Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f36d97-b5ec-3257-9b58-38d02c0ae48d.roa
File:                     10f36d97-b5ec-3257-9b58-38d02c0ae48d.roa (raw, json)
Hash identifier:          bd0G6Li5MG2gXI8S2l2JseRFptbcFtc+Fq3dbql+c7Q=
Subject key identifier:   B0:BB:79:7A:89:63:2A:16:C8:3A:99:31:CE:6F:4A:41:C7:5A:9D:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD4514019D22B76F11EEC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f36d97-b5ec-3257-9b58-38d02c0ae48d.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     64288
IP address blocks:        216.149.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:45:14:01:9d:22:b7:6f:11:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=0294a95f-53aa-4bb6-82d7-ef57961dab75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:dc:f7:d5:da:cf:d5:70:3c:c1:6e:ec:ad:
                    f4:cc:ed:1e:35:c0:e9:a7:97:98:d8:c7:d0:78:32:
                    b7:89:9a:5f:2b:fa:ce:e6:6a:a8:6b:06:ee:52:41:
                    eb:20:8b:34:e3:cb:ba:64:7b:60:35:fd:9b:f1:13:
                    c5:4c:45:a5:24:da:cf:cc:33:2f:eb:6e:3c:10:22:
                    92:53:e2:f1:3d:b9:19:f4:aa:c5:43:dd:44:df:42:
                    2a:74:6b:45:73:50:b8:82:a1:5e:54:21:38:27:7e:
                    dc:3f:27:1a:e7:a9:8b:8a:0f:45:04:45:b5:93:7e:
                    5a:d1:30:cc:17:28:e4:78:be:b9:81:e9:07:b0:7a:
                    f4:66:34:fe:e1:16:52:c7:22:70:fe:82:9e:11:a4:
                    25:b5:13:d4:16:df:f5:10:e0:0d:7f:0d:8c:cc:34:
                    90:e8:c7:30:a5:99:db:49:9c:00:d5:88:6a:c6:ed:
                    db:02:07:4c:04:fb:48:b7:7a:1f:dc:b9:d2:26:8d:
                    a2:fe:f4:bc:66:57:84:ef:ff:d9:46:4c:7e:58:f4:
                    32:dd:02:3a:26:8d:74:63:82:8c:d2:af:55:68:8d:
                    92:06:27:c7:8e:95:13:a7:da:66:6e:b5:8f:ee:b9:
                    5d:99:99:5a:df:36:94:21:7b:76:48:6c:34:97:73:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BB:79:7A:89:63:2A:16:C8:3A:99:31:CE:6F:4A:41:C7:5A:9D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10f36d97-b5ec-3257-9b58-38d02c0ae48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.149.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:03:71:d8:93:d5:54:3a:a9:b5:af:31:29:34:98:fa:da:87:
         16:e0:20:ed:de:cd:2a:61:7f:12:1a:30:24:9a:4f:5c:02:9f:
         af:70:7b:7f:fe:c8:9c:38:62:2d:24:28:f3:f1:05:fb:a7:c7:
         32:3a:a0:45:6d:73:c6:7f:43:be:eb:0d:4c:65:58:54:2f:6e:
         b7:71:44:df:36:0d:9d:ee:57:82:d2:4e:b9:43:01:20:e9:5b:
         79:03:5d:9d:c8:1a:d9:d9:04:18:cc:6e:47:d2:a3:7a:f4:d8:
         f9:77:93:ea:cf:07:c6:54:d1:a8:5a:0b:f2:7a:19:ad:37:0a:
         c7:f3:64:37:55:6c:40:20:75:aa:2b:c4:6d:6c:03:7e:38:42:
         a8:02:39:79:1d:ff:eb:ad:b6:68:71:81:70:ad:7f:de:85:3c:
         bc:76:f8:e9:39:7a:27:f1:03:51:77:75:0f:94:d4:5f:0b:90:
         bd:fa:4b:c7:53:b8:87:0e:5a:61:e3:f7:72:57:71:46:19:4e:
         8f:f7:7e:c5:40:8f:e3:2a:1f:78:81:91:0c:23:1d:ea:be:b0:
         7b:7c:e2:9b:52:13:a1:38:d5:25:57:10:75:5b:a7:88:19:4c:
         09:1a:0d:5c:0a:85:a1:9b:16:35:cf:91:67:bc:16:0d:45:4b:
         d1:a9:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:40:36 2026 by rpki-client