Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a352e6-2518-3da9-ad23-a4e0b87ed4e7.roa
File:                     65a352e6-2518-3da9-ad23-a4e0b87ed4e7.roa (raw, json)
Hash identifier:          kl3pU54Y9umN7X/pffFg24sUN2xPMInOEqHYSuehylY=
Subject key identifier:   9F:BC:BC:98:21:37:C0:9A:D8:28:65:F0:B0:33:4E:0D:EE:6D:E2:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D93253AA447CC9BA0C50719C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a352e6-2518-3da9-ad23-a4e0b87ed4e7.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     3855
IP address blocks:        199.172.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:3a:a4:47:cc:9b:a0:c5:07:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=300f8337-2928-4c0b-883b-3d3b2a45a989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:b8:8b:d5:c1:27:ed:f4:48:1b:6a:da:ce:
                    ee:2e:79:10:b3:ac:d1:48:68:8e:84:83:d4:87:ee:
                    b8:80:0d:37:d0:d4:2a:0e:01:db:d7:b7:55:58:4e:
                    0f:c8:42:7d:bf:7b:12:48:1e:c6:b1:1c:ef:ee:f8:
                    05:2c:33:93:8a:32:9d:a2:d1:0f:e7:17:aa:bd:e7:
                    1e:c0:7f:bb:59:23:15:f3:2b:c8:dc:a6:ed:31:4c:
                    94:ef:1d:8f:f5:cf:c2:1a:db:d5:82:82:c6:6a:2d:
                    31:e1:15:c8:05:5e:b0:85:2c:ab:18:a9:3c:ed:87:
                    df:3f:e2:02:47:c6:44:a2:02:5b:b5:1f:85:9b:25:
                    dc:24:cb:f3:77:49:86:9f:24:8e:06:f3:a9:4f:79:
                    46:17:1c:0c:4d:99:6c:2d:e6:46:91:79:a1:f3:e7:
                    09:e1:f7:48:a5:f3:08:9e:8c:14:42:cd:d7:70:f4:
                    c2:05:cb:cc:ac:df:55:54:3f:61:cf:24:ee:fe:0c:
                    34:8d:e4:13:c5:bb:1d:84:27:aa:79:98:2d:6b:98:
                    85:4d:f7:f4:3f:9d:2e:90:0e:77:b6:e9:ee:9d:47:
                    04:12:69:a9:31:f2:7c:0d:9d:fc:53:25:f9:88:71:
                    99:7f:fc:a8:9b:03:15:0f:15:82:17:4e:b4:95:2c:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BC:BC:98:21:37:C0:9A:D8:28:65:F0:B0:33:4E:0D:EE:6D:E2:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a352e6-2518-3da9-ad23-a4e0b87ed4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:0d:f4:64:cb:99:9b:d1:6a:e5:44:39:61:7b:4d:ca:9a:
         a0:76:c0:9a:26:6a:93:5c:f8:36:e8:cf:21:be:fe:d3:54:16:
         a1:4d:36:5a:d7:ba:de:bd:85:79:03:50:4a:55:2f:df:18:a6:
         cc:6e:3b:42:4b:d3:4a:28:a7:85:96:99:47:71:ff:4d:72:35:
         e1:bb:7c:c1:48:94:15:b0:fa:b9:98:22:13:5a:72:f0:c6:7b:
         69:23:24:23:f4:27:9f:c9:ff:4c:a2:a1:ce:ac:94:bb:dd:27:
         07:aa:03:cf:39:33:f1:c7:e1:85:eb:17:ee:02:f0:6e:01:67:
         b4:98:d2:54:cf:5f:9d:78:c9:44:30:f9:50:ad:4e:8e:43:42:
         95:63:9f:b1:f9:dc:c2:4e:01:09:71:93:8a:e7:c4:ad:45:ce:
         1a:9d:6e:91:92:75:87:42:c7:0b:80:3b:25:29:11:04:43:64:
         01:bd:da:dd:d8:59:5f:4b:67:05:e6:d3:1e:97:2a:9f:1f:f1:
         72:1c:88:24:b0:3a:f5:9d:3c:67:74:21:79:8e:a3:03:61:8a:
         1f:8a:64:33:1f:a3:e1:6b:1c:3a:2e:fa:ac:e8:ec:11:51:ed:
         fd:7a:60:c5:11:a4:4d:ec:19:7c:d6:bd:b3:85:e8:b7:d7:a1:
         bc:6e:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:07 2026 by rpki-client