Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa
File:                     39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa (raw, json)
Hash identifier:          HRViXR2iT7U4/J8Ob6zastIjhPQsBI9HPs6Ijz4a63c=
Subject key identifier:   E9:2C:23:D2:B3:BD:97:91:8D:E2:4D:DE:DF:B7:AD:BB:28:4C:66:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B857E0CF7416E77FD44C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.219.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:85:7e:0c:f7:41:6e:77:fd:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2b7eadc9-078a-491d-9aea-a5510f09a673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:08:6c:35:5d:43:e8:36:27:00:44:30:3e:
                    11:86:f6:fe:05:91:bc:29:ea:34:1a:9f:2e:46:b3:
                    fc:19:0a:0f:93:06:66:ea:f3:64:aa:4b:f3:ae:72:
                    5e:95:6e:30:a4:6e:af:88:68:e3:bf:3d:98:9c:d5:
                    a5:11:b0:9b:85:fe:a6:54:8c:0a:2b:b5:bb:d2:e2:
                    f2:d7:8e:d3:0c:d6:36:6a:56:8c:f4:9b:78:f9:46:
                    b2:29:6f:60:03:00:38:01:ff:ed:b6:34:22:3c:ae:
                    bc:8e:aa:46:f0:2e:e2:20:bd:78:4b:52:4a:1e:7a:
                    22:bf:28:35:c6:87:df:da:ef:0a:42:7d:9e:2c:17:
                    99:4b:66:ee:20:7f:02:61:40:4b:1d:7e:77:0d:70:
                    49:92:b6:c7:0a:16:53:c0:7f:32:e0:b0:43:df:87:
                    0d:e8:49:e5:81:62:f9:09:07:44:0d:be:3b:74:14:
                    27:1d:b5:e5:29:76:b9:21:46:e5:7e:1a:d2:62:77:
                    6d:45:5c:cc:06:be:68:dc:a9:d2:bd:c3:6f:b1:fa:
                    13:68:c1:58:d2:cf:a6:6b:99:db:c0:2a:4b:d1:9e:
                    52:e3:64:ac:88:b7:d9:61:ba:b4:bc:e5:ea:f2:d0:
                    1b:52:77:f7:5e:ee:a5:bf:f1:24:0a:fc:e3:c1:1c:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:23:D2:B3:BD:97:91:8D:E2:4D:DE:DF:B7:AD:BB:28:4C:66:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39d85840-5b11-3fb9-8a3d-bfc2acadacf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a7:9e:f4:49:c9:e5:bf:b6:07:de:dd:13:b4:b7:f4:cd:30:
         19:29:16:0f:6a:7d:8e:68:b6:fb:f9:57:3f:dd:98:9f:ab:d0:
         a2:f9:26:93:17:db:c3:14:6c:b9:83:de:83:c6:4f:d3:fb:53:
         c1:0d:94:de:a9:8b:fc:ea:47:d3:5d:14:b2:f1:f8:13:df:a4:
         c6:1f:ab:bd:ee:39:3a:43:c8:09:a4:55:e4:8a:d8:14:6c:2f:
         ed:c0:77:dc:75:d8:ca:e0:8e:96:d5:28:c1:ba:49:dc:6b:ce:
         5f:1f:ce:b1:23:24:ae:51:51:9a:52:d3:60:70:72:d6:4d:08:
         bd:51:ea:42:57:71:52:6c:b7:23:b6:3e:1a:8d:ab:27:ca:11:
         5a:cb:8d:14:f6:26:db:af:f4:25:01:33:27:83:01:f6:38:a7:
         3d:1b:1f:a0:ea:45:a6:80:85:0a:ff:29:1e:f6:c5:39:bc:36:
         57:26:90:86:76:5c:65:5d:1e:87:90:01:a1:13:e5:92:0e:50:
         a1:2a:19:6b:8b:26:d9:3e:dd:4a:14:1f:4c:a0:0b:f9:21:a3:
         87:da:57:6b:23:a9:f7:54:0c:dd:c2:38:ca:b0:ee:64:7b:60:
         c7:50:59:13:85:7a:cd:06:14:5b:0d:79:13:d4:c1:67:a7:e5:
         a1:fb:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:42:57 2026 by rpki-client