Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258701ad-f576-37a5-a88d-645f0951641c.roa
File:                     258701ad-f576-37a5-a88d-645f0951641c.roa (raw, json)
Hash identifier:          3dY5HJ31goG1Lu+C8UJpG6Tv7VacBsB26uc65HrVSHI=
Subject key identifier:   E8:93:F8:EE:F7:04:38:C1:C1:AD:B5:01:8F:BB:6A:6B:34:B2:89:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D93256279BADC00061BE19EA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258701ad-f576-37a5-a88d-645f0951641c.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     3855
IP address blocks:        199.172.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:62:79:ba:dc:00:06:1b:e1:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=6ed81190-eb47-4458-93aa-c8d189cc9d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:43:25:bb:fa:6f:89:52:75:6b:6a:89:52:d4:
                    c0:88:5d:04:65:67:76:f2:2e:f0:62:5d:98:74:9a:
                    2d:55:d0:b7:d0:53:bb:2e:67:08:3c:a5:b3:93:36:
                    90:c7:c0:b9:24:28:4d:cd:9b:c4:ce:06:76:b9:bc:
                    d6:c4:6c:d1:1f:fc:01:cf:ac:7a:96:96:49:af:2a:
                    60:b9:02:57:cd:00:05:ca:d3:b4:13:6d:50:5e:52:
                    a9:c6:ce:b7:0c:7d:e1:82:e4:c7:44:e1:2b:ad:39:
                    c2:25:43:a5:0c:1e:2d:38:24:d0:ec:f6:db:c1:1f:
                    cf:a0:59:06:1b:ad:b9:55:57:69:39:be:06:ed:10:
                    e1:64:5b:e4:1c:22:99:21:9d:cc:d1:79:b9:40:8c:
                    26:72:58:a5:8e:86:33:94:ab:1d:38:de:b0:bf:e8:
                    c7:ca:4e:75:29:25:cf:50:c9:d5:14:e2:a6:5a:d5:
                    e8:74:b8:2c:ef:9a:f7:0b:97:aa:56:82:60:83:35:
                    a8:29:61:a7:95:cf:73:97:f7:7c:7b:33:1e:78:11:
                    87:91:82:ac:4d:97:87:bf:61:19:6c:d5:e3:b5:87:
                    00:00:91:c9:39:f2:27:dc:1d:8f:bc:cf:f4:23:0a:
                    82:2d:ce:e7:8c:bb:3a:26:b0:64:e1:b5:53:41:0b:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:93:F8:EE:F7:04:38:C1:C1:AD:B5:01:8F:BB:6A:6B:34:B2:89:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/258701ad-f576-37a5-a88d-645f0951641c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:71:53:c6:89:bf:7d:81:8e:59:3b:5e:56:9f:8d:1b:b8:6d:
         0c:37:43:86:9f:06:85:cb:bf:7d:13:11:65:ee:02:4a:89:f3:
         46:9b:43:b0:9a:37:5a:cf:9e:55:cb:63:37:5d:2f:d3:5b:97:
         4d:42:65:0a:36:0b:10:ff:b1:58:33:11:b1:6d:5b:c7:3c:bb:
         c8:b5:da:8e:c5:fc:42:a7:86:4a:60:a5:a2:06:a7:c3:83:ed:
         08:53:da:12:bd:37:e4:bf:76:10:21:06:b3:fb:89:3e:fe:48:
         ea:65:22:26:96:52:30:63:86:08:57:84:e2:49:a4:ca:bc:02:
         c7:4e:56:45:2f:a6:05:1f:16:69:4c:56:8d:d1:ee:36:e4:3f:
         22:92:4a:e0:44:09:04:80:96:89:ec:0a:9c:99:9d:34:c6:a7:
         0c:3f:74:3e:66:e3:ec:26:fb:bc:6a:90:a9:f0:11:1d:b3:97:
         ad:0e:78:27:4d:91:89:3c:0c:7d:82:33:a1:fc:c6:2a:54:1c:
         3e:c8:5e:dd:5b:7d:8c:2f:a6:ed:f6:b8:10:a6:28:9b:78:e5:
         b6:18:68:f3:bc:b9:75:70:54:b5:da:3f:a3:af:3c:1e:85:2a:
         eb:05:f8:97:13:7b:37:dd:50:29:b8:ba:fe:1f:c4:fb:ff:95:
         b7:53:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:03:12 2026 by rpki-client