Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59fa9b9a-afcb-31ba-bf5c-e133514dcc86.roa
File:                     59fa9b9a-afcb-31ba-bf5c-e133514dcc86.roa (raw, json)
Hash identifier:          ES0n5wsoPY7UDbsME/m+yPVGgOSFKtlRGFTg4AFDtXY=
Subject key identifier:   C2:5F:AF:EA:52:A3:E6:6E:8C:96:0A:FD:5C:A1:2A:ED:E3:DA:1D:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B7A87974DB375024FC640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59fa9b9a-afcb-31ba-bf5c-e133514dcc86.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.218.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:7a:87:97:4d:b3:75:02:4f:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0363ca5e-326b-4518-b2d0-a45504a906e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:ec:05:c5:0c:60:1a:62:5d:80:c1:24:2a:
                    fc:7b:52:fb:67:79:f4:7e:34:70:15:ac:15:37:5c:
                    bc:5a:76:6c:c8:99:f7:6c:b4:85:80:b2:17:50:d1:
                    88:c3:cb:cd:9b:03:60:ad:89:e8:d5:34:b9:1f:66:
                    97:d3:a8:1c:ab:49:16:19:47:55:cf:1d:2d:11:15:
                    a6:a4:26:b6:b4:36:da:83:68:ef:77:55:1e:3c:d3:
                    c2:3b:69:22:ee:50:e1:79:51:ef:a7:92:eb:2c:f2:
                    c6:9b:c2:38:87:a5:ca:73:3b:40:90:41:cf:81:33:
                    8a:90:eb:03:22:d4:b2:37:e5:89:42:5b:34:1d:7d:
                    cf:6d:6a:ab:22:5d:c3:4c:0f:32:84:8a:91:94:f3:
                    27:67:e5:41:9b:26:0f:cf:b7:cd:e4:67:cf:a2:4a:
                    d6:d6:60:53:18:35:a0:df:cf:bf:14:d1:bd:48:69:
                    fd:06:cf:22:13:40:2f:67:1f:f6:3b:e1:f5:1c:e9:
                    cf:82:db:cc:f7:c8:bc:56:25:9e:d7:a4:5e:95:74:
                    6b:a2:29:a8:d7:a2:70:d1:e6:06:fb:17:28:f0:ab:
                    df:25:fb:a1:20:ae:46:6c:28:c7:d5:81:20:fb:d1:
                    0c:05:37:f1:8b:dd:51:33:70:a5:04:d3:23:5a:95:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:AF:EA:52:A3:E6:6E:8C:96:0A:FD:5C:A1:2A:ED:E3:DA:1D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59fa9b9a-afcb-31ba-bf5c-e133514dcc86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:c0:c4:c9:17:39:e4:25:e1:7f:8f:12:5a:08:ff:a4:45:
         a1:b4:16:f1:29:0f:48:d9:16:21:c9:dc:dd:e6:23:d3:a0:cc:
         8f:16:5c:a2:8d:0b:42:db:49:ae:88:8c:2e:dc:bd:62:4f:45:
         c9:99:e6:d9:a7:7d:e6:84:fd:2a:fe:35:1a:f3:9a:88:84:e1:
         5b:1b:38:43:46:23:17:20:e9:6d:62:03:00:71:54:a1:a1:00:
         7c:76:3e:85:62:24:85:43:04:ef:f5:a8:7d:28:04:21:9b:7d:
         29:1b:53:74:64:7b:54:e7:74:3d:46:1d:e4:fc:6e:ed:68:46:
         77:2e:bd:9a:94:75:e6:f8:d1:4b:57:3e:a7:69:60:ce:8f:ac:
         8d:5c:69:31:d2:06:74:51:92:35:ef:81:13:62:76:55:e3:b5:
         2f:a6:55:74:a4:80:2c:ad:1e:28:3a:f3:a1:d0:2e:d6:0d:56:
         84:22:cd:15:60:58:55:dc:ac:dd:e5:11:7a:7c:da:29:e4:66:
         8e:b8:2f:e6:78:f0:f6:26:b8:1d:0b:cc:34:57:a1:fc:2f:65:
         4f:96:79:98:21:c0:22:76:35:fb:79:ce:f5:01:45:23:11:f5:
         0c:66:0f:b7:25:d3:b2:4c:ed:57:7b:15:77:58:c7:f7:35:fd:
         27:ee:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:42:31 2026 by rpki-client