Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d58ca7-1747-3fb1-b1a8-15bea0d2c07e.roa
File:                     52d58ca7-1747-3fb1-b1a8-15bea0d2c07e.roa (raw, json)
Hash identifier:          vTBhXqN+dSjjTkwo9AnF5AEqgmgzGhV2WpLEk7atSiM=
Subject key identifier:   6E:86:C8:71:D5:CC:88:DD:4D:C9:EA:A5:12:A8:54:46:30:BA:10:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C7EE9C4005D9941700200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d58ca7-1747-3fb1-b1a8-15bea0d2c07e.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.239.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:7e:e9:c4:00:5d:99:41:70:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=3a8d1621-7e1e-41af-8a9c-c19831a84e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:99:ff:a2:36:69:fb:f2:4d:0c:f7:3a:bd:
                    c6:de:77:bc:25:2d:1b:09:3c:e6:1f:0a:1e:c8:c4:
                    b6:60:95:b2:60:61:0e:62:48:5f:e5:70:18:63:5b:
                    a1:3d:ba:06:dc:5b:c4:95:e0:5c:03:44:79:88:74:
                    7d:1b:9a:f7:75:18:62:fd:d5:05:d0:f3:79:ea:7f:
                    36:92:22:f7:3c:8c:58:34:28:b4:d7:6f:27:0f:b6:
                    56:e0:e9:38:b5:09:da:d3:aa:64:16:bf:13:5a:27:
                    5a:4d:e1:86:e4:c9:95:c4:67:ab:d6:a1:6d:c3:0a:
                    01:a4:72:ab:5a:66:57:fe:fa:30:ae:38:79:bd:c6:
                    45:85:4c:f0:18:be:0e:40:3e:f8:fd:c9:72:0c:6f:
                    1f:53:9c:36:c8:a9:92:ac:01:75:11:ce:21:20:a2:
                    99:33:2a:3f:d4:3b:44:95:01:3c:ff:ed:ed:cc:78:
                    39:d4:55:39:80:d2:a2:e1:f2:d1:e6:98:2f:c5:38:
                    75:9d:a7:d1:2a:ad:1e:96:5e:8c:db:6c:8a:47:1e:
                    9e:29:a3:da:62:67:95:96:ff:86:70:c1:c1:b7:f6:
                    fa:57:58:0e:4e:67:93:9b:b2:a0:f9:f7:bc:3a:d0:
                    27:ac:7e:47:3b:b9:15:4f:74:23:09:a2:8a:30:82:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:86:C8:71:D5:CC:88:DD:4D:C9:EA:A5:12:A8:54:46:30:BA:10:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52d58ca7-1747-3fb1-b1a8-15bea0d2c07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.239.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:bb:8c:ff:e5:11:6a:17:c1:3d:43:88:41:d1:5d:12:b3:5f:
         97:6d:71:ec:9f:e4:e8:94:2b:45:90:60:99:af:72:53:34:20:
         ca:66:e3:1a:33:e8:9d:c8:55:27:82:ac:c4:a5:a8:d1:4c:80:
         26:3c:2a:74:b3:02:7b:c9:da:fe:af:c8:70:be:55:9c:e9:a1:
         dd:08:8e:fb:56:b8:26:00:34:f4:79:0d:4a:08:ae:71:af:7c:
         93:a3:a2:3e:d4:4f:b8:d0:16:d7:ab:10:77:f2:dd:20:ea:99:
         ca:87:71:19:8e:0e:e6:a6:db:bf:9f:6b:f1:5f:97:03:c2:07:
         01:c1:09:a0:e4:1a:fe:8d:47:af:b8:d2:9d:dd:c0:4b:77:09:
         b4:d6:6b:fc:5c:0d:f8:ea:7e:92:c1:93:15:bb:67:2c:f8:5d:
         ab:f7:ea:63:d8:db:7a:a8:29:e4:ee:8d:ef:f3:c5:5b:25:77:
         a4:4f:c2:ab:5e:02:71:13:8d:bb:2c:2a:fe:cd:25:3d:77:34:
         d6:c3:a8:b7:3d:eb:a0:3c:f0:47:7c:70:f0:3d:05:b9:dc:89:
         d5:e2:c1:bf:95:8e:42:4e:d2:5d:e5:18:25:2a:1e:37:64:9f:
         67:95:19:3c:06:1b:26:82:18:cb:ce:24:a3:e0:16:75:43:4c:
         4c:70:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:50:03 2026 by rpki-client