Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa
File:                     5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa (raw, json)
Hash identifier:          BSRrcGMnKzmcD7V+5nuivcth9DmcvNIWmzj6mQg0yTQ=
Subject key identifier:   D4:CD:F0:59:F8:7F:AF:71:BA:F3:B5:87:77:28:6D:A7:C7:44:BE:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B954AB36F892CDC18A780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.212.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:95:4a:b3:6f:89:2c:dc:18:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=445ebf6c-20c4-4fc6-9f8a-6a71e174d6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fe:2e:3d:43:61:2c:8b:50:62:4c:2c:68:a3:
                    47:fc:aa:32:42:57:62:4c:30:59:5d:d0:d5:8a:6f:
                    82:4a:09:eb:e3:6f:63:6c:fe:ef:af:69:76:40:94:
                    89:ef:8e:0d:ec:ed:ac:a5:e8:1a:5a:86:f3:cf:5f:
                    23:0c:61:8d:60:42:f3:d3:1f:68:10:23:15:bd:66:
                    72:b5:8d:20:23:98:4d:ed:f6:2a:c9:3f:d3:1c:3f:
                    a5:15:0b:86:15:a2:a0:4c:e7:34:b6:18:36:02:06:
                    f3:11:d3:9a:30:a6:67:e8:97:79:d9:a1:b3:8b:b4:
                    ed:92:13:eb:a2:37:68:7f:b9:ed:36:27:85:ae:ff:
                    76:16:c9:85:a2:80:13:bb:1e:c6:b9:7e:ff:80:f8:
                    dd:c4:99:a9:f7:07:ab:1e:4c:63:ce:08:7a:0b:33:
                    0c:5f:70:0b:ae:8c:fb:cf:3f:6c:e2:16:c3:37:2e:
                    56:70:16:fa:d5:f6:f5:83:2d:c7:d4:af:5e:07:07:
                    9e:86:09:ec:1b:4e:8a:11:b9:77:09:25:1c:c2:7c:
                    99:47:60:6b:88:0d:b3:e0:e2:c3:47:a5:5d:b5:99:
                    f9:42:db:4c:ab:c0:bf:c9:bd:fa:71:ee:2f:8e:e9:
                    33:67:8f:d4:3f:82:00:a6:24:ef:83:27:56:86:59:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CD:F0:59:F8:7F:AF:71:BA:F3:B5:87:77:28:6D:A7:C7:44:BE:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:fb:2d:c0:a7:e5:3e:7b:0a:f9:64:8d:de:93:68:13:a4:
         42:e6:55:3b:05:27:9a:e4:55:1a:8e:e7:3a:78:9b:f0:cd:0a:
         d9:cc:7c:29:7d:0d:83:41:c7:c7:c1:bc:84:49:6c:c9:c9:e6:
         45:32:7d:9c:ab:47:f6:7e:ba:68:19:5e:78:99:32:40:34:45:
         fc:2e:7f:0d:2a:3b:11:c8:4f:a4:c8:cb:0e:60:14:4a:e2:3d:
         fd:dd:b7:e1:e9:1a:73:75:a1:9b:3b:fd:3e:9c:33:5f:85:28:
         cc:76:d9:e5:0e:a2:ee:15:c1:6f:2f:e9:e8:0e:39:24:f3:5a:
         22:ed:30:32:9e:df:ea:ee:21:e8:ba:1d:35:6b:75:53:01:05:
         de:8d:3c:87:03:f7:6a:65:f9:b7:47:eb:81:68:5e:62:93:ce:
         16:14:de:ee:74:4e:f3:fe:c6:3d:2d:d1:84:0c:50:96:aa:86:
         f4:87:40:cd:93:da:d8:bb:a4:d4:d0:bf:81:c3:b3:0b:3c:82:
         77:29:91:62:cd:06:23:82:dc:0b:bc:c7:00:97:2b:5f:8b:20:
         34:9b:a2:54:67:e1:13:e0:df:bb:1f:fd:b9:6e:ab:ee:df:ae:
         8c:7f:3c:4d:58:44:7b:89:d9:81:aa:67:7d:c6:7e:ce:03:07:
         0d:eb:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:46:05 2026 by rpki-client