Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa
File:                     73407e55-bb87-3af2-979f-f557fb0f4b02.roa (raw, json)
Hash identifier:          uidtysjfx0RRzwLyV8dYre7vpZKPS4szy7hoJfY+BWM=
Subject key identifier:   C1:28:E7:73:9D:03:89:8F:2B:DA:67:9C:C2:57:93:AF:62:CA:55:24
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F4328584E2AD463F6C7F4823045EFC800
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     46632
IP address blocks:        174.137.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:63:f6:c7:f4:82:30:45:ef:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=0fbaad8b-cec8-4a81-869a-219869051d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:68:ea:a2:9c:81:ec:61:8b:93:c8:4f:74:
                    d4:62:41:55:96:b0:10:c2:94:d8:d1:48:39:5a:7c:
                    f4:b5:d8:1f:d2:e3:68:27:c0:11:e3:1c:b6:ff:1c:
                    84:7c:47:4f:fd:7e:67:75:43:d2:d6:66:f6:27:3e:
                    f9:19:66:84:ec:f3:e5:d2:23:b6:67:14:2d:79:fd:
                    5c:5b:54:0d:8a:50:36:3e:c4:e0:09:09:d5:b1:cf:
                    f3:95:a5:ab:76:14:c5:e7:ab:4f:94:05:f0:49:e4:
                    48:53:dc:fb:82:be:ea:da:24:a2:95:55:5d:fd:cf:
                    8d:26:bc:60:68:93:3a:91:47:60:34:5a:a4:1c:01:
                    67:c7:14:ba:7f:5d:93:d1:f7:94:c7:88:6c:ed:32:
                    ed:c6:34:3b:23:a9:74:5f:ab:d9:ef:36:c2:3f:ab:
                    d7:eb:f8:10:e3:3f:95:c2:05:9a:f1:cc:e8:56:92:
                    9d:56:6f:60:60:ff:7f:5a:32:a6:ac:93:5d:69:1c:
                    70:d5:93:14:27:c8:d1:0a:20:ad:65:67:47:08:c0:
                    1f:d2:c8:99:df:8b:ef:c7:58:31:c5:5b:21:ba:e7:
                    12:47:e3:da:78:fa:24:ff:53:3d:17:50:de:7e:77:
                    7f:66:da:95:18:c0:56:2b:f7:df:b2:61:e1:8e:d4:
                    7c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:28:E7:73:9D:03:89:8F:2B:DA:67:9C:C2:57:93:AF:62:CA:55:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/73407e55-bb87-3af2-979f-f557fb0f4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:4c:4d:c0:6e:a4:9f:5a:46:7c:51:99:05:56:f5:eb:63:
         09:6f:c5:4d:8e:6b:29:88:68:e1:66:cd:69:22:9f:78:a5:65:
         d0:42:66:37:b4:b4:0d:85:84:a5:11:55:ca:a7:95:b7:10:06:
         76:f8:e9:9b:61:67:23:62:2a:b8:d4:0d:3a:68:dc:f3:ee:eb:
         b5:c9:08:79:32:cc:5c:43:ad:b1:f6:0e:ab:f1:76:bb:3f:36:
         97:6f:b6:af:10:63:44:b0:6f:27:58:e9:e8:0c:13:81:22:c6:
         85:f8:eb:94:66:67:7a:5b:20:51:3d:db:bb:b2:93:7e:15:76:
         4d:10:1b:9e:be:e4:c8:06:b4:08:2a:03:7d:83:8e:f7:36:3b:
         38:50:1b:57:ac:f5:04:a1:ea:32:03:da:58:77:c4:80:af:2c:
         ff:aa:7d:f6:0e:d4:23:0a:c4:d8:82:9a:04:74:2a:3e:54:4d:
         b0:53:f9:ac:19:f0:70:21:f5:da:eb:ab:13:a2:20:93:76:4a:
         f7:b7:6f:51:a5:2e:eb:68:54:05:a3:ba:2a:63:3d:50:07:a6:
         c5:96:34:8c:df:1e:dc:c9:05:76:cc:27:60:1d:7e:18:ef:59:
         a4:7b:d7:7b:df:65:37:ff:e5:25:b4:e7:cb:c1:91:c0:0d:33:
         54:f3:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 20:19:03 2026 by rpki-client