Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/264a54bc-af18-3bdb-9eb5-eeda0459ee0c.roa
File:                     264a54bc-af18-3bdb-9eb5-eeda0459ee0c.roa (raw, json)
Hash identifier:          kxAxRdJg3OJ8tXiZZ8UiTnqj0e4ANr/DzwuVdKYR1UA=
Subject key identifier:   F6:99:00:5E:00:9E:98:D9:B4:06:C8:AB:7A:07:4C:BC:77:72:67:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA8EC4FBC3A3F39738477D040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/264a54bc-af18-3bdb-9eb5-eeda0459ee0c.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     6167
IP address blocks:        174.220.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:4f:bc:3a:3f:39:73:84:77:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=d9dbed18-70eb-466d-8c48-6166173d4d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:67:a2:61:3b:8a:39:22:12:91:1f:20:ff:
                    8f:fb:71:65:f4:0c:df:2c:3a:4b:b0:66:17:4f:a4:
                    87:0a:a4:0d:43:98:ed:80:38:38:63:b3:26:58:49:
                    ff:6b:18:ad:63:2e:02:f9:3b:77:67:f4:7a:58:0c:
                    2c:e3:46:86:16:a7:5f:9e:45:d3:27:30:3c:67:c0:
                    ca:5e:08:cc:c2:59:c2:f6:5c:45:00:3f:57:34:5a:
                    00:1b:41:6f:1a:b0:61:35:f7:58:fa:d7:6c:c4:b4:
                    c7:a3:6a:78:f8:c7:56:02:e3:05:31:84:1a:2b:21:
                    e6:0a:9f:f6:73:e1:c7:0f:bd:85:19:45:a4:2a:9b:
                    5a:02:2a:b8:ec:2d:d4:81:fd:0d:3c:0e:0b:18:a8:
                    5d:cf:ac:ec:ff:30:90:4a:55:60:08:e2:43:37:cc:
                    9e:ae:51:52:0b:39:43:c4:e3:4e:1b:47:69:9a:b8:
                    8c:cb:84:a7:8e:4f:4f:13:bf:41:91:fa:7d:17:92:
                    0b:e5:ad:a1:10:58:a0:a3:89:bc:b4:5c:2a:04:ef:
                    92:0f:7e:8f:e7:49:df:6c:c8:5e:29:bf:c0:3b:24:
                    da:0e:77:d2:2b:2d:a0:d7:06:7b:7d:29:63:79:99:
                    6d:cb:10:70:cc:fa:bf:29:85:cd:35:6b:3a:70:47:
                    06:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:00:5E:00:9E:98:D9:B4:06:C8:AB:7A:07:4C:BC:77:72:67:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/264a54bc-af18-3bdb-9eb5-eeda0459ee0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.220.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:6a:7f:8f:e4:02:d5:a2:7e:d4:6d:7e:ac:13:9b:52:60:
         71:cf:f7:a8:fb:00:b7:1d:5f:9e:5b:87:c9:42:ae:1a:f9:6f:
         24:2d:05:08:2d:13:6d:4c:24:35:dc:f6:3c:55:ba:dc:c0:f5:
         f1:67:73:ea:64:c7:3a:2c:9a:c9:49:c7:1b:b2:7c:d8:0a:69:
         37:95:54:da:1f:30:48:fb:64:a7:9c:a5:29:02:dd:9e:6e:96:
         8c:b6:d9:bf:bb:d0:f8:5e:eb:a6:5e:a4:60:66:65:4e:8c:2c:
         b0:dc:39:98:13:88:92:86:78:ce:f4:df:51:4b:71:59:6b:69:
         ee:97:4d:43:51:04:c7:3b:a3:7f:f9:dc:71:25:76:0c:5d:f6:
         49:20:6f:0a:7c:28:4b:97:09:28:79:06:19:62:17:78:de:39:
         66:6e:7a:fc:d0:d5:7c:85:89:a7:6e:b7:03:bc:53:5f:2a:b8:
         54:9a:5f:d5:7f:1c:6f:75:1a:80:b4:a0:bd:55:8a:d2:65:de:
         83:55:48:2d:45:33:1f:85:2a:74:3d:cd:3c:17:8b:62:a0:bf:
         3c:ce:16:40:d5:1d:07:dc:86:0d:7a:87:d5:5a:aa:32:63:f2:
         5d:a7:27:91:d0:2b:21:dc:e5:30:63:f0:df:42:24:b2:4a:11:
         9c:2d:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 23:54:05 2026 by rpki-client