Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0adbca36-f7e2-3fc2-b085-482c2a557fda.roa
File:                     0adbca36-f7e2-3fc2-b085-482c2a557fda.roa (raw, json)
Hash identifier:          zZDSHByi1At40G0ElPez45lEPXdMVSaZStwl346R5YA=
Subject key identifier:   76:14:41:3E:FC:DC:6E:8D:4E:82:AC:F2:E8:1A:83:E7:F6:33:E7:A9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9325649A8AB35111C464EEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0adbca36-f7e2-3fc2-b085-482c2a557fda.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     3855
IP address blocks:        199.172.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:64:9a:8a:b3:51:11:c4:64:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=cea7ee29-ab4a-40a5-a4b9-f554327fa9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:47:ae:64:e3:83:7a:a7:31:db:f8:f8:4b:
                    25:1a:06:11:79:cf:a4:33:63:b1:6a:95:a1:aa:db:
                    f6:7c:a3:a9:11:75:46:89:a8:5d:17:0e:57:ba:63:
                    83:7d:7b:74:cb:68:c0:a1:a2:8b:e0:38:b1:da:13:
                    80:a3:59:d5:0d:24:25:f1:fc:01:c0:71:be:38:ba:
                    ad:fb:41:79:e3:07:2e:b8:f8:b3:89:09:24:0b:d4:
                    02:b0:98:0b:46:0d:b0:05:93:03:a3:c9:9b:78:bb:
                    a8:05:c9:3c:d0:3b:40:15:b3:a4:2c:c2:85:89:43:
                    ac:f3:00:a3:a0:73:59:fc:54:99:63:65:f2:8e:3d:
                    2a:d0:0b:7a:f8:84:1c:8b:c8:15:94:54:0a:ee:4e:
                    0f:f3:35:04:03:11:83:1b:10:75:62:23:ff:b0:f0:
                    c8:4a:8e:d5:9f:74:36:fb:9d:b0:f7:04:24:4a:28:
                    af:30:6b:e6:4b:28:11:88:67:56:34:07:98:13:17:
                    58:04:3b:12:d5:4f:13:2e:a9:dd:41:5c:ec:69:4d:
                    95:00:5b:72:66:8e:9f:43:53:e1:19:5f:b7:aa:28:
                    d8:a6:a1:1d:eb:25:ec:2f:f6:2a:d6:af:e7:5c:7f:
                    92:95:ef:0c:61:47:77:7f:c4:91:37:73:5f:e2:6c:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:41:3E:FC:DC:6E:8D:4E:82:AC:F2:E8:1A:83:E7:F6:33:E7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0adbca36-f7e2-3fc2-b085-482c2a557fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:24:09:12:6e:6c:91:96:ac:39:1a:09:d6:6f:11:f4:5e:81:
         db:b1:5c:8a:b0:40:44:c7:57:3b:8e:ff:4a:18:6d:4d:3d:e8:
         4c:ea:dc:6a:de:77:7c:9b:b4:8a:87:3b:4d:fa:7d:df:64:f2:
         26:f0:29:19:a1:8a:d3:05:a3:a9:40:d0:84:d7:e3:f1:5d:61:
         5d:93:3c:fe:84:d5:5e:22:77:0e:36:c0:df:8a:37:49:15:cc:
         8a:8c:c3:c9:02:e9:b9:8c:d7:f0:8c:94:79:b7:4c:f8:36:17:
         9d:86:5f:24:1a:ab:8d:46:50:a8:93:3a:4c:e2:49:d3:84:eb:
         e9:bf:5f:25:25:0e:f7:97:d6:d0:27:64:72:46:ac:6e:b7:ea:
         70:9e:de:e0:7e:a6:b1:e1:ad:85:e0:06:a9:e2:42:e3:38:55:
         88:38:fd:40:92:d5:08:34:e7:ea:0c:3b:f3:04:70:a8:22:c2:
         d3:5d:65:cf:42:d6:0c:15:61:bc:54:4f:10:1a:31:c4:98:d7:
         3f:99:54:f0:e9:a0:c0:c4:33:75:c8:30:ff:b8:b3:43:2a:ae:
         f2:04:51:37:4e:d9:c3:b3:2c:da:80:d0:fc:03:75:72:1a:70:
         df:03:b1:2a:ba:e6:fd:8c:97:de:fa:ae:66:74:e7:81:c9:a3:
         79:6d:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:41 2026 by rpki-client