Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30ef0f51-3dbc-3d6a-bdbe-a63e7211f53b.roa
File:                     30ef0f51-3dbc-3d6a-bdbe-a63e7211f53b.roa (raw, json)
Hash identifier:          xu9gbRBQIPo74/YGt4R90W/yH73v+U6x+IvPS4D1tKg=
Subject key identifier:   79:58:A0:74:84:F7:8B:C7:2E:6A:1A:F4:48:76:1A:61:C9:4C:70:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D39CF7845D2B7B01361BFB660
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30ef0f51-3dbc-3d6a-bdbe-a63e7211f53b.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     401729
IP address blocks:        208.222.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:78:45:d2:b7:b0:13:61:bf:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=6ebff4dd-aedf-4958-93f0-22023651c5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:41:c5:ec:78:c8:35:09:b7:b3:49:d4:7a:
                    72:7c:71:dd:2b:5d:89:c2:8e:db:02:97:5c:42:18:
                    5e:22:be:06:85:c4:26:5e:8b:6d:97:4e:25:03:c4:
                    c5:aa:4c:94:8d:54:b4:8b:87:34:5c:70:13:3f:c3:
                    39:6b:2e:f3:97:ad:b6:26:0d:52:5b:ed:ec:f4:df:
                    56:3e:31:46:ea:c1:06:93:f3:c1:a8:bb:0f:c2:05:
                    99:68:70:ca:b2:93:20:3a:bf:f9:56:70:ce:69:98:
                    ab:58:44:48:5a:e7:ab:9c:cf:40:57:f6:dd:9a:87:
                    79:26:ae:ea:cd:22:72:0b:c8:f6:14:f0:da:69:e3:
                    62:58:9d:92:d4:58:32:3e:c3:56:fa:61:e3:95:cc:
                    37:84:92:2a:b4:a7:09:2f:0b:fc:84:34:b8:37:5c:
                    5c:34:3e:30:68:6a:d4:10:a9:be:49:f3:b4:52:c7:
                    69:57:4e:c2:6d:c4:87:8d:2f:44:d0:07:1e:b6:c6:
                    9e:64:97:7c:30:0e:44:21:fd:ce:3f:47:c2:d8:4d:
                    d5:52:70:b9:d5:41:9d:26:69:34:9d:14:26:c9:26:
                    55:ad:4e:bb:61:47:7e:05:3d:de:2d:7d:15:d9:25:
                    dd:5d:9c:d0:17:98:6f:bc:b5:29:b9:ae:af:3d:b6:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:A0:74:84:F7:8B:C7:2E:6A:1A:F4:48:76:1A:61:C9:4C:70:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30ef0f51-3dbc-3d6a-bdbe-a63e7211f53b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.222.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8d:e9:df:8d:78:0e:80:a5:6b:84:ac:7d:a3:6b:49:50:d9:
         7d:92:ae:c8:bf:19:39:63:7d:d5:be:81:3c:2b:e4:7f:f9:1c:
         97:04:ff:7c:ae:e7:95:7b:6c:89:a0:fd:f2:20:01:ee:30:80:
         bc:f7:40:6f:b1:fa:cd:9e:95:ea:1a:c5:68:61:ac:0b:a5:30:
         eb:30:c0:96:67:66:cd:5d:01:a2:83:07:7f:0b:85:66:3c:dd:
         23:a0:a0:9c:b9:6a:04:15:2c:7c:ba:6c:9f:f4:ea:39:9a:ba:
         a6:25:c7:7b:4f:19:00:ce:aa:6b:a0:b2:45:ea:75:51:c1:13:
         1a:93:8a:45:0f:fc:dc:e3:3c:09:90:40:9c:d9:83:35:a2:58:
         e9:e7:b6:00:93:83:4f:88:0e:96:82:39:51:98:3c:5d:2a:8e:
         fe:83:b5:47:1e:d9:e5:62:ff:3a:10:86:3c:be:6b:c2:27:b0:
         ff:08:bd:a1:43:0e:13:28:09:e5:9d:a2:2c:cf:c1:da:47:a7:
         23:c5:8e:98:67:b8:e2:72:ca:27:bf:57:b8:87:d2:52:42:1d:
         37:c2:a5:b1:b4:1f:8e:03:21:89:64:14:ee:a0:9c:a8:c5:d1:
         87:a1:76:12:d2:ca:bb:a3:db:1b:db:b6:f0:62:51:55:6e:52:
         10:71:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:01 2026 by rpki-client