Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c163d11d-f17a-3124-9020-36626b344088.roa
File:                     c163d11d-f17a-3124-9020-36626b344088.roa (raw, json)
Hash identifier:          RypS81yMi1AO8BxJ3cStChJdhZSxq82QUTtfGv6HSoY=
Subject key identifier:   68:07:15:FE:37:2D:FF:43:95:3A:22:C9:AD:5A:FD:6F:49:D0:82:F5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B35516270C5B2A435600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c163d11d-f17a-3124-9020-36626b344088.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     3593
IP address blocks:        199.224.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b3:55:16:27:0c:5b:2a:43:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=0825a312-7277-4d4d-bffc-c0ee58addef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:d8:8d:bb:22:f9:c5:e9:f5:98:82:86:42:
                    8b:a7:1b:9e:76:25:99:55:db:95:8a:2d:95:32:1d:
                    45:91:57:ad:6c:57:e3:5f:86:90:57:7a:b5:07:af:
                    c2:ca:32:ca:d4:34:aa:87:53:c3:92:18:6f:85:1d:
                    14:b5:84:8a:0d:e4:a6:d3:85:59:8b:7f:cb:18:0e:
                    ae:4d:28:bd:9f:c7:4b:6c:a7:4c:d0:6d:01:66:07:
                    0d:c2:45:30:1d:73:42:7d:eb:99:82:d7:4c:5b:3f:
                    d2:fa:0e:8b:80:28:1d:86:b8:52:1a:16:41:88:f0:
                    f4:c1:2d:d8:bc:9b:12:cb:78:64:67:ef:47:df:6e:
                    16:59:de:51:b1:29:d7:66:43:86:62:ad:7c:fe:c5:
                    f2:92:c6:57:f1:c7:0b:0f:3f:d3:65:5c:e2:19:00:
                    09:f5:21:82:b5:58:d0:19:8c:61:20:fc:1e:1a:22:
                    ad:79:62:37:65:6e:48:04:4a:6b:dd:d0:31:c8:72:
                    08:d3:db:57:f8:fd:37:1b:63:be:af:11:a2:ae:ac:
                    19:53:25:8c:a1:37:00:89:35:0b:d1:ac:d0:bf:a5:
                    34:c5:78:9a:3f:19:73:42:a0:a8:d6:77:d0:c9:82:
                    69:d6:f3:22:91:90:be:bf:ce:1a:96:a8:3e:21:36:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:07:15:FE:37:2D:FF:43:95:3A:22:C9:AD:5A:FD:6F:49:D0:82:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c163d11d-f17a-3124-9020-36626b344088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.224.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:3e:27:e0:df:1d:3b:a7:b3:84:6c:e3:4e:e9:0c:9a:7d:
         23:1d:2a:53:58:f5:19:e0:42:1d:87:ba:34:af:87:50:45:00:
         0c:1a:1b:3a:a2:51:e2:f8:a7:f0:fa:03:4f:bf:08:94:e2:a4:
         b7:28:92:f5:06:2f:2f:62:f3:19:4e:d9:61:10:b8:6c:62:b8:
         be:80:46:cf:63:a3:68:4a:0f:c4:c3:b3:92:ea:0e:23:92:da:
         d4:09:19:54:c2:90:8c:80:26:05:5d:c5:a1:c3:62:c0:c1:38:
         dc:04:62:76:48:1a:e6:c4:d9:a3:e9:8e:23:d8:8c:65:c2:4b:
         a4:48:ee:d0:e0:0d:21:5f:c0:62:ea:be:bc:85:da:6d:18:2a:
         5c:1e:47:12:a2:93:4a:c0:ec:bd:4a:a2:4c:9f:2d:6c:40:13:
         cc:e9:0b:f5:b1:b6:08:d0:be:76:c2:63:e6:75:fe:b7:ae:e0:
         a1:bf:fe:09:6f:f8:18:e1:b1:66:eb:35:2b:b1:f9:df:87:bb:
         dd:1e:a5:78:63:32:f7:ff:9c:ff:da:b7:e4:47:f8:77:17:0d:
         6f:f8:c6:85:52:0b:c2:81:f4:f8:aa:51:40:d6:96:4c:09:19:
         98:93:f3:62:a8:f3:80:de:34:b5:dd:c6:a8:f4:81:73:5f:f8:
         66:d1:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:48:42 2026 by rpki-client