Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3f7040b-38ff-365e-a327-4e2d78dcf25a.roa
File:                     f3f7040b-38ff-365e-a327-4e2d78dcf25a.roa (raw, json)
Hash identifier:          xYCCCJoCD6iLVbDgvlMt+DxauH0ZwmPMsvtxBDdito8=
Subject key identifier:   30:BF:0B:6A:A9:1F:B3:42:22:AE:85:7D:74:C1:A0:4B:0D:21:60:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B1014D6FAD0E7D868548
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3f7040b-38ff-365e-a327-4e2d78dcf25a.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        74.45.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b1:01:4d:6f:ad:0e:7d:86:85:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=8ebfbf38-f51a-4e01-91dd-8fc129ef1168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:a2:cc:5a:96:cc:d8:aa:3b:be:1f:7a:dd:
                    83:3d:9f:4c:26:6b:d3:1b:89:7e:a3:b4:97:55:53:
                    88:3c:b9:55:00:2b:b8:71:ee:71:94:8c:56:35:8c:
                    3c:12:83:91:5d:18:fa:ad:62:56:0b:95:4b:d6:7d:
                    cd:95:a8:64:26:34:37:2b:54:d5:82:7a:09:c9:1f:
                    b8:81:87:65:ae:2f:5e:29:d2:7f:9e:0f:f6:37:86:
                    97:d7:db:fc:4d:8f:b4:ed:d1:e5:18:fb:7f:92:68:
                    9d:1e:b9:a6:e0:27:af:64:43:89:1c:5d:86:04:aa:
                    88:2d:1c:25:72:7c:96:f9:69:f2:89:cf:ea:02:cc:
                    0b:df:3f:44:e7:42:52:d5:91:4b:1f:c1:ce:cf:56:
                    aa:86:db:8a:43:90:f7:88:c0:5c:4b:a4:b1:85:8a:
                    53:e7:39:ac:57:61:c5:b1:06:f0:b4:33:a7:46:e9:
                    08:34:e3:91:41:09:be:a3:7f:bb:38:3a:57:b1:41:
                    06:30:71:95:6b:e0:16:8b:c4:59:f2:5e:8b:4d:83:
                    4a:05:78:4f:5b:52:8b:45:14:95:75:a0:9d:ff:4a:
                    59:c1:26:c4:c1:f2:c7:5e:06:06:28:78:bf:2e:ca:
                    e9:27:7a:9f:27:4a:a8:29:a5:d5:1c:b9:92:ac:88:
                    23:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BF:0B:6A:A9:1F:B3:42:22:AE:85:7D:74:C1:A0:4B:0D:21:60:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f3f7040b-38ff-365e-a327-4e2d78dcf25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.45.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:98:8c:dc:4b:41:91:92:01:d9:36:94:e2:12:e2:ad:3c:ee:
         9f:fe:12:47:46:3a:bd:a8:1c:ad:f8:ce:a0:d8:cc:2e:d1:44:
         c6:4b:d3:98:eb:ee:d5:f3:c0:bc:0e:4c:e9:a5:4d:cb:52:f5:
         bf:65:c9:5e:7b:b8:57:e3:9f:da:6c:ce:76:71:91:bd:91:91:
         27:56:68:cb:7c:46:79:31:37:b9:14:00:09:d5:2c:4f:7b:14:
         16:04:51:5c:6d:05:0c:93:25:50:60:c4:6a:8f:03:5d:ee:05:
         8c:71:1e:72:22:2d:dc:e7:6f:3b:e7:5b:cf:95:b1:7b:d9:b6:
         68:fa:b9:be:8f:84:f8:8c:8a:82:1c:ea:59:59:fd:69:1a:8f:
         72:98:f0:48:ed:e5:d5:8d:fe:a0:bf:7d:82:bb:f1:7e:87:69:
         0e:32:04:a2:5e:fa:c9:4a:76:c4:bb:18:6a:b5:e1:17:06:2b:
         1f:ce:eb:d4:89:89:38:ce:e6:fe:16:af:df:8b:53:13:7e:89:
         d0:7f:30:5d:61:f8:86:d7:72:2f:36:5d:c6:ef:87:9c:a9:5d:
         30:01:a1:2e:e6:2f:6e:58:99:86:74:ae:b1:3c:37:07:2c:78:
         6c:1b:ff:3e:95:e3:30:3a:39:3b:fd:3a:24:30:97:cd:ae:f9:
         52:38:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:20:02 2026 by rpki-client