Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51a54a91-a491-3714-bad4-dc263917aba8.roa
File:                     51a54a91-a491-3714-bad4-dc263917aba8.roa (raw, json)
Hash identifier:          K5feNzx0UJ3uvHJ7Nm7p2hzL58O9GHtK8VP2BS5heec=
Subject key identifier:   3B:08:39:A2:13:69:E4:BB:20:E7:15:AB:DA:5A:EE:B7:86:B2:9F:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C79AA6D02C1F54746FD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51a54a91-a491-3714-bad4-dc263917aba8.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.227.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:79:aa:6d:02:c1:f5:47:46:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=fd148374-839f-455f-bf97-65db4c23e749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:f9:da:50:43:d9:e1:11:63:e8:35:e5:8d:
                    b3:e4:be:a4:3a:f5:6e:a5:b9:0b:ee:68:8e:02:c6:
                    b1:0f:81:4c:54:bf:27:39:9e:81:d6:6d:41:2a:80:
                    e1:2a:9d:9b:13:cd:d5:6e:c2:a5:97:43:b3:c4:52:
                    9d:a6:f1:a7:e4:81:43:a4:53:36:03:07:1f:29:6e:
                    2e:42:b5:a3:51:3d:11:41:67:91:89:dd:35:07:6b:
                    9d:0d:66:c5:04:19:ea:8b:db:71:0c:32:5d:a2:1e:
                    f7:cd:29:12:ec:dc:3d:b2:15:4b:3a:79:f2:98:59:
                    cf:10:68:44:cd:d9:1e:69:60:9e:7a:e3:b1:2b:c9:
                    d7:ac:8a:da:e8:73:ad:8f:a2:41:b2:0d:bd:f2:58:
                    bd:c5:26:63:17:6e:51:21:fa:39:04:6b:8c:a3:f3:
                    bc:ec:44:f4:19:09:27:65:81:33:82:46:57:70:5d:
                    35:a7:6e:61:d4:a7:29:2a:86:d1:25:64:a3:1f:5f:
                    88:1f:4e:45:52:c4:96:20:91:ad:82:b6:71:d9:c8:
                    2d:81:dc:f5:73:9b:a8:e9:62:4c:20:cb:8b:3a:10:
                    1f:aa:fa:82:b4:3b:2e:e2:b2:3c:21:fb:06:e2:0a:
                    07:aa:af:23:60:d2:b9:b0:2e:7f:39:64:b2:8c:0d:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:39:A2:13:69:E4:BB:20:E7:15:AB:DA:5A:EE:B7:86:B2:9F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/51a54a91-a491-3714-bad4-dc263917aba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.227.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:b3:2a:cc:4b:bc:6f:66:f6:da:58:b4:37:48:ad:6d:f2:
         aa:0d:d4:e4:31:de:29:38:7c:38:f2:f2:30:1f:74:97:37:e9:
         6a:a6:75:f0:6e:c4:65:00:3b:a0:02:ac:a0:53:a2:7f:42:bc:
         78:4f:ec:40:6c:7c:c8:e6:ef:7f:b9:1c:d2:10:76:1a:e8:d4:
         1c:65:ee:31:08:2f:34:21:c0:dd:0c:b9:28:a3:04:4e:f4:af:
         e9:86:19:13:4a:b8:d3:38:08:f5:95:c1:f6:4b:20:e3:95:ff:
         4b:07:0a:80:e6:65:14:b0:7a:76:8b:7c:e8:03:78:88:78:a9:
         04:22:93:65:0c:6e:f6:74:8b:87:4a:4f:80:9a:bb:47:3e:24:
         a5:07:73:cb:91:cd:60:17:d6:2a:59:0a:1c:27:b3:f5:49:78:
         02:49:59:e1:42:dd:b8:91:c4:ba:b5:5e:7e:03:4c:b1:62:ff:
         a8:8a:ca:1b:e6:ba:3a:22:c9:27:09:be:15:f1:ff:ad:dc:1d:
         5e:d6:ab:85:bd:dd:22:65:eb:91:87:55:b4:a3:73:4e:82:4a:
         60:84:54:bf:d3:54:61:26:f6:b2:6c:e1:61:62:d1:18:0c:f0:
         43:47:a6:17:1d:b1:c7:6b:29:29:78:df:dd:ea:a2:7d:88:f2:
         ab:74:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:55:09 2026 by rpki-client