Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fe6432e-e912-384e-9137-cd85e63cfabe.roa
File:                     2fe6432e-e912-384e-9137-cd85e63cfabe.roa (raw, json)
Hash identifier:          eI5ZK4ddEChkAN4Xm/RVeCtZzhIDEVynzoFxIqPq7sU=
Subject key identifier:   D1:FF:71:41:F9:EA:FA:A4:9F:2A:F2:97:CD:41:F5:3F:A0:51:70:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B74A15263328E48D11280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fe6432e-e912-384e-9137-cd85e63cfabe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.214.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:74:a1:52:63:32:8e:48:d1:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=11ffbf9d-737d-40a8-8432-c8808a2b8023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:3d:9f:57:36:ef:51:88:15:69:f9:22:19:
                    54:b0:1c:c6:1c:28:28:43:90:49:af:f4:ca:74:62:
                    88:f0:42:3d:e6:bb:f8:ca:34:ed:42:a1:04:07:21:
                    93:98:a1:08:1d:6b:41:6a:00:e0:4d:3b:c4:64:85:
                    d0:50:23:ef:7b:ec:5d:78:f5:31:e1:dc:45:c7:9b:
                    21:b7:22:d7:17:0d:35:38:d2:09:68:eb:6f:da:fb:
                    fd:44:69:fa:1b:2a:8d:07:10:bb:c0:44:d2:69:25:
                    6b:9a:6f:ac:14:66:a9:c9:76:3d:2f:b6:3e:24:37:
                    c5:9c:5c:be:0b:21:13:9f:6d:71:07:d7:41:d8:2a:
                    30:97:dd:e1:f1:19:a9:a0:b6:f7:53:7b:70:9d:c3:
                    a6:cf:9a:c6:b0:f2:a2:43:7d:80:44:b4:35:77:a6:
                    87:67:a8:88:e4:8f:ea:ea:4c:d7:24:69:3a:80:e6:
                    17:70:3a:24:86:52:6a:d0:f8:d1:f7:70:ce:7b:b5:
                    8d:8c:af:53:bf:fa:0a:10:af:5b:40:f2:ab:56:eb:
                    c7:94:11:47:91:cb:a3:e4:89:a1:ff:dd:24:f1:e7:
                    12:0f:3b:a2:fb:53:c9:2e:1b:e7:43:07:b9:bf:1e:
                    f5:e2:f3:f6:1e:e2:71:c6:60:e4:14:3a:0a:f3:c6:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:71:41:F9:EA:FA:A4:9F:2A:F2:97:CD:41:F5:3F:A0:51:70:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2fe6432e-e912-384e-9137-cd85e63cfabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:51:80:cf:e6:53:e0:41:10:99:6c:4b:1a:8e:b3:74:f8:bc:
         6e:85:55:b1:02:9d:3f:e1:99:b9:f3:5e:7d:dd:f1:c5:3c:8e:
         a3:c6:d1:3f:9b:8f:a4:51:03:f1:99:ed:93:5c:5e:3f:78:cf:
         a2:4d:3b:13:9b:b5:17:b3:6b:73:6f:2f:94:29:95:6c:5c:e2:
         bd:81:9f:ea:c8:5a:98:74:bb:67:62:ee:ef:3c:d8:51:ce:ee:
         76:db:b3:20:a2:1c:cc:25:e1:fc:93:69:35:23:d8:4c:95:a6:
         d3:77:86:3c:fa:e0:0d:b9:29:1f:3f:af:22:4c:51:a4:da:6e:
         cc:42:28:96:6a:24:53:cb:16:d9:2a:77:74:79:97:5d:d2:79:
         e5:d3:c5:38:02:17:dd:3a:59:f5:db:7f:5d:bc:bb:ff:e8:58:
         89:3b:4e:bd:65:29:3d:0b:a7:5f:ce:5c:5d:59:43:ea:f8:1f:
         4c:0c:06:16:4f:72:9c:d4:b7:cb:cd:43:0f:4e:42:54:23:46:
         0c:33:ec:2a:d1:e3:cd:d6:41:fd:a7:05:63:76:c5:46:52:4b:
         07:86:2b:b5:25:69:9f:61:cd:ca:ae:da:75:9d:d9:0f:3e:de:
         d8:5a:5a:5f:cb:75:83:66:8c:a0:be:55:c2:a9:4e:da:a8:9d:
         aa:8b:35:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm3ShUmMyjkjREoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTFmZmJmOWQtNzM3ZC00MGE4LTg0MzItYzg4MDhhMmI4MDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob89n1c271GIFWn5IhlUsBzGHCgoQ5BJr/TK
dGKI8EI95rv4yjTtQqEEByGTmKEIHWtBagDgTTvEZIXQUCPve+xdePUx4dxFx5sh
tyLXFw01ONIJaOtv2vv9RGn6GyqNBxC7wETSaSVrmm+sFGapyXY9L7Y+JDfFnFy+
CyETn21xB9dB2Cowl93h8RmpoLb3U3twncOmz5rGsPKiQ32ARLQ1d6aHZ6iI5I/q
6kzXJGk6gOYXcDokhlJq0PjR93DOe7WNjK9Tv/oKEK9bQPKrVuvHlBFHkcuj5Imh
/90k8ecSDzui+1PJLhvnQwe5vx714vP2HuJxxmDkFDoK88ZxOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNH/cUH56vqknyryl81B9T+gUXB1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmZlNjQzMmUtZTkxMi0z
ODRlLTkxMzctY2Q4NWU2M2NmYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALdRgM/mU+BBEJlsSxqOs3T4vG6FVbECnT/hmbnzXn3d8cU8jqPG0T+b
j6RRA/GZ7ZNcXj94z6JNOxObtReza3NvL5QplWxc4r2Bn+rIWph0u2di7u882FHO
7nbbsyCiHMwl4fyTaTUj2EyVptN3hjz64A25KR8/ryJMUaTabsxCKJZqJFPLFtkq
d3R5l13SeeXTxTgCF906WfXbf128u//oWIk7Tr1lKT0Lp1/OXF1ZQ+r4H0wMBhZP
cpzUt8vNQw9OQlQjRgwz7CrR483WQf2nBWN2xUZSSweGK7UlaZ9hzcqu2nWd2Q8+
3thaWl/LdYNmjKC+VcKpTtqonaqLNf4=
-----END CERTIFICATE-----
Generated at Thu Aug 27 22:47:36 2026 by rpki-client