Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/468e8ded-9dee-37e6-a01d-03a0cf4bba37.roa
File:                     468e8ded-9dee-37e6-a01d-03a0cf4bba37.roa (raw, json)
Hash identifier:          JQTqeGp/cEE9itMR/DIzssmGZZnqhx7JHK4b4EdtpIk=
Subject key identifier:   5A:51:2F:F1:57:A6:26:6E:01:58:1B:85:B2:83:D6:4C:21:12:CE:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4972B78C1D54199A0200AA40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/468e8ded-9dee-37e6-a01d-03a0cf4bba37.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        198.226.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b7:8c:1d:54:19:9a:02:00:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7d9aa692-2d2e-4645-8729-f303562bd280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:04:07:0c:84:90:64:9b:ea:69:eb:24:7b:
                    bd:05:ec:a8:9b:cb:6e:a6:22:4e:24:d3:95:c2:3f:
                    74:f3:d1:72:59:b2:e8:e9:6c:cd:53:e4:c7:e4:b6:
                    55:88:8d:e2:8e:83:9c:f3:bc:91:f0:df:58:13:fb:
                    c5:b9:4d:c2:e2:89:33:39:b0:da:44:56:fe:25:02:
                    8f:c1:bd:fb:bf:a4:0f:f9:79:45:53:a3:5f:42:9c:
                    eb:47:27:e0:c3:6a:4c:61:99:14:b0:0f:ac:a2:df:
                    7f:d0:46:16:6d:25:6b:ee:78:be:6e:fc:92:b1:47:
                    df:71:5c:b6:51:6e:e0:54:df:6e:a6:6c:06:01:92:
                    54:b2:f7:e8:78:d9:46:74:85:de:0d:bf:b2:45:6a:
                    bd:25:68:0c:13:e6:00:0b:8a:cc:46:bf:53:45:d7:
                    11:e8:b1:3b:71:a1:10:9d:93:76:62:7a:45:8e:73:
                    88:2c:29:4f:6f:17:e0:93:4d:2e:b3:0f:f5:4b:5d:
                    46:c2:55:d5:6c:17:43:3c:3d:ff:af:f0:36:e0:2b:
                    2a:f2:d8:ad:c7:2e:d4:ae:3c:5b:29:f1:9d:13:06:
                    37:7d:95:e8:8d:0b:b2:c8:f1:15:48:ac:d3:47:22:
                    09:eb:b1:64:3a:d2:77:17:31:36:ac:ee:08:e5:69:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:51:2F:F1:57:A6:26:6E:01:58:1B:85:B2:83:D6:4C:21:12:CE:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/468e8ded-9dee-37e6-a01d-03a0cf4bba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.226.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:92:06:49:7f:41:c1:c5:49:a9:87:32:a0:88:e4:49:b7:8b:
         b4:00:5a:b9:f1:58:17:1c:00:ca:9b:6f:9c:65:6f:7e:bf:d7:
         6e:9f:8f:c7:3a:c4:7b:fe:6e:6c:7c:b6:06:41:db:13:57:70:
         fe:1b:96:b3:79:e4:9e:17:7a:b2:10:de:99:28:5c:8b:4f:1b:
         07:65:31:f2:2f:7d:5e:7e:cd:a8:6f:e0:65:83:aa:1f:7b:08:
         c1:1f:75:66:75:6c:31:57:62:99:ac:85:02:68:90:d6:91:32:
         c6:34:60:9e:c6:59:a1:47:16:b1:f9:26:5f:be:1e:ef:0d:ad:
         eb:6c:78:87:14:bb:44:dd:ca:9c:68:44:55:7e:34:20:5c:a7:
         8f:d6:24:53:b3:c2:7b:5d:d4:47:f1:05:ae:63:45:26:cb:0d:
         20:d4:16:5e:b4:04:c5:04:02:d8:d3:b8:93:c2:d5:33:f9:85:
         67:3d:a8:1f:62:a4:6d:ce:4c:c0:25:0f:a0:67:23:b3:7a:73:
         d5:33:d6:77:f9:52:2a:bd:43:47:b0:43:2a:53:c8:08:95:a4:
         c7:05:60:62:5d:98:86:49:a0:bd:27:3b:ea:6b:55:95:57:c1:
         ca:e8:1e:d3:39:d0:f2:78:4c:71:8e:5c:1c:94:9e:4c:05:d0:
         73:c9:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:23:12 2026 by rpki-client