Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3924df51-2857-38d3-81dc-8d7bf03d2093.roa
File:                     3924df51-2857-38d3-81dc-8d7bf03d2093.roa (raw, json)
Hash identifier:          swx/LAHfLcCHH8hLgWXhzbgZMcUHg+zhwS94j0TJWMo=
Subject key identifier:   20:E5:54:F9:D4:17:80:AB:29:CA:B0:FF:FA:57:F5:8D:AC:87:56:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ED001FF1754A2A093D232F600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3924df51-2857-38d3-81dc-8d7bf03d2093.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.42.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ff:17:54:a2:a0:93:d2:32:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=730a7180-676b-42f5-b233-b37ff340b758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:11:6c:d5:07:8f:d3:33:ed:fa:6c:49:06:
                    5a:39:60:6c:ab:09:e6:f4:d6:7a:1f:dd:6e:21:b1:
                    f1:52:e9:f4:7b:9b:ab:66:87:a3:86:c3:53:3f:35:
                    a8:70:b9:4e:66:e3:6d:cb:32:12:c8:77:e2:e8:61:
                    ec:2d:db:94:1d:c2:79:11:c7:55:3b:11:aa:b8:a7:
                    52:a7:33:b3:b1:4a:35:62:ff:c7:d5:ed:21:72:42:
                    b2:7f:38:45:73:74:0e:07:bd:c8:86:39:36:4a:d5:
                    30:9b:3d:5f:db:5b:4c:f0:e0:0a:5a:92:6f:bd:00:
                    e0:b7:33:b5:f0:e5:a8:02:7b:30:87:82:45:ef:01:
                    fd:f5:6e:3d:f7:bb:25:dc:49:e4:9e:40:d6:1a:d2:
                    12:bb:66:02:db:8f:1d:01:4f:b8:79:36:a4:d8:63:
                    0c:73:84:63:b6:4e:32:c2:f5:c6:54:73:2e:8c:89:
                    af:62:b3:e6:ac:47:23:aa:3b:ac:2f:29:7a:06:e1:
                    c4:79:8a:e5:97:64:f4:db:e9:8e:9a:88:0c:c6:6f:
                    4e:8b:b5:81:a0:f9:9d:29:05:21:ad:ac:02:a9:42:
                    6e:d2:93:95:15:ca:76:18:3a:bc:08:04:d3:d3:c2:
                    d8:cb:67:ec:f9:b4:2c:3e:ab:15:01:ba:1c:ad:40:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E5:54:F9:D4:17:80:AB:29:CA:B0:FF:FA:57:F5:8D:AC:87:56:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3924df51-2857-38d3-81dc-8d7bf03d2093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c8:27:43:8d:c5:41:db:94:d5:a3:bd:b9:8f:c1:64:21:18:
         a0:0f:cb:22:b9:79:79:52:bb:2f:3a:bc:b6:d3:0c:94:7f:c1:
         a4:12:d5:9a:2c:72:3a:68:32:b3:83:c1:e9:c3:bf:32:ef:e4:
         28:d1:f8:56:51:a1:c0:2d:0e:29:1c:0b:71:b0:88:95:87:17:
         fe:f0:56:2b:74:d6:6f:52:93:ef:c7:40:93:72:7e:e0:af:d1:
         a2:e5:14:e6:62:7f:b6:f8:2f:8e:37:ce:ec:c7:7d:10:1e:ec:
         0c:0a:64:c6:2b:8a:f4:31:f9:60:ad:45:68:f3:c8:78:07:c5:
         89:23:ad:87:9f:9a:e2:ac:77:4b:36:a2:d9:d7:0f:95:cf:7b:
         81:c5:a5:63:cf:77:0d:74:e6:d9:ec:d3:93:a2:d8:7e:3b:43:
         1a:66:20:55:ac:46:21:6a:1a:2e:09:50:4b:44:69:14:08:e5:
         9f:1d:e5:51:92:6a:7f:ae:cf:4e:13:7f:74:7a:9f:2c:58:91:
         03:92:06:5c:b0:06:05:e7:f5:10:9a:d0:8d:93:81:93:88:d3:
         35:d6:1f:97:f1:01:89:4f:0b:a3:63:d2:90:2f:cf:bf:a7:9a:
         78:c6:94:b7:de:64:52:c5:1d:d8:c3:d1:c2:75:61:3a:6a:c8:
         a8:da:2f:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAf8XVKKgk9Iy9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NzMwYTcxODAtNjc2Yi00MmY1LWIyMzMtYjM3ZmYzNDBiNzU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztgRbNUHj9Mz7fpsSQZaOWBsqwnm9NZ6H91u
IbHxUun0e5urZoejhsNTPzWocLlOZuNtyzISyHfi6GHsLduUHcJ5EcdVOxGquKdS
pzOzsUo1Yv/H1e0hckKyfzhFc3QOB73Ihjk2StUwmz1f21tM8OAKWpJvvQDgtzO1
8OWoAnswh4JF7wH99W4997sl3EnknkDWGtISu2YC248dAU+4eTak2GMMc4Rjtk4y
wvXGVHMujImvYrPmrEcjqjusLyl6BuHEeYrll2T02+mOmogMxm9Oi7WBoPmdKQUh
rawCqUJu0pOVFcp2GDq8CATT08LYy2fs+bQsPqsVAbocrUBBVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDlVPnUF4CrKcqw//pX9Y2sh1b+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzkyNGRmNTEtMjg1Ny0z
OGQzLTgxZGMtOGQ3YmYwM2QyMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErirAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrIJ0ONxUHblNWjvbmPwWQhGKAPyyK5eXlSuy86vLbTDJR/waQS1Zos
cjpoMrODwenDvzLv5CjR+FZRocAtDikcC3GwiJWHF/7wVit01m9Sk+/HQJNyfuCv
0aLlFOZif7b4L443zuzHfRAe7AwKZMYrivQx+WCtRWjzyHgHxYkjrYefmuKsd0s2
otnXD5XPe4HFpWPPdw105tns05Oi2H47QxpmIFWsRiFqGi4JUEtEaRQI5Z8d5VGS
an+uz04Tf3R6nyxYkQOSBlywBgXn9RCa0I2TgZOI0zXWH5fxAYlPC6Nj0pAvz7+n
mnjGlLfeZFLFHdjD0cJ1YTpqyKjaLzA=
-----END CERTIFICATE-----
Generated at Thu Aug 27 20:49:13 2026 by rpki-client