Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32d9f4db-2052-3c5e-a823-3e25c5a82ff7.roa
File:                     32d9f4db-2052-3c5e-a823-3e25c5a82ff7.roa (raw, json)
Hash identifier:          YC7eC83xzlKSSrK8LqQYmvaI0Xv3wma3IhrcwWydlaA=
Subject key identifier:   68:2A:60:E8:D8:1E:5D:84:E0:F2:84:A0:54:27:AB:F1:D0:81:89:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7883305F260EB3D6493E380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32d9f4db-2052-3c5e-a823-3e25c5a82ff7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6195
IP address blocks:        207.17.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:33:05:f2:60:eb:3d:64:93:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9a3fcdec-81dd-408e-892c-882f7677957c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:df:58:d4:1e:9f:03:94:fc:f8:62:da:08:
                    a5:bd:6f:7d:4b:88:26:1a:46:85:ba:47:14:4a:aa:
                    69:40:9c:af:b1:4b:54:67:61:f0:80:f4:97:7a:da:
                    fa:f4:55:7a:9f:ec:c9:03:5a:6a:97:36:51:2f:31:
                    15:74:5d:1f:25:36:c8:69:b6:68:9f:95:5f:ea:e8:
                    c4:87:62:fc:9a:12:58:2d:5b:6b:2e:fa:8e:02:13:
                    47:0e:0b:f0:a6:eb:1a:c3:51:6d:22:50:60:7c:b2:
                    78:7b:b6:97:c8:5d:d1:ab:bc:a4:1d:75:28:35:18:
                    3c:1c:da:52:e0:e8:e0:30:25:13:2a:d0:f2:bd:e2:
                    fc:89:c4:c6:ff:1c:07:9b:2f:e7:1a:f9:45:8d:5e:
                    8d:74:27:34:ae:24:2b:90:3f:c2:61:f8:dd:a7:24:
                    30:c1:2e:6c:01:ad:c5:18:56:93:00:9a:71:c8:fb:
                    b2:b5:08:ea:f0:c9:7e:34:53:19:8c:46:4c:e6:3f:
                    e5:50:4a:fd:f1:20:3a:82:90:7b:14:a9:ce:2d:e8:
                    cc:d3:db:38:19:43:dd:ce:7a:87:f0:48:ca:88:89:
                    92:14:8a:0f:50:0c:ae:da:f1:db:42:80:23:4a:da:
                    28:47:b4:0f:77:98:18:a1:f4:89:ed:7d:56:fe:79:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2A:60:E8:D8:1E:5D:84:E0:F2:84:A0:54:27:AB:F1:D0:81:89:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32d9f4db-2052-3c5e-a823-3e25c5a82ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.17.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5f:ab:8c:69:ba:15:09:87:6c:6e:cb:0c:29:81:47:78:8a:
         70:11:0e:ec:6d:84:c5:ce:fb:08:4e:be:13:d9:a3:3e:c5:79:
         60:f8:b1:56:78:15:70:90:e0:58:54:3d:16:04:c3:2c:f0:9f:
         0e:42:3b:b0:b7:47:41:65:bc:f9:6d:b3:16:64:7d:44:0d:f6:
         fd:5e:8b:a8:ce:7c:c3:ff:b2:6b:36:b4:a6:91:c1:d3:bf:bd:
         7d:0a:0d:d2:fa:9a:83:26:9a:ec:fa:7a:52:d5:9b:33:da:65:
         e2:77:e9:28:1a:c3:59:a3:d4:58:11:e4:54:08:dd:11:17:58:
         de:d3:e8:13:25:0c:b9:eb:15:36:b3:fc:df:d7:94:bb:84:57:
         39:08:f4:44:90:23:e3:11:bc:66:5c:15:a3:fa:16:ce:92:c8:
         de:ed:78:bb:f0:98:f3:fc:ce:5d:4c:d3:46:17:54:f2:1f:db:
         77:d8:95:b9:cd:c6:8a:a2:57:ee:e1:e9:c1:2b:fa:2f:b9:3c:
         28:b4:ac:ee:b5:79:4a:2a:aa:8e:69:f1:74:46:12:c9:a1:da:
         54:a5:a3:6b:10:25:30:ee:89:16:77:52:e1:0f:19:f9:d2:53:
         63:74:77:ff:55:d2:1d:af:bf:87:42:b7:2b:57:f8:94:f0:6a:
         92:8e:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:50:21 2026 by rpki-client