Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbb878b-8b0a-3d9d-a99b-13309e40b1b7.roa
File:                     0cbb878b-8b0a-3d9d-a99b-13309e40b1b7.roa (raw, json)
Hash identifier:          H/1reKlqCRHFKlZHuIexWk4UJqnAxi9jRcT9FWfIgeo=
Subject key identifier:   BE:95:01:E7:81:65:57:70:F5:FD:87:20:5C:3E:4B:9C:62:FF:FC:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C803E352E3EBDC5350300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbb878b-8b0a-3d9d-a99b-13309e40b1b7.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.241.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:80:3e:35:2e:3e:bd:c5:35:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=420694e5-551c-489f-a316-b819af5b15f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7b:9a:dc:97:10:1e:d9:b9:d0:c4:79:6f:ee:
                    b1:0f:81:f0:fb:d4:53:8f:66:fb:82:06:be:b6:63:
                    62:41:45:32:05:b9:80:ce:b5:5c:c0:a4:79:cb:51:
                    82:23:bb:be:c6:ab:c3:20:dc:52:c5:f7:e1:8c:9f:
                    08:03:86:8d:3c:c8:43:d3:52:13:cd:f6:67:e5:fd:
                    d9:c0:55:06:5b:91:1b:34:2a:33:da:4f:38:bd:b7:
                    1b:cb:30:64:ef:1d:2e:7c:63:6c:91:31:5d:dd:24:
                    fe:fb:6b:fc:52:a2:3b:a7:39:99:9f:5f:76:fc:3b:
                    45:ab:b1:a5:a4:f8:40:33:72:7a:7b:f4:98:14:08:
                    95:3b:d6:22:55:a3:c7:a7:10:9a:f5:48:c1:7d:34:
                    43:0d:9d:50:fe:f0:fc:3f:3b:34:f3:11:dd:7d:7c:
                    2c:7d:1d:64:1e:c6:8f:42:c0:b9:38:ed:90:60:c6:
                    12:6c:de:c2:b3:bb:50:3d:4d:81:32:fa:4d:27:74:
                    96:d0:0a:65:2f:99:9f:b5:18:19:6b:06:30:58:70:
                    ed:f2:51:c4:30:20:2b:a6:7f:0d:ba:26:42:97:97:
                    4a:59:cb:42:14:52:40:3e:aa:79:31:ac:00:68:16:
                    b1:73:27:e5:83:8d:f0:7f:19:e7:c5:cd:58:ff:89:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:95:01:E7:81:65:57:70:F5:FD:87:20:5C:3E:4B:9C:62:FF:FC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0cbb878b-8b0a-3d9d-a99b-13309e40b1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.241.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b0:71:d5:fa:2a:ae:33:4d:0e:e9:ef:30:f9:91:f4:ff:00:
         36:c7:de:db:57:2a:96:b9:47:3d:b9:f5:6c:c4:01:11:54:5f:
         98:ae:46:13:9a:f3:6c:8a:cd:85:e7:68:37:fc:27:3b:a1:fb:
         b5:0e:4c:94:ca:d7:1e:c2:a5:7c:76:31:8f:be:69:ba:4c:7a:
         97:85:26:4a:db:4c:e5:17:22:4c:cd:18:4d:a8:b6:b5:c1:f0:
         bf:e7:07:ee:b2:22:f9:a1:e8:20:83:75:5f:c2:22:6a:3b:52:
         b0:71:de:1b:af:fc:23:d5:a0:f0:8f:86:ae:5f:8f:3b:50:ed:
         09:a2:e5:15:40:1f:ae:f7:22:39:62:c7:7b:cc:b5:a7:d5:ee:
         7b:34:b5:14:29:ce:a6:bb:fb:24:7a:88:39:5d:5a:51:eb:7c:
         11:d9:e5:8a:a0:8e:16:3f:8c:f1:74:e3:e6:00:dd:ce:e3:7f:
         7b:2d:3b:2f:b3:c4:2f:c2:9e:82:52:00:28:49:48:8f:50:fb:
         b1:50:a0:73:3d:da:62:7c:c8:c1:b7:a8:8f:63:21:d6:3c:a9:
         2a:e8:03:ab:1c:7e:88:1b:4f:b3:3d:c4:e1:18:3b:4e:c3:05:
         32:e1:9b:c4:97:f0:f3:b9:be:3c:03:3a:e5:e2:e7:12:62:8c:
         0f:3b:e4:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbIA+NS4+vcU1AwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
NDIwNjk0ZTUtNTUxYy00ODlmLWEzMTYtYjgxOWFmNWIxNWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nua3JcQHtm50MR5b+6xD4Hw+9RTj2b7gga+
tmNiQUUyBbmAzrVcwKR5y1GCI7u+xqvDINxSxffhjJ8IA4aNPMhD01ITzfZn5f3Z
wFUGW5EbNCoz2k84vbcbyzBk7x0ufGNskTFd3ST++2v8UqI7pzmZn192/DtFq7Gl
pPhAM3J6e/SYFAiVO9YiVaPHpxCa9UjBfTRDDZ1Q/vD8Pzs08xHdfXwsfR1kHsaP
QsC5OO2QYMYSbN7Cs7tQPU2BMvpNJ3SW0AplL5mftRgZawYwWHDt8lHEMCArpn8N
uiZCl5dKWctCFFJAPqp5MawAaBaxcyflg43wfxnnxc1Y/4kKvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6VAeeBZVdw9f2HIFw+S5xi//yJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGNiYjg3OGItOGIwYS0z
ZDlkLWE5OWItMTMzMDllNDBiMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrvE4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWwcdX6Kq4zTQ7p7zD5kfT/ADbH3ttXKpa5Rz259WzEARFUX5iuRhOa
82yKzYXnaDf8Jzuh+7UOTJTK1x7CpXx2MY++abpMepeFJkrbTOUXIkzNGE2otrXB
8L/nB+6yIvmh6CCDdV/CImo7UrBx3huv/CPVoPCPhq5fjztQ7Qmi5RVAH673Ijli
x3vMtafV7ns0tRQpzqa7+yR6iDldWlHrfBHZ5YqgjhY/jPF04+YA3c7jf3stOy+z
xC/CnoJSAChJSI9Q+7FQoHM92mJ8yMG3qI9jIdY8qSroA6scfogbT7M9xOEYO07D
BTLhm8SX8PO5vjwDOuXi5xJijA875OM=
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:47:43 2026 by rpki-client