Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa
File:                     268ea0de-6048-3916-af1e-d45f0d2aad37.roa (raw, json)
Hash identifier:          vp712DTPp9DYYMZUzkIK/fekj4sJE2R3C4o0JhD4BnM=
Subject key identifier:   03:DB:7C:D5:BD:E9:A0:47:6F:1A:4A:FA:43:BE:74:87:A9:07:43:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C783C7B0D5BF007EB65C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.254.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:78:3c:7b:0d:5b:f0:07:eb:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=6362e3e3-899b-41fa-83d3-d8fc4b9f5265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f5:f6:03:21:ae:a6:1e:61:09:72:5f:33:d1:
                    da:f6:44:0e:7d:b6:72:a7:5b:0b:99:6d:60:1c:de:
                    7d:81:2f:55:27:f6:bf:79:ad:8a:23:ab:fa:19:46:
                    3a:0a:cc:ea:74:ae:ca:77:43:b8:bf:01:9a:f5:0a:
                    21:52:80:11:44:3d:0f:51:b5:34:f8:d6:91:9e:c8:
                    bd:f2:f9:07:cd:9a:02:c1:7e:1b:79:fc:36:20:c6:
                    e2:55:2b:ac:68:24:7c:53:86:d6:e0:b2:4e:cd:a2:
                    0b:58:a8:8c:24:4a:a0:73:0c:5f:fa:f4:f8:93:fa:
                    94:ab:d3:cd:6f:63:0b:f3:cd:47:79:14:28:50:54:
                    fb:24:9b:c2:4c:f6:38:9b:0e:8b:d7:09:62:0d:36:
                    19:f9:63:9a:2b:cb:68:a3:5a:47:34:54:e1:ac:76:
                    b5:d0:dd:3b:08:88:43:16:75:76:74:f5:91:b6:11:
                    85:b6:68:e4:14:92:b9:6f:e2:1c:fb:bc:8f:6a:50:
                    d7:50:f2:96:d0:f6:ce:4b:45:bd:c1:7f:b8:a1:60:
                    f9:e8:b7:58:ef:3e:5d:a0:6f:16:fd:2f:58:f8:fb:
                    71:76:3b:dc:1b:c0:e7:82:50:d6:9a:63:fd:06:d7:
                    fc:cd:fd:94:bd:5e:62:9d:d5:b2:0d:38:d8:39:b8:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DB:7C:D5:BD:E9:A0:47:6F:1A:4A:FA:43:BE:74:87:A9:07:43:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/268ea0de-6048-3916-af1e-d45f0d2aad37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9b:8c:b9:59:7c:30:49:a5:d6:8d:cf:b4:93:0e:72:df:a7:
         db:82:29:ac:9a:27:c7:a9:62:fb:5d:8a:41:29:aa:63:61:04:
         cf:61:0a:e5:24:e6:10:ba:0b:c9:eb:2e:cb:9f:cb:f0:df:17:
         f9:3b:f4:83:d9:53:0f:6d:e8:2c:0c:fb:bc:a0:d6:3b:93:de:
         8e:f1:83:ee:57:ca:e2:2f:d1:2f:c3:0c:59:db:46:ee:15:48:
         fa:aa:78:ba:28:4a:ba:57:1d:bd:1e:0f:6c:dc:f7:7e:43:20:
         68:cd:12:1e:01:b5:db:b2:63:de:0a:1a:b0:94:40:40:00:72:
         f6:d2:6a:e3:01:fa:9b:3e:3c:a7:f6:37:7f:95:cb:6e:68:53:
         00:5c:2f:f3:13:3f:3b:e6:33:da:be:8a:47:5e:28:fe:1f:9b:
         f9:62:f9:d8:83:32:7b:d0:a1:1e:c8:1c:15:69:af:ad:0f:f2:
         d2:3d:d7:d1:e2:5f:fb:54:eb:dc:b1:85:aa:1b:24:5d:1e:a8:
         dd:72:93:a2:25:a0:ce:8d:8c:ac:7e:82:e9:84:8f:57:39:c7:
         9f:c4:14:46:df:97:c5:9a:19:a5:89:2f:96:64:cf:18:57:0a:
         b9:e4:cf:77:32:a6:e6:69:a5:1e:ae:b2:c8:57:54:17:8a:63:
         03:c0:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:47:45 2026 by rpki-client