Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/195155d1-965f-3cf0-aa8e-a32adab0f05a.roa
File:                     195155d1-965f-3cf0-aa8e-a32adab0f05a.roa (raw, json)
Hash identifier:          xS2gFVeaIirMP9pOG05wLUJ7yn7P9fkBIGUBbRgn5lQ=
Subject key identifier:   A8:90:11:6B:E1:C7:53:59:11:97:C5:AD:F8:F9:70:A1:7C:18:A7:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF71785EA15D333174B406B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/195155d1-965f-3cf0-aa8e-a32adab0f05a.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        173.76.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:85:ea:15:d3:33:17:4b:40:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=6733c435-6a2a-4dfb-927f-77641fcbbd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:33:6e:6b:e6:38:87:67:c3:23:c6:13:76:
                    9d:55:58:bf:42:65:fc:02:ac:b3:96:36:a4:a9:33:
                    94:e9:3c:c3:91:1e:01:d7:7b:82:75:c5:59:f1:9c:
                    1b:50:10:ce:bc:4e:6a:f2:8d:49:5a:97:37:f5:f0:
                    99:c8:b8:19:00:f9:91:c6:bc:45:ad:56:a9:7d:64:
                    4e:7a:51:bd:3c:8a:cb:83:8c:0a:9f:e7:3f:eb:fb:
                    1d:17:16:8d:fd:e5:d7:44:d8:6a:ee:01:2b:5e:90:
                    af:aa:59:1a:2e:48:62:b1:cb:25:9e:a4:a0:b2:f5:
                    3f:b9:28:84:15:a3:07:d3:55:d0:e4:cd:96:48:d3:
                    78:34:2f:05:6a:6f:34:52:6b:63:e8:db:3b:47:12:
                    f2:99:34:62:f5:d7:12:d8:11:00:73:18:28:26:3c:
                    ee:e1:65:fc:a6:c9:ae:6f:88:be:4a:ad:ba:79:48:
                    57:ed:fe:93:be:59:5a:c6:6e:89:9b:c9:dc:de:b6:
                    3d:e8:fd:78:5b:74:c8:91:13:a3:ae:8e:b0:9a:bd:
                    66:2a:35:75:27:1e:0c:01:83:87:fb:34:59:19:eb:
                    b2:26:f6:fb:60:c6:48:96:d9:41:a1:cb:7c:9b:9f:
                    7e:e2:65:f5:1e:40:68:76:4b:32:25:c0:ad:20:9e:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:90:11:6B:E1:C7:53:59:11:97:C5:AD:F8:F9:70:A1:7C:18:A7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/195155d1-965f-3cf0-aa8e-a32adab0f05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.76.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a5:36:24:b9:bc:bd:c9:17:17:d8:5d:e9:1d:83:ed:08:c6:
         d0:40:19:62:6c:f9:c5:cd:05:83:b1:97:f4:18:d9:37:7d:97:
         c7:96:85:ae:13:8c:cc:44:31:7d:8c:9b:89:e7:2d:73:6e:76:
         f2:e6:97:e8:90:df:96:f8:4e:dd:dc:d2:37:10:b7:28:87:54:
         a2:c3:34:d1:02:c2:93:d8:f4:96:b0:b6:85:88:d4:c6:93:57:
         a0:bd:a9:1f:cb:fd:56:4b:68:6d:f9:59:75:68:59:d5:62:54:
         46:50:14:f6:cd:b4:b4:4b:71:89:11:eb:25:d5:92:67:61:f6:
         e2:32:ed:22:31:69:64:99:90:ae:73:04:32:15:c8:a1:18:46:
         25:3b:23:f3:71:63:af:68:3f:cf:8a:9c:ff:3a:62:7d:ed:bb:
         25:0a:96:34:24:f8:8c:d3:6c:b0:b1:0d:0b:86:a7:ba:25:68:
         0d:b7:c3:50:fd:55:b1:6d:8e:2e:54:55:07:91:27:8b:02:8d:
         66:48:0f:09:9c:34:76:7d:6f:74:9a:bd:5b:38:27:41:37:2f:
         ea:47:10:dd:23:3e:5b:df:07:4a:cb:ca:88:3b:66:34:e3:5d:
         4b:b6:fb:10:d1:57:00:ee:71:3b:89:7e:25:18:86:90:05:2e:
         df:1c:ed:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:02:54 2026 by rpki-client