Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/373e449b-5515-3af4-8cac-c6cd88e7ccb2.roa
File:                     373e449b-5515-3af4-8cac-c6cd88e7ccb2.roa (raw, json)
Hash identifier:          k1J6Q698k8W302tGAvI/lNXS5cdFXL/zcW6G+8M+yTc=
Subject key identifier:   D9:FE:A6:2B:A5:9F:BC:24:85:11:30:A0:9B:5F:99:74:50:AC:B5:E5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EDF5C8FD69351E811919BF3E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/373e449b-5515-3af4-8cac-c6cd88e7ccb2.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.245.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8f:d6:93:51:e8:11:91:9b:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=dd92eb83-1c52-432c-8f6b-8f2a496c2e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:c0:e8:4b:48:23:70:00:af:ee:b2:b7:a9:
                    e2:d9:d3:bd:8d:b1:77:9b:40:3a:bf:ed:0e:13:b7:
                    e0:f4:ae:74:4b:90:a1:a5:d6:fd:c6:da:fa:c5:82:
                    cb:c9:67:49:14:26:f1:17:b7:4b:ce:f9:b2:20:11:
                    2c:57:cb:53:ec:54:d7:fa:f8:52:71:4a:6c:d4:e1:
                    6e:70:17:9a:24:d6:35:d7:6b:57:56:1d:89:ca:e8:
                    f6:4f:0e:2d:a9:89:0b:9f:30:02:3a:e2:82:bf:95:
                    07:bb:69:fe:bd:1d:5b:8a:3b:d3:e5:a1:04:17:ec:
                    02:46:cd:b1:0b:00:e0:f1:2c:5c:ff:ef:02:e0:d2:
                    ad:9e:ec:79:9b:38:a7:02:31:ef:d0:fb:8e:5b:c7:
                    b1:92:40:f5:12:38:2b:8e:f7:b5:54:fa:3a:3b:05:
                    8d:48:b3:be:85:49:15:25:e9:ce:1c:81:c5:1a:43:
                    f8:21:e3:1f:f0:b9:28:4b:67:a9:ce:1a:f6:63:e9:
                    b3:47:7c:51:60:24:e5:c3:78:29:f7:66:52:1b:27:
                    b1:2f:db:1e:03:27:52:1c:93:85:63:3a:ed:07:60:
                    fa:d0:2a:da:ab:17:e8:f4:6e:77:7a:3f:ac:d6:c8:
                    c1:f3:96:c0:6f:e9:4a:1c:6c:7e:21:62:2a:40:b6:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FE:A6:2B:A5:9F:BC:24:85:11:30:A0:9B:5F:99:74:50:AC:B5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/373e449b-5515-3af4-8cac-c6cd88e7ccb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:53:75:65:55:81:41:ac:f5:b3:7c:2c:5f:2a:f9:51:60:69:
         d5:55:08:b6:96:e8:33:40:23:44:b1:15:96:99:d1:c9:6d:3d:
         27:08:9e:30:04:8a:13:c6:55:da:31:de:9b:16:e9:4b:94:89:
         99:85:51:86:60:3c:80:e5:e8:8a:d9:be:95:5d:e8:5c:31:c9:
         73:7c:34:af:c4:31:c9:91:36:63:47:ea:82:69:54:01:a6:48:
         77:6a:10:6a:65:6b:29:98:03:a6:b4:56:42:c1:40:9a:ff:fd:
         87:d1:87:87:31:28:23:5e:b1:46:d7:78:df:8f:9b:52:e2:ad:
         61:aa:bd:a5:54:b0:4d:12:05:5d:81:e3:48:7f:c9:69:80:dc:
         c2:d8:7d:2a:5c:72:3b:3c:96:de:e2:58:a9:a8:62:13:69:cc:
         8b:fc:22:5a:cd:2e:ad:cc:6d:a8:e7:4b:76:22:e1:0b:70:c3:
         87:87:d2:04:b0:10:34:ec:4a:54:bb:32:9a:4d:74:3b:61:49:
         87:6f:1e:e6:22:08:a7:b4:d2:2e:e5:3c:6d:93:1a:02:b1:6c:
         6f:ab:8f:37:84:b3:ee:cc:31:0f:0b:9d:18:2d:78:2b:93:4f:
         ca:8c:77:db:d0:b8:b2:79:bb:0b:29:78:d8:cc:3c:25:f7:a1:
         4d:dc:d6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:47:01 2026 by rpki-client