08:
                    79:ad:25:de:cd:ae:80:e0:5f:81:98:b6:3a:c9:ce:
                    ad:6b:64:4e:14:a3:6f:c9:74:7a:13:52:1b:74:a2:
                    a3:7d:28:1d:f9:65:4f:7e:0c:66:ee:aa:e7:97:cb:
                    64:30:9b:80:97:1d:1d:0e:95:21:09:96:a7:a4:a4:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:90:C3:3E:09:4F:EE:FC:FE:B1:AF:15:AC:70:D8:71:45:9B:1D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df07817f-4248-3dbe-8b70-163602c92c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.246.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e1:64:3b:b9:8f:e3:72:ab:c2:da:f3:f1:02:3f:12:89:6f:
         17:0e:53:bf:dc:24:23:9d:e6:2a:69:ec:15:73:91:61:cc:33:
         4f:0e:48:78:c0:fb:7c:09:96:4d:f6:cc:02:43:13:46:51:b7:
         36:ca:d4:42:cc:53:c8:5c:93:73:86:ee:4f:5c:fd:20:c7:a5:
         d2:a0:22:e3:cb:38:af:c0:ba:d7:71:82:94:53:95:91:b6:f8:
         21:4d:11:49:c8:54:17:f8:46:63:1a:bb:8b:8a:29:1d:28:ca:
         00:ff:0a:f1:13:7d:fc:d9:d1:a3:e8:d6:c5:a4:ca:d7:a7:26:
         52:93:c1:04:17:fe:30:64:b0:93:fa:66:f6:e2:e1:70:78:9d:
         e3:d2:1f:b6:12:1f:f6:1a:df:be:2d:2b:d3:42:b1:05:7b:ed:
         84:34:b7:7f:89:e0:ab:3f:4f:50:3f:bc:3e:e2:26:64:e3:47:
         c6:ff:f5:20:cc:ab:33:23:3f:c5:1c:4e:cf:c6:dd:9e:1f:2f:
         ed:96:2a:1a:4b:6e:70:06:63:ee:3a:ae:13:dd:bd:6f:cd:8d:
         c3:d1:82:ec:21:f9:29:59:d1:de:17:cd:ac:83:f8:4f:1f:1f:
         eb:67:cc:b5:c0:8a:07:7b:5d:44:8a:82:46:0d:10:d1:77:51:
         af:44:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:51:19 2026 by rpki-client