Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa
File:                     0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa (raw, json)
Hash identifier:          q7/XJR+FrqgIWNMA11fpCHBzGyD7WpKninQ5PVcLliI=
Subject key identifier:   BE:58:96:6C:27:B9:77:55:AE:78:6B:4F:28:09:60:F6:75:2A:6A:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C8332FAEDA88BA6866F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.247.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:83:32:fa:ed:a8:8b:a6:86:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=768b4e2f-056c-4c3b-8f2d-3248fbf085a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:40:93:06:68:32:41:a4:cf:8d:df:bf:e2:
                    bc:58:3a:c3:d8:7e:c2:01:5a:3a:9e:28:5d:72:dc:
                    da:29:a0:9d:d6:42:8b:e4:95:d8:71:01:46:2b:a1:
                    b5:6a:fc:40:9b:27:70:76:0a:8e:03:76:cf:7a:91:
                    30:31:85:eb:f3:89:0b:41:02:70:e8:94:5a:a6:22:
                    88:4d:10:d5:d2:99:d9:49:cd:01:e3:4e:3a:7a:f7:
                    ae:eb:20:b2:9e:c4:b3:bd:98:93:79:32:6a:7e:f3:
                    9f:f3:59:41:55:e0:c1:30:1c:ad:f0:93:3d:0b:4f:
                    51:8d:50:b3:ee:fc:9a:8c:6e:49:2c:92:6e:21:07:
                    c9:08:44:10:15:b3:a3:8e:d7:59:61:8c:8f:70:d1:
                    6d:eb:0c:f6:04:f0:4a:44:7f:8a:6a:1f:42:03:8c:
                    97:9f:c7:53:a4:98:55:46:29:4d:a2:ae:a4:f2:08:
                    5d:ba:5d:f9:5b:d1:f7:26:2b:24:af:d6:fa:a3:08:
                    c4:b1:a6:c1:b4:15:9c:5a:cb:7b:e0:07:64:48:53:
                    f3:47:16:d9:a7:4a:de:eb:44:05:01:21:02:85:fa:
                    f6:e7:aa:cb:9e:c5:76:d4:92:21:31:02:53:c8:60:
                    86:0e:a1:a9:7e:bb:98:01:a6:a5:8f:72:ef:97:6f:
                    f8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:58:96:6C:27:B9:77:55:AE:78:6B:4F:28:09:60:F6:75:2A:6A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:5b:ec:4f:b5:fc:9a:c5:41:2a:a7:51:76:3c:56:a8:9f:
         95:0f:b2:1a:48:d0:cf:ee:92:f9:47:1a:96:f3:96:c6:85:eb:
         26:99:6c:97:e0:fb:c8:27:2e:ae:8f:a0:71:a5:57:4c:c5:39:
         7c:19:9f:e1:96:0e:ad:4b:6e:83:86:0d:d4:1c:d4:11:25:17:
         e0:7d:68:23:22:67:fc:f4:da:8e:f4:95:51:cd:21:d5:01:a0:
         06:56:b7:d3:93:b4:a1:8f:59:79:01:54:cb:91:56:49:2c:46:
         15:5c:50:45:16:af:cc:aa:0d:fb:11:77:43:57:ed:ae:f5:20:
         5f:84:2e:e7:8f:d4:3b:ef:56:6b:c8:39:92:73:4a:71:47:03:
         41:6a:c3:cc:d9:99:c5:17:74:6a:ca:ad:8d:92:71:68:46:6a:
         b8:65:71:b6:ac:44:c4:b3:58:d5:35:e7:f0:aa:de:2e:ab:c7:
         26:6d:78:36:b2:7f:ad:ef:4c:53:c3:98:a6:df:bd:15:9b:a9:
         94:c6:7b:c4:51:87:ae:f3:23:ec:43:77:16:22:f3:88:97:7b:
         e1:48:02:83:0f:71:d0:2e:0b:31:a2:ef:6c:80:dd:d6:ea:7e:
         af:95:36:4d:f3:03:56:0a:c9:6b:d1:66:8b:fe:e5:1f:75:c8:
         49:20:5b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 23:52:24 2026 by rpki-client