Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
File:                     04b328e8-739b-3c12-82aa-7a968703666c.roa (raw, json)
Hash identifier:          KNdIffbRVTxSXdSlYK5slRZPaLtRWmQGmrRh0wUvE1g=
Subject key identifier:   25:FB:49:4F:32:0D:F6:49:6D:26:7E:80:2F:C4:42:C6:43:AC:2F:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C5849B0545DF2FB26B9B200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.244.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:49:b0:54:5d:f2:fb:26:b9:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=ed63d344-6b10-4de2-9774-dfe2c986888c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:be:1d:93:56:c5:51:ea:4a:c4:37:96:48:
                    e7:2c:05:50:15:89:6c:55:62:60:5e:9a:96:6b:f4:
                    6c:71:76:81:12:c7:ec:0c:d2:82:fb:79:8c:0d:6d:
                    18:92:9c:a0:25:f2:77:3d:26:e8:e1:14:37:b6:49:
                    56:4f:8b:ef:74:72:ee:25:33:c6:f3:4b:d8:b5:fd:
                    24:91:2a:eb:6b:4f:09:f6:3a:a5:82:b0:37:39:32:
                    7f:4f:f8:d8:0d:6a:59:88:14:2d:c8:d5:3f:d5:b8:
                    a3:f3:b4:b6:03:78:bf:fa:32:79:16:84:61:b9:23:
                    3c:20:86:38:79:f6:9d:77:5a:22:0b:7d:44:8b:0c:
                    0d:f0:fb:3e:ad:e7:48:cf:43:53:52:fa:fe:ad:cc:
                    34:8a:6d:71:da:1c:f9:f0:47:c1:62:81:4b:54:0e:
                    ce:4c:0c:50:f3:30:d0:51:51:9a:9d:ca:27:00:50:
                    ed:a6:19:93:87:60:7a:d5:ba:72:f0:99:32:aa:5e:
                    d2:8d:1c:ef:4a:be:0f:15:26:6a:c8:34:df:52:0e:
                    b2:92:97:5a:f4:4a:85:c7:58:e3:04:21:c8:b6:11:
                    25:fd:a9:97:47:3f:2d:d9:12:5f:70:8c:7b:c3:df:
                    25:5d:ee:7e:af:0b:b4:1e:60:21:66:8a:f0:03:f6:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FB:49:4F:32:0D:F6:49:6D:26:7E:80:2F:C4:42:C6:43:AC:2F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.244.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:25:72:95:31:a0:5f:c8:a5:de:05:4f:4a:d4:ad:10:14:b0:
         3f:e0:1d:a9:92:21:eb:e4:f9:3d:16:85:8a:7d:5e:50:d4:60:
         2a:25:ad:19:9e:25:43:41:c9:25:1a:5a:4b:59:38:85:91:0f:
         e7:0e:d6:ef:fc:99:78:ad:ef:29:7f:0f:1a:5c:22:36:47:f8:
         2f:d9:fe:c6:fa:23:fa:00:1a:51:f5:da:07:74:da:78:7d:73:
         b0:44:68:ea:86:73:5f:ff:3a:1f:32:fe:58:0c:bf:70:c1:43:
         2a:59:73:99:52:cd:ff:04:ae:c8:90:c3:2e:30:94:8a:01:75:
         34:e1:03:d4:8c:31:29:7f:ee:55:eb:39:0c:42:13:30:9c:f5:
         09:14:86:01:d9:69:7c:2b:36:be:5c:2b:4d:eb:10:88:c7:30:
         e2:a7:8c:da:7b:a2:01:11:c1:07:9f:df:2b:62:ab:ca:1e:ae:
         b2:73:64:06:bb:26:bd:54:c7:38:05:30:6f:07:09:37:40:c9:
         93:b3:66:40:ca:8f:02:55:8c:19:9e:56:a2:64:7f:5c:15:9d:
         14:02:f3:7d:66:6c:56:bf:49:61:77:54:b6:d2:f6:57:35:2d:
         7d:ba:76:f0:cf:16:58:a1:f7:c7:6d:f2:33:bd:19:42:07:e8:
         65:90:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:02:05 2026 by rpki-client