Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0de2b01-e50e-349d-8b21-aa3942ef1357.roa
File:                     e0de2b01-e50e-349d-8b21-aa3942ef1357.roa (raw, json)
Hash identifier:          6UdqGe819cDYzUK4hhOpeGJUm8azixQYDPyQjd0aIKI=
Subject key identifier:   79:CE:97:0D:A6:D0:D4:71:98:5D:7B:26:2B:99:87:19:B6:94:ED:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F89A8880B07C5A70678B29800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0de2b01-e50e-349d-8b21-aa3942ef1357.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     5650
IP address blocks:        172.95.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:88:0b:07:c5:a7:06:78:b2:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=7aa8eb34-df69-40f7-ae41-657936b0c599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:f1:37:88:74:1e:e3:33:66:86:54:2d:86:
                    45:9c:7c:d5:46:b2:05:e1:e8:74:88:c5:98:f0:00:
                    61:4e:72:1c:31:91:11:93:17:57:7f:9e:d7:f2:fd:
                    99:f5:52:26:c6:e5:f5:e6:a2:8a:93:31:7f:f1:c4:
                    9b:6c:63:8e:46:8d:cb:d3:2b:a1:9c:94:04:3c:f3:
                    17:25:c3:bd:49:59:5d:11:ec:61:f1:b5:b5:19:82:
                    89:69:30:a4:b3:91:c1:13:0e:0d:90:b9:a7:3d:a5:
                    a7:2c:96:db:e3:07:15:b2:7a:c1:c3:6e:68:5d:22:
                    ca:74:8d:57:fd:6f:56:da:99:01:86:6f:07:b0:89:
                    2a:2b:a3:29:d1:1b:92:6b:6b:a8:36:b1:b5:f8:97:
                    21:95:2a:70:26:33:2c:e6:e7:86:ab:ec:4a:73:4f:
                    31:b6:b6:a9:72:15:09:ca:94:6e:55:dc:7b:25:c5:
                    77:36:79:80:b1:a7:2c:ca:74:02:80:b8:18:65:6f:
                    26:cc:94:ca:68:dd:90:60:9b:a1:ae:46:2e:48:91:
                    1a:6e:c8:f6:dc:47:dd:52:d3:e0:a6:70:d4:f1:0e:
                    8e:9b:a9:ef:c5:1b:49:9b:9a:b6:47:77:4b:54:3f:
                    1d:ac:62:00:a3:c8:ad:37:58:1f:6a:8b:68:2e:24:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CE:97:0D:A6:D0:D4:71:98:5D:7B:26:2B:99:87:19:B6:94:ED:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0de2b01-e50e-349d-8b21-aa3942ef1357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.95.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d6:c3:8e:cf:e1:6d:f5:a2:c8:15:dc:63:b3:2c:8c:60:0f:
         e1:ee:9e:d8:46:f7:88:d9:eb:e7:ff:b8:e1:1a:64:09:70:5a:
         7b:ea:f3:c3:5f:0f:4c:2d:74:e9:c7:68:ee:b8:78:d8:55:68:
         a8:28:30:bf:57:b2:36:94:6b:52:30:1a:20:f1:70:01:73:5e:
         a9:a0:ed:71:f0:28:49:5e:78:bc:2b:07:7e:e1:01:b7:1b:eb:
         97:d6:8d:01:a3:c1:e4:0b:c7:8f:f3:61:22:84:e3:11:2f:a3:
         09:7c:a3:29:64:08:c9:ff:17:be:69:dc:7e:05:14:b7:5d:89:
         fd:8b:fc:d3:e7:d3:4f:42:58:1c:4c:b8:9c:2a:9d:01:00:b0:
         e0:11:75:45:89:e6:5c:87:ef:34:9d:d9:d5:1d:86:74:3d:0b:
         4f:95:2b:62:37:b7:fe:52:d3:b7:6a:9e:2e:0c:c5:bc:88:47:
         d4:22:df:4e:a6:eb:b4:cd:ed:fd:95:2e:55:60:75:62:d9:fb:
         4d:b8:0b:2e:6e:7b:67:05:1a:e8:a5:d9:b2:fd:bb:d9:6e:e8:
         a8:fe:6f:9f:b7:1e:80:15:5f:cd:f6:35:02:b9:d0:33:3c:49:
         51:ab:fc:09:49:16:3d:86:e0:23:f4:d5:14:16:c3:be:a0:9d:
         b7:e5:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:48:55 2026 by rpki-client