Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f716ffc7-edd9-364f-9f68-0898604bc581.roa
File:                     f716ffc7-edd9-364f-9f68-0898604bc581.roa (raw, json)
Hash identifier:          E7LW7D8or9SgMcEXseatDpGf0/to7sQwmY0EMjNoYaU=
Subject key identifier:   41:CC:1B:CC:C9:88:25:AF:59:36:AA:56:61:C8:AB:10:B7:08:17:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E736A3DC115AE91033405D680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f716ffc7-edd9-364f-9f68-0898604bc581.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     3855
IP address blocks:        199.172.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:3d:c1:15:ae:91:03:34:05:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=a7645080-94dd-4e33-8113-5f395ab545aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:36:dd:a4:bb:a6:02:80:9c:ed:fb:13:8e:
                    eb:c7:2f:70:f9:77:fc:3c:7a:c1:0a:d4:84:09:af:
                    b2:0c:b6:0f:52:9d:bf:c6:33:be:e7:78:de:b3:71:
                    bf:30:64:2f:90:b5:a0:8d:1a:d6:5e:73:75:84:f4:
                    d6:5d:72:11:c2:d9:19:d9:c2:7c:a6:07:a6:44:33:
                    9a:94:a3:72:7d:25:d4:88:05:c8:6e:11:0c:e7:a4:
                    f6:89:02:4d:97:9b:e4:2a:c2:d3:4f:d2:a0:cf:61:
                    5e:ec:65:8b:76:3f:24:4e:78:11:a6:91:b9:3c:9a:
                    40:9b:d3:84:26:92:ac:a3:b8:31:3c:26:60:ae:20:
                    2c:3e:75:17:3e:79:d3:e2:0c:cc:2f:69:a7:5b:4a:
                    38:27:2c:85:5d:d4:79:49:dd:26:dd:8d:78:95:c4:
                    0b:14:46:56:73:8c:43:92:12:3d:d2:83:bb:ec:63:
                    80:ae:7f:7f:5f:f3:56:05:a0:59:b4:85:53:9a:69:
                    ed:0f:84:2a:0d:64:fe:be:95:ae:6b:bb:d5:94:11:
                    69:2c:75:09:3e:1e:60:4c:47:e4:9d:43:b1:3c:5f:
                    6d:71:75:2d:1f:6c:6a:60:fa:98:6b:b2:a5:67:9c:
                    3d:38:a7:91:61:19:34:91:76:01:86:b6:48:ec:50:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CC:1B:CC:C9:88:25:AF:59:36:AA:56:61:C8:AB:10:B7:08:17:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f716ffc7-edd9-364f-9f68-0898604bc581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:09:52:e3:3d:11:95:de:b8:f3:8a:59:ec:2b:50:a9:4d:5a:
         f3:9e:ec:52:93:11:9b:67:b7:77:fd:ee:23:e8:cb:26:82:86:
         24:5e:cd:1e:5e:cf:ab:09:31:84:93:a3:7d:33:d3:bf:4f:15:
         26:21:f2:f9:8b:2b:fa:31:57:00:60:da:de:36:ff:34:d7:ce:
         72:0c:f3:a4:52:3a:1c:2e:a0:8d:db:26:7e:dd:79:8a:99:d7:
         78:71:cc:85:cb:c7:99:fa:d8:57:98:c5:59:a8:a9:af:6b:2a:
         be:0b:16:4d:22:49:64:f9:91:c2:be:4c:d1:55:eb:ae:43:94:
         aa:be:cd:89:d3:1f:60:4c:fd:53:66:df:97:5e:87:d1:64:a4:
         da:e3:85:93:50:c2:3d:e2:f4:b6:89:b8:35:2f:bf:fd:38:b0:
         f5:31:6d:ff:0f:c9:f7:aa:e9:c8:fd:7c:19:99:fb:0d:56:0b:
         64:1e:c1:80:da:d2:30:7f:65:03:8c:08:bd:40:6a:72:7f:13:
         ae:a0:8d:34:e4:cf:05:04:d7:bf:3f:40:f2:5c:1d:c8:8c:62:
         f2:12:57:fa:3c:40:9e:61:d5:4a:7f:91:43:a8:00:02:d2:af:
         cc:11:8d:53:6f:6e:70:6e:f8:91:81:62:5b:1e:b3:f7:25:cb:
         c4:80:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:52:54 2026 by rpki-client