Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed1ce54e-8213-37f0-900e-fb14e8426a9a.roa
File:                     ed1ce54e-8213-37f0-900e-fb14e8426a9a.roa (raw, json)
Hash identifier:          Tk8++v0JOHhJPVrtqYfKd1Mhgdpd0V/7Ho1kIURv7eA=
Subject key identifier:   D5:A4:B4:C7:95:45:84:B7:94:C0:3C:73:1E:45:30:A7:E1:4D:3B:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B9CB12CF3E41928D78EB1B400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed1ce54e-8213-37f0-900e-fb14e8426a9a.roa
Signing time:             Thu 23 Oct 2025 01:30:47 +0000
ROA not before:           Thu 23 Oct 2025 01:30:47 +0000
ROA not after:            Wed 21 Jan 2026 02:30:47 +0000
asID:                     6167
IP address blocks:        198.226.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:b1:2c:f3:e4:19:28:d7:8e:b1:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 23 01:30:47 2025 GMT
            Not After : Jan 21 02:30:47 2026 GMT
        Subject: CN=884b48c6-ff30-45ef-90c5-6db210c4579c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:c7:70:0f:75:14:1a:62:a4:e0:22:3e:d1:
                    7b:62:05:f3:30:fc:fe:2a:94:d1:96:15:f3:7e:49:
                    a8:fe:45:9f:ae:3e:71:3b:c9:2f:42:59:59:6b:8f:
                    22:b5:89:8d:39:d4:82:16:65:68:15:c6:07:62:8d:
                    f7:d5:b7:e1:fb:b7:55:70:e4:64:c6:6c:f4:4b:a6:
                    a7:d2:2b:e2:30:8d:0d:ca:2e:f6:bd:d8:c1:bb:f2:
                    03:10:1f:3a:e0:01:13:67:11:24:36:46:97:6a:07:
                    ff:94:44:35:0f:56:34:bd:0c:92:aa:cf:d7:60:63:
                    77:ec:69:a5:90:71:07:04:f7:a1:e1:b8:a4:13:79:
                    48:eb:d6:75:ce:b6:29:ff:59:74:88:d0:75:e3:ec:
                    7d:e6:d4:72:2c:a8:db:61:93:d5:2d:93:22:27:87:
                    63:db:fd:f7:eb:ac:e1:a4:c1:42:a3:ac:0b:25:74:
                    e3:8d:44:f1:34:12:07:1f:04:24:4e:48:cc:e2:bf:
                    74:94:00:e5:ec:d6:d3:b3:ab:5d:6f:59:63:1b:b7:
                    83:0d:99:87:3c:d9:c9:12:77:07:79:84:87:4d:4f:
                    93:22:ef:04:55:a7:cf:41:ed:e8:84:44:73:8d:97:
                    83:51:f3:4a:99:7c:f4:e3:b2:76:0b:5e:01:a1:a1:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A4:B4:C7:95:45:84:B7:94:C0:3C:73:1E:45:30:A7:E1:4D:3B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed1ce54e-8213-37f0-900e-fb14e8426a9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.226.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:10:2e:ec:db:1a:35:e2:75:b3:c5:0c:99:09:7b:67:e6:1f:
         dc:5d:84:ef:c8:6f:03:e8:db:08:a3:ef:9d:40:cb:6a:4b:d6:
         b5:37:90:4a:19:ef:60:c9:6b:9a:64:a0:54:d6:2f:31:5a:54:
         da:66:70:16:47:b3:0d:5a:e8:27:68:a0:2e:bc:f1:80:dc:dd:
         52:31:9f:15:60:ad:ee:5e:06:5b:75:83:c9:50:bd:05:a2:55:
         33:14:f4:5b:25:6a:68:a3:df:05:fd:30:f7:6f:64:cd:69:90:
         bf:ed:3b:31:83:c8:d5:1f:9d:d5:a4:e1:e4:4f:b0:5e:b5:4f:
         a1:ec:83:a8:1c:01:9b:36:8b:33:5b:63:11:3c:46:d9:cd:b5:
         51:e8:5c:8a:67:e5:89:1f:a0:7a:6e:8f:74:7f:53:f7:92:11:
         90:51:d6:b0:fd:79:85:3f:89:b8:30:78:63:6f:49:70:2a:c3:
         27:a8:c3:b8:ec:62:c7:8f:a5:c4:5a:29:e4:c6:e9:8b:56:e9:
         61:c1:db:ce:35:61:4c:f4:c7:e3:5f:e6:33:ff:b4:20:9b:77:
         ce:40:f1:73:34:64:75:03:fe:0f:85:02:49:b8:57:1f:df:da:
         36:3f:83:e1:f4:ac:67:13:9e:85:d7:8c:bd:dc:00:f1:d9:72:
         ef:73:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:50:10 2025 by rpki-client