Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa
File:                     63a6474b-a6a7-3626-8a56-59196517ca50.roa (raw, json)
Hash identifier:          k2ISi19utrF0UqdqQaZ0cZXH5j6vikXfIEpVCXiSzFI=
Subject key identifier:   42:1B:25:0F:C6:C5:51:5D:0B:F7:48:23:E9:A5:D1:DD:78:31:93:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2D9F399E4B342DF26E679A60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.40.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:39:9e:4b:34:2d:f2:6e:67:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=42ee10d2-4c37-400f-b707-b4eb60d9681d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:89:0d:08:18:15:ea:50:81:9a:5e:70:fe:
                    08:4e:81:32:52:28:55:3d:fb:65:e2:1d:61:dd:a2:
                    e9:24:f0:ea:8b:a2:55:dc:63:fe:bd:e3:fe:00:ad:
                    4d:eb:64:10:26:5e:7d:86:c0:c5:cb:82:fd:f7:14:
                    9f:7c:5f:4d:0b:ec:58:10:ad:1e:dc:b0:e7:2c:0a:
                    35:ea:d1:d6:67:d5:3a:ac:c9:13:68:1c:64:8d:63:
                    68:d5:b9:36:42:a4:cf:70:99:f9:ea:b9:20:73:d5:
                    0e:1e:7a:32:5b:94:14:fe:76:73:5b:c9:01:98:b0:
                    74:a6:d1:9b:1a:d6:15:08:c3:eb:47:46:dd:20:af:
                    5b:6f:a3:40:3c:07:ec:72:ce:e8:15:44:58:e8:f3:
                    23:f7:60:a2:de:87:d3:20:99:cd:8a:81:3e:91:dd:
                    09:ae:11:26:e5:1b:7e:f3:e9:8b:45:1a:51:08:ae:
                    c2:59:fc:5f:f0:af:fb:fe:ac:7a:0c:ef:8a:a0:50:
                    1a:10:d6:96:e6:5f:8e:9a:23:37:78:33:54:32:a4:
                    e5:f6:b8:16:35:a2:95:50:1b:2a:b0:ee:56:bc:d8:
                    91:cb:b0:54:1e:34:fa:f3:76:13:5c:57:e2:ac:6d:
                    37:0c:82:9a:36:57:3d:76:74:4d:47:0f:ea:eb:1d:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1B:25:0F:C6:C5:51:5D:0B:F7:48:23:E9:A5:D1:DD:78:31:93:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63a6474b-a6a7-3626-8a56-59196517ca50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.40.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:39:10:3a:59:93:20:a4:f0:31:ca:4a:a5:36:b2:4d:5c:2a:
         77:9d:96:a6:72:11:e7:be:cd:e7:00:07:dd:bb:53:28:01:81:
         6d:4e:39:cb:a1:9c:1f:6f:ff:96:e0:3e:da:ca:93:af:9a:ce:
         2d:99:1e:f9:02:f6:96:ef:28:3e:b9:79:09:12:77:92:2b:14:
         f2:46:14:4f:94:ef:25:56:5e:36:b4:76:b9:ee:68:7c:f0:2e:
         09:68:9d:62:76:92:f0:30:d7:e5:80:12:d8:53:e9:c4:9c:d2:
         13:4f:13:49:a1:2a:ab:37:f0:7a:49:0b:db:be:b8:e2:63:60:
         5d:4e:6e:f5:c1:d5:78:a4:8f:b3:6b:08:40:b9:ef:8d:cc:77:
         90:11:72:dc:dc:de:14:11:02:7b:90:a4:c0:63:75:30:9e:ca:
         bf:11:08:8c:fd:d1:25:38:95:ef:23:6a:4d:61:7a:26:26:e9:
         7d:c4:87:ec:37:e6:78:e7:52:1c:52:56:85:6c:f2:f1:ad:79:
         13:02:fc:09:5b:b2:75:27:11:9a:41:bb:5b:54:48:38:22:69:
         be:43:95:c1:e7:6e:50:57:61:f8:0d:b8:1f:31:92:b5:ef:56:
         a7:e6:d3:be:92:3c:3d:71:88:95:33:a2:45:11:9b:8e:d9:e6:
         06:30:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:39 2026 by rpki-client