Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/242b7d18-e5ba-3a54-ab94-446c11046487.roa
File:                     242b7d18-e5ba-3a54-ab94-446c11046487.roa (raw, json)
Hash identifier:          Ioo0aB6RO1ijhLKdsOYSwxU+WycCNsLPeMazv7y8pqw=
Subject key identifier:   68:24:34:2B:57:38:D3:57:96:7C:70:F8:A2:58:00:B7:71:59:9E:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE4F1EE712A55EEBB65F556C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/242b7d18-e5ba-3a54-ab94-446c11046487.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.233.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:ee:71:2a:55:ee:bb:65:f5:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=968762d2-39c1-48bf-a635-4b686077549c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4d:f8:94:ba:61:7e:65:2a:7d:bd:bf:d9:c3:
                    7b:98:a1:c3:4c:d9:de:94:76:9f:73:f3:e3:a7:40:
                    da:2f:2d:cc:1b:14:f6:d6:75:f0:47:9d:7c:7b:a7:
                    2b:16:83:51:f7:1e:10:df:e4:cf:99:05:d1:59:47:
                    05:b3:50:d9:e6:59:7d:1c:d3:86:f9:03:70:61:e1:
                    0f:1c:6b:44:ef:2a:62:7b:3c:dc:41:a0:d8:0e:06:
                    c6:e2:e6:66:32:ce:e4:ed:55:0a:54:e4:33:86:fe:
                    af:88:3a:83:2b:2b:ef:56:95:94:f7:2e:df:1c:96:
                    86:42:a8:a6:d1:cf:55:b1:c7:9f:5a:2c:bc:83:b0:
                    fe:2b:f3:ef:3d:28:da:d4:b5:44:08:8d:28:20:d6:
                    ca:1a:dc:78:4e:2f:be:ef:f4:d6:35:a6:bc:4c:aa:
                    7c:a9:89:96:de:f0:0a:3e:cb:fe:f4:3b:b8:75:8f:
                    3e:43:9e:b9:fb:a6:6f:03:77:f0:35:1a:42:c5:c4:
                    2d:c5:80:d8:ad:a9:23:c9:4c:07:59:22:ad:8a:12:
                    d3:e3:bb:0c:99:4a:f5:c2:36:9a:94:83:46:b3:be:
                    96:41:50:c4:57:b9:58:65:a6:c3:ec:f0:b8:b2:11:
                    b6:d6:40:f2:b1:e3:25:ff:e3:29:30:ab:0e:71:5d:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:24:34:2B:57:38:D3:57:96:7C:70:F8:A2:58:00:B7:71:59:9E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/242b7d18-e5ba-3a54-ab94-446c11046487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.233.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:12:71:c0:9c:e5:f8:5d:1a:fb:2d:b3:61:e1:cf:41:82:
         a4:46:5c:3a:7b:d9:6a:56:a1:9e:d1:33:d3:3d:7c:71:73:e1:
         29:53:27:9a:b1:51:dc:07:42:88:f2:67:21:2a:61:9b:60:1d:
         51:12:80:bb:1b:12:85:4d:bb:a1:c6:58:d3:25:7d:e0:b3:5b:
         5e:8d:6f:6c:f7:39:19:06:36:11:00:a8:fa:f9:1f:04:69:eb:
         c0:b3:3b:ad:56:df:65:57:50:28:0e:18:2c:a4:88:ed:75:a9:
         13:84:f3:5f:26:ea:ea:e2:29:06:ed:80:43:b8:76:1b:67:4a:
         95:ff:56:cb:c8:87:a9:1d:cc:87:6d:5a:2f:30:aa:f4:8e:90:
         3b:bf:59:1b:03:0e:b5:e3:07:22:ed:6e:95:ab:43:80:d7:1d:
         52:51:55:31:8d:b6:84:d8:1d:ba:74:7b:6d:6b:a3:fc:ef:b6:
         85:09:42:6a:71:14:1d:7e:0d:71:9d:1b:ef:d0:fc:7c:45:c8:
         8f:d1:9e:40:c9:64:42:c1:87:7f:62:6f:09:d4:4d:eb:79:99:
         43:f9:ec:73:d5:ea:2d:b7:a8:38:39:72:46:a3:d5:45:9b:d8:
         67:92:bf:36:31:ab:d9:98:cf:63:7d:86:bb:c8:c5:5e:d3:c2:
         4f:ec:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:41:50 2026 by rpki-client