Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa
File:                     7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa (raw, json)
Hash identifier:          mG0g7TpbAOg7MpUKb3aNwJC0PXu5LqUh8X1Ko1qTPPQ=
Subject key identifier:   41:B8:6C:96:0C:FA:94:A5:67:92:B0:40:8C:EC:61:CA:FB:28:A0:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B82E8B5ECC5234F166680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.219.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:82:e8:b5:ec:c5:23:4f:16:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1c760db1-0830-4723-8190-d22ca19dd688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:6e:7b:2f:0c:e8:e0:60:fc:29:9e:3b:fa:
                    75:03:56:fd:9d:d2:12:2a:d2:4e:a4:12:2b:a9:0d:
                    96:1f:ed:a7:b2:ed:1e:80:af:44:eb:21:dd:9b:df:
                    5d:56:de:c8:2c:bf:df:8f:e5:b8:20:cc:90:c8:15:
                    90:5c:13:4c:fd:09:2e:da:99:e2:cb:b7:68:9b:a2:
                    b0:6a:b0:fd:e1:a4:77:b6:cc:11:94:e4:93:25:c0:
                    13:38:0e:8d:77:99:d3:83:b5:4b:8f:03:7d:36:87:
                    1d:a7:1c:87:5a:e2:df:b4:38:4f:4b:ae:85:f4:b5:
                    3b:2e:48:a0:4a:9d:f4:6d:06:fd:4b:19:1d:7d:07:
                    9d:1f:6f:06:88:34:4e:a5:cc:33:86:3f:d0:f6:24:
                    e8:cc:42:bb:69:ee:c3:9e:1d:b0:7e:33:29:5e:77:
                    8c:bd:22:a6:88:71:8c:a6:3e:04:94:0b:f6:65:b3:
                    dd:54:75:7b:65:ec:fa:ad:b4:3f:09:08:42:72:90:
                    fc:9b:51:37:e3:c8:af:b4:02:cd:5f:05:5f:41:81:
                    b2:51:e2:fd:f7:f6:54:48:50:9a:b3:b4:1d:26:7e:
                    c4:29:25:b8:65:56:17:6d:d6:0b:98:69:ba:7f:ec:
                    22:06:82:00:17:ec:dd:6a:77:f7:25:7e:13:0e:39:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:6C:96:0C:FA:94:A5:67:92:B0:40:8C:EC:61:CA:FB:28:A0:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d7acfe5-d246-37e0-89f7-6ad2c1b8dc33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8a:02:f8:39:fb:5a:02:88:d8:8a:e5:25:32:b5:30:90:cc:
         df:8e:91:44:24:61:05:58:aa:d8:51:e8:cf:9d:1b:0e:24:4c:
         6c:a2:af:51:68:b5:20:1d:81:98:3a:12:a6:9b:e6:0b:8a:a3:
         33:b5:b9:62:04:da:c9:45:e1:8b:43:80:b2:3c:1e:24:1e:93:
         14:df:a6:ed:a7:4d:4e:a4:a6:34:b1:29:d7:79:e8:2f:db:30:
         bc:81:e8:39:49:8c:ee:8f:ee:0c:5a:e2:15:62:25:ac:04:c7:
         9f:e4:19:51:a0:35:57:80:55:e0:f6:9f:d8:c5:0e:aa:12:64:
         cb:9c:9b:b1:7b:60:bb:02:44:37:4d:36:63:40:04:7d:fb:3f:
         62:af:e5:e3:0b:41:d0:60:19:b8:6a:40:a9:9b:4a:1d:a6:b5:
         9d:4c:db:75:39:4a:6e:f8:5f:fe:c1:f4:2e:b9:da:74:2b:8f:
         bb:f0:f4:0f:5d:c8:89:f0:e7:7f:69:5b:12:2c:7e:47:51:d3:
         e1:7d:49:d9:fd:b5:a9:13:f3:f2:00:f6:d3:68:77:3d:f3:55:
         51:2c:51:ed:87:0e:36:08:f8:fb:03:05:19:a3:ee:4f:b8:53:
         a6:95:a0:ad:d9:6c:b6:92:b0:83:3d:44:bd:0b:2a:5f:ef:a2:
         f7:ff:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:47:41 2026 by rpki-client