Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab86a01-9cd5-3e1c-94a0-6b9b8d995150.roa
File:                     0ab86a01-9cd5-3e1c-94a0-6b9b8d995150.roa (raw, json)
Hash identifier:          Mdbm2Rp5ppzHztzQfDb/HLqo3tvl88woiVTuZk549q4=
Subject key identifier:   21:26:48:7D:69:58:4A:F2:8A:2D:4B:6F:09:18:FC:A2:4F:7F:77:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4989D83CD9BFA10B860A7C20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab86a01-9cd5-3e1c-94a0-6b9b8d995150.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6984
IP address blocks:        63.24.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:d8:3c:d9:bf:a1:0b:86:0a:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dc20cc0b-e128-4caf-80d4-4f08c23d8bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:80:0d:57:42:34:d8:8b:de:71:4f:b4:c8:
                    b7:e8:34:28:0f:d7:a4:04:65:ab:26:83:30:b5:92:
                    41:d3:e6:9e:20:ae:6e:a7:3c:f6:a5:17:65:b6:b0:
                    4f:66:29:76:5f:7d:83:06:0a:be:ec:c8:ec:ba:33:
                    e5:0d:ba:cf:62:e2:77:83:d1:2b:3f:15:31:90:78:
                    01:82:6c:6a:d6:cb:4b:e5:1a:88:97:9c:93:0c:97:
                    cb:b5:ae:70:db:06:2b:45:9d:8c:41:55:f9:fb:2b:
                    52:71:d3:f3:67:18:d6:03:6c:1e:2e:e7:86:50:fa:
                    3d:97:c8:a5:d0:91:f2:57:db:0a:c8:e8:7d:b8:da:
                    c8:fa:c5:07:9f:2d:d1:5e:0d:ee:c5:01:6d:42:3a:
                    91:a7:4f:ea:ed:5a:d9:bb:d7:36:50:0f:fb:de:8a:
                    d9:88:b9:7d:4d:d7:c8:77:75:04:7d:80:eb:b0:5f:
                    c1:3b:04:10:e1:af:74:cf:65:d6:8c:d2:32:9d:d5:
                    81:af:7f:56:14:1a:16:aa:bf:db:b4:e7:bc:86:77:
                    61:16:00:65:3e:88:f5:0c:83:58:47:79:8d:d7:1c:
                    e4:9f:fa:d0:a8:d6:ec:d8:da:3e:6b:83:85:ee:1a:
                    35:38:8a:d7:b1:4e:fd:d6:c2:05:53:97:f7:92:88:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:26:48:7D:69:58:4A:F2:8A:2D:4B:6F:09:18:FC:A2:4F:7F:77:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab86a01-9cd5-3e1c-94a0-6b9b8d995150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.24.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1a:8f:a8:53:00:d3:72:77:fa:b3:a5:b3:9a:20:36:27:39:
         14:67:2d:89:f9:67:73:67:4f:1d:67:c8:d5:e7:e2:ed:87:86:
         9d:00:fc:90:db:47:8a:f3:0b:f9:a0:7d:ff:63:47:05:38:c6:
         50:e3:10:6f:21:09:e0:50:e5:4d:de:1f:ce:bd:bd:eb:8f:24:
         5a:59:a9:1c:63:c1:fc:2e:20:f4:15:04:9c:96:d0:5b:87:34:
         a2:b7:28:4f:60:48:20:1d:91:4a:05:b8:63:ba:82:91:20:57:
         04:03:c8:00:02:2a:16:70:da:04:66:4c:63:23:08:53:c0:d4:
         c8:9f:08:e1:c5:de:f8:de:56:33:c1:25:fc:8c:0f:4a:84:ca:
         4c:c0:6e:b8:54:e8:de:f0:a4:9b:d9:21:24:c3:19:96:7e:f7:
         0d:dc:a3:c8:d8:0b:90:1f:61:3f:08:53:c3:94:ca:6e:cc:7a:
         a8:04:f1:04:d6:f0:2d:6c:fa:fb:34:37:23:11:68:b4:ce:c8:
         c0:2d:a3:aa:1f:ac:7c:01:67:dc:4c:d7:9c:b8:b2:0c:1e:6f:
         53:9b:aa:13:3c:1a:e7:41:46:d3:48:09:74:87:13:5d:bb:ce:
         e7:c3:a2:e5:2a:bb:83:da:47:db:b0:47:b2:e1:fd:4a:fe:70:
         4c:ae:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:20:20 2026 by rpki-client