Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/6f5fd4d2-085b-32fe-94e1-e6820ea25fe6.roa
File:                     6f5fd4d2-085b-32fe-94e1-e6820ea25fe6.roa (raw, json)
Hash identifier:          Lxwzj9yp+nfc9BCDrwRAMdNcrMXOt63cwkqU8/8B04g=
Subject key identifier:   AD:44:26:E7:59:3F:8C:2D:32:3C:55:A0:FB:C5:F8:99:10:0F:F7:82
Certificate issuer:       /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
Certificate serial:       010D0C9F4328584EA791AF5D7516774BDC3FD4A0
Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/6f5fd4d2-085b-32fe-94e1-e6820ea25fe6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399331
IP address blocks:        174.136.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:af:5d:75:16:77:4b:dc:3f:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9bd02539-7d4f-44dd-8dd0-88ab8b27199e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:02:a4:24:4c:9d:d0:bb:76:98:4f:aa:df:
                    24:f2:94:d8:04:82:b7:82:7b:7a:d2:be:ae:ab:aa:
                    31:77:80:60:85:e5:5c:65:20:8c:9c:bf:e3:45:e2:
                    a7:76:cf:19:7d:d8:1f:c7:2b:cb:40:ff:ac:cc:12:
                    25:bc:7c:e0:b3:53:ec:b9:af:19:b0:32:90:4b:33:
                    b0:3e:a5:1c:8d:cd:a1:ee:49:b2:c1:84:3d:46:b4:
                    ae:79:d7:5d:2d:c4:a7:e7:ff:4f:b5:0e:c0:24:04:
                    d5:ac:96:b7:65:e2:01:a1:49:6c:61:5a:ff:b1:f1:
                    cd:43:0f:41:4d:1a:e6:e2:e2:4b:9a:10:b6:3b:12:
                    8f:34:2b:72:4e:2d:90:b3:e7:0f:45:9e:13:be:0a:
                    8d:c6:b0:3e:31:b7:df:ef:dc:39:2e:ab:0a:5f:01:
                    ec:5b:7a:25:37:d9:01:17:df:25:22:3d:08:8f:1d:
                    a8:7a:11:a9:0c:1a:de:f8:29:73:3f:cb:d5:48:23:
                    e0:a3:cb:43:16:25:30:e9:01:d3:77:22:92:3a:82:
                    dc:ca:b9:e0:3b:13:23:11:f3:ad:a9:6c:11:ae:69:
                    a9:5a:fd:94:5e:bd:3e:b5:90:f1:73:99:4d:b2:e4:
                    01:8e:e5:eb:22:26:da:33:0e:32:df:19:1a:62:85:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:44:26:E7:59:3F:8C:2D:32:3C:55:A0:FB:C5:F8:99:10:0F:F7:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/6f5fd4d2-085b-32fe-94e1-e6820ea25fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl

            X509v3 Authority Key Identifier:
                keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:82:32:ce:94:c6:75:40:e8:ee:0e:6b:06:7a:cc:fc:9c:d8:
         0e:9f:31:2b:66:8b:da:90:f1:51:f4:5d:03:1b:4c:ef:1e:13:
         34:1d:e7:80:6a:86:2b:55:b1:5e:0e:08:04:b6:79:48:ab:a3:
         f2:f3:a4:b7:d2:9a:47:c4:bd:22:ac:16:f1:e1:48:f9:65:fd:
         b8:48:c7:34:64:61:79:04:96:3d:1c:2f:a5:d3:7b:be:7a:ec:
         b1:41:72:80:18:b5:6c:a8:85:64:a3:04:66:6e:d4:e4:a9:e0:
         ab:e2:47:c2:32:c1:ee:d0:50:e6:a4:1b:98:b2:3a:88:7f:52:
         5f:3a:0f:e1:52:fb:0c:40:db:72:4b:e5:e7:ce:4c:3e:5d:70:
         69:47:43:4d:8e:c2:ea:21:f7:3d:de:a3:b6:ad:51:ea:fe:6e:
         e0:ea:d5:a8:1c:5d:05:be:d3:80:c4:d7:91:c4:4b:f3:d6:20:
         ea:51:05:c3:92:a4:34:fe:23:53:b8:10:80:29:74:f3:a1:4c:
         bc:26:c0:97:d3:8c:da:06:c6:64:be:49:8f:99:57:97:d4:a5:
         98:43:1e:8a:7d:bf:0c:b9:ec:79:49:2e:ee:4e:b1:17:28:7b:
         57:2e:05:d0:40:68:b2:23:ec:e4:bf:41:67:90:24:07:ce:28:
         4e:69:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:50:59 2026 by rpki-client