Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa
File:                     35a6baf9-6504-389c-8368-f75a35c0fbe6.roa (raw, json)
Hash identifier:          x5wbEFQ+QMHhGs9GoL+A8x+rPTQJGznRADDTwyFvElI=
Subject key identifier:   99:E8:E1:D7:B4:95:DC:68:9C:83:35:BE:14:CC:95:C4:4D:12:73:B7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B7626858F763A7CF6A4E8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.214.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:76:26:85:8f:76:3a:7c:f6:a4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2599ebdf-2e57-437b-9600-b2a71dfcd536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4e:22:cd:b3:b4:06:aa:27:92:74:42:ce:60:
                    cc:ac:2e:7d:f3:2b:81:39:1a:4a:42:1a:c9:0d:56:
                    4d:92:0e:53:43:09:17:e9:93:28:8f:36:12:cc:e5:
                    36:d2:4c:80:bd:71:a0:47:6c:8c:00:22:f1:5e:b4:
                    58:35:f2:8d:a4:b4:25:41:31:cf:41:18:12:98:ff:
                    3b:b8:3e:b4:c4:67:54:dc:bc:ff:e7:77:e2:7f:ca:
                    3c:60:54:cd:85:e4:25:d8:76:28:c1:69:1c:32:c0:
                    0c:66:6f:3a:14:4c:72:61:87:40:e2:72:c1:ed:bb:
                    41:fb:35:51:d5:fe:7a:23:e2:1c:c7:95:d1:5e:3e:
                    ec:64:1e:6d:d4:1d:16:43:5d:10:cc:b6:ea:79:64:
                    1e:25:0e:fb:42:33:b1:29:40:7d:f5:99:15:81:26:
                    4e:84:61:0b:f2:85:07:5a:f1:41:d2:c3:bc:7b:da:
                    b5:7f:42:b8:e8:02:41:dc:2e:20:53:da:40:d0:4c:
                    ea:ae:0c:c7:76:ad:2d:af:87:30:71:0c:15:5b:b2:
                    22:1d:12:75:d0:03:a0:2a:8e:1d:65:ba:db:81:4d:
                    ce:0a:0b:9e:90:d8:3d:c7:5c:71:80:ae:38:1a:a3:
                    ee:bf:f6:a5:c5:72:7f:17:b2:e2:c3:63:e2:a4:88:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E8:E1:D7:B4:95:DC:68:9C:83:35:BE:14:CC:95:C4:4D:12:73:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35a6baf9-6504-389c-8368-f75a35c0fbe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:cf:dd:fe:40:a6:20:e1:82:02:d9:a4:83:45:f9:3f:81:f9:
         6d:9d:66:09:3c:9b:f8:e6:06:0d:a3:5e:5f:93:14:79:ff:09:
         99:9a:75:f4:b4:11:a1:eb:0d:c4:b0:a6:18:53:97:41:bf:1d:
         86:6f:20:76:b7:f4:f8:18:c8:af:fa:58:94:d3:83:bd:c4:dd:
         6f:28:f4:31:9b:d6:87:0b:33:2c:31:b6:28:ca:f2:3b:28:0c:
         0a:83:a8:c2:55:8c:01:77:af:56:ef:7e:57:37:94:44:6d:f4:
         b8:ca:94:6e:71:43:b9:03:44:6f:e2:35:a8:45:4b:23:b0:7b:
         bb:ce:b9:2e:c0:ee:94:3b:7c:28:34:10:41:67:47:e2:b5:61:
         dc:08:8f:73:7b:26:3a:7d:40:00:98:03:41:b4:38:7a:2d:b8:
         a4:4e:b6:d0:51:15:05:d6:8e:83:93:a0:17:83:8b:0a:9b:67:
         16:55:18:ea:e3:66:96:34:59:3e:8e:42:42:ee:95:25:07:c5:
         51:95:99:7a:5c:27:79:58:ab:9f:40:f5:c3:1c:c6:f3:e4:43:
         c9:9c:f5:a6:d8:f4:20:5f:36:81:5e:38:6a:cb:3a:ef:6e:8d:
         fa:b6:c4:05:f1:6b:60:9e:bb:48:2a:14:0c:f3:ea:c6:e3:ee:
         55:15:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:56:06 2026 by rpki-client