Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771c2e52-39c8-3152-a65c-b4706d034fa6.roa
File:                     771c2e52-39c8-3152-a65c-b4706d034fa6.roa (raw, json)
Hash identifier:          G2eJVvwLq+8sQXJgh+3PglfMlZVKFke+f3Vq37iS9gQ=
Subject key identifier:   AF:1D:34:E6:6C:B6:BC:AF:B3:CD:F2:66:4F:DA:1C:8F:59:FD:14:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C58444DBC9EB3E701E9D1AC
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771c2e52-39c8-3152-a65c-b4706d034fa6.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.234.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:44:4d:bc:9e:b3:e7:01:e9:d1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=50b54af8-c1f3-4070-b0e6-23bbcc5d827b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:f1:43:e7:85:84:fc:b0:05:53:62:34:74:
                    19:bb:8f:7c:f7:4f:8a:0c:49:ca:98:a9:de:42:b0:
                    59:c0:4d:9e:1b:d9:a2:83:25:4e:df:99:6e:5a:79:
                    60:17:58:f2:5c:8a:31:8d:df:5b:42:c1:6b:a8:f8:
                    2c:0f:57:6d:3a:2f:dc:22:f9:cf:09:8c:2b:19:b7:
                    41:dd:a9:bb:58:35:de:25:4f:5d:cb:d6:f5:94:92:
                    85:04:61:de:2f:e0:65:24:49:f4:07:c8:21:fd:b2:
                    48:4e:ad:32:b8:88:68:99:5c:45:70:77:6e:9c:8e:
                    b5:6a:6e:5d:04:ea:e6:f5:3c:35:2a:fb:7f:08:15:
                    63:33:00:fc:45:65:5b:8c:7d:d0:3d:c3:f6:37:25:
                    42:60:11:c9:c3:de:27:57:8c:c3:0e:3e:16:f9:b1:
                    02:e0:2d:96:e2:58:49:e6:ab:d5:6e:d7:e8:b9:28:
                    e7:73:a3:c8:18:b3:77:f3:fd:2b:bf:f3:f2:b2:0f:
                    3d:b0:e5:2d:88:6c:85:57:31:dd:40:5c:0a:fa:b7:
                    4a:78:f6:f8:c4:9b:cb:55:f7:b4:33:17:47:06:10:
                    df:49:80:3b:59:f1:eb:15:99:de:2d:1c:2f:b8:d3:
                    45:12:57:ed:42:d2:0a:69:20:eb:80:80:3d:b4:9b:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1D:34:E6:6C:B6:BC:AF:B3:CD:F2:66:4F:DA:1C:8F:59:FD:14:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/771c2e52-39c8-3152-a65c-b4706d034fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.234.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:44:8f:e2:54:a8:29:f8:10:67:d8:af:60:41:b6:d7:69:
         47:56:2b:7f:43:f8:d9:7e:cd:85:5f:24:5f:f3:4a:c7:e7:44:
         80:00:f6:22:95:19:8a:56:bd:9a:69:f6:e3:79:b6:4c:76:f5:
         72:69:a1:1c:0e:6d:1c:75:5d:1b:99:d9:3b:b4:03:6f:63:7a:
         ba:22:cc:2f:27:43:ba:51:65:c1:05:eb:6e:98:5e:f7:2e:aa:
         e9:ee:7d:2f:e5:a0:f0:71:6a:69:25:af:a9:0f:ed:a0:bc:7c:
         fc:04:66:ed:58:c4:6f:d4:6f:f3:b4:bf:ff:c1:b4:63:11:35:
         99:9e:0c:ad:22:71:31:b8:13:54:8c:33:16:5e:bf:43:7c:22:
         a8:42:ea:e3:0e:11:d7:98:41:e3:93:6c:a3:8c:3d:46:87:08:
         0b:02:de:5b:a3:1b:c5:b6:52:61:d1:76:41:73:3c:1f:5d:dd:
         bb:0b:49:bf:0d:81:bb:64:dc:74:39:8a:f8:c3:ce:5b:0e:27:
         15:aa:62:04:a3:52:a9:02:a6:97:9c:7a:af:47:60:af:ca:32:
         b5:3e:7b:4a:55:a1:cd:d1:94:a5:da:58:0d:eb:24:69:3b:6f:
         5f:86:a2:cc:3d:5f:79:3c:8d:f1:77:37:05:46:11:e0:07:a7:
         31:0e:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:13:05 2026 by rpki-client