Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
File:                     d5ae9e84-8331-356b-b2a9-0099d0e68482.roa (raw, json)
Hash identifier:          eNeyFayBIkqVwpFmoNfz+8YifGTJcctgM0r6HwBbKFQ=
Subject key identifier:   E6:A2:FF:47:29:C9:BF:5A:7B:AE:15:51:59:A3:8B:16:6B:CC:92:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06725ABF850962180B7B8A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        168.201.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:5a:bf:85:09:62:18:0b:7b:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f0651888-6a49-41f4-a622-54d1909cceb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:79:1d:9b:4d:1d:9f:7f:a0:a9:4e:f2:ae:
                    b0:e7:74:a9:15:6d:c9:d3:49:21:38:a3:a0:14:9c:
                    30:c6:b7:d1:81:b0:64:9b:2d:5b:0b:d9:06:6e:8b:
                    af:ca:bd:8c:d0:96:4b:56:26:2b:13:9a:39:b7:9a:
                    32:2b:5d:45:ba:67:e4:fe:6b:69:f4:5e:82:4b:0d:
                    6c:30:e7:16:44:73:6b:68:db:4d:19:dc:ae:24:7e:
                    c8:f7:1f:0d:24:02:17:02:55:43:97:09:ec:5a:e2:
                    d0:b3:c3:3a:da:3c:32:fb:c5:37:4a:5b:27:31:4e:
                    44:32:61:8d:80:12:9b:f0:cb:fd:56:ec:77:fd:06:
                    b1:47:9f:0c:fa:2c:61:15:50:bc:b0:bf:b4:c9:89:
                    2d:4f:1b:09:fe:45:32:1e:62:51:68:73:c5:67:5f:
                    89:01:38:65:36:48:7e:11:d1:a1:3a:cb:36:f0:f1:
                    45:d4:83:b9:81:01:3e:c4:3c:f6:e9:af:e9:c5:35:
                    ba:c1:ad:bf:37:63:45:be:79:b0:12:0d:14:64:aa:
                    28:0a:0f:ff:e1:75:5c:2d:4c:1d:be:53:08:c4:2f:
                    8e:19:9f:a5:67:83:6d:95:64:5c:87:e2:6e:30:a9:
                    ad:4c:02:4a:46:ab:08:97:65:2f:2d:8a:7e:7a:71:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A2:FF:47:29:C9:BF:5A:7B:AE:15:51:59:A3:8B:16:6B:CC:92:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.201.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2a:40:6c:3f:c5:54:d7:fc:23:0e:b1:a6:da:58:8c:cf:31:
         3d:ea:be:ec:52:06:f7:35:c9:20:9a:5a:d6:c3:0d:61:ec:1c:
         aa:ce:10:e9:f5:ea:bc:f3:a4:f5:c4:6e:2c:a8:7d:71:b1:56:
         36:3b:2f:34:d6:5d:d2:fc:a2:72:cb:f3:f1:9d:f8:7b:9a:34:
         4d:05:90:3a:a3:d8:d3:46:49:93:0d:17:33:a5:a8:09:a4:79:
         87:ba:2b:b3:c7:2b:9c:02:99:c0:a0:fd:fa:b8:e0:c2:02:f4:
         e2:6a:05:ec:77:91:eb:94:ad:79:da:33:da:ed:09:54:32:36:
         5f:10:f9:6d:a1:e0:dd:1f:34:b6:dd:6a:b3:6c:94:24:8c:1d:
         3e:6d:d5:16:52:be:ef:ea:42:5c:29:fa:4c:e4:27:81:36:a5:
         71:52:16:c6:96:59:15:2f:59:d1:d2:fe:a3:02:5a:97:b7:0f:
         ab:44:2d:96:3f:fb:09:21:03:9a:a9:65:f1:d1:1f:c4:d5:5c:
         60:b4:cc:2f:a4:ef:a0:2e:a8:0d:6b:84:ee:5b:2c:63:e4:77:
         bb:da:a3:fa:31:0c:24:69:16:c9:b9:c0:92:cb:c2:5e:fa:9b:
         2a:1c:b2:7a:9e:fd:16:21:d6:b4:74:e1:0b:6c:d6:53:af:95:
         08:01:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:55:56 2026 by rpki-client