Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f851f5-6c09-3d99-a865-b9e7eaaa4951.roa
File:                     82f851f5-6c09-3d99-a865-b9e7eaaa4951.roa (raw, json)
Hash identifier:          fObVgTO61hou2tpNbZbrH3db8uKsyd5oJFxQU/8yZ2k=
Subject key identifier:   84:29:25:FE:27:DE:37:E3:8B:AB:5F:A2:7D:1E:93:10:D5:D8:66:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C5840BB377EB1B5963D9320
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f851f5-6c09-3d99-a865-b9e7eaaa4951.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.226.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:40:bb:37:7e:b1:b5:96:3d:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=6c8f21c2-7413-4fcf-ada2-9bc73a7d5cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:d8:6c:68:be:71:3d:64:5e:6f:9f:9e:8a:
                    ed:1b:59:88:f5:19:4f:48:9d:f1:15:6f:a6:9b:5d:
                    81:79:8d:94:2b:0d:25:2c:80:70:a1:64:39:b3:76:
                    ed:c7:48:4a:c5:c7:72:36:7c:56:d5:13:29:d5:56:
                    32:5f:ef:52:b6:b8:c7:16:9f:d8:e0:b5:ef:24:02:
                    d2:fd:3a:9f:75:bc:c9:79:ef:a0:d6:dd:56:bf:cb:
                    b9:92:81:4c:f9:7b:65:5d:51:4a:20:56:07:d6:c6:
                    73:88:5d:61:de:b0:ae:4a:ab:f7:dc:1b:0e:88:3c:
                    e2:e1:30:67:54:13:fb:1d:bd:72:02:03:b2:af:30:
                    54:9e:ed:ff:f7:02:07:6b:92:74:44:30:5c:25:c9:
                    d3:6f:ed:91:ff:cf:e1:1a:f3:43:14:dd:27:58:05:
                    29:24:06:2b:22:d0:55:df:b0:95:f9:21:51:b7:0e:
                    b7:b5:d9:46:84:c9:12:b1:41:ac:9c:53:22:10:2d:
                    92:22:5a:c6:52:dd:a0:86:f7:5d:bc:09:1b:af:be:
                    c0:79:f0:62:14:b5:55:4f:5f:70:97:13:87:cf:57:
                    d3:8c:0b:a5:79:e1:b0:5f:a2:e5:4e:1b:e9:d1:2d:
                    a6:09:c1:c3:f1:4b:5d:a6:32:6c:e6:f7:f4:2f:db:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:25:FE:27:DE:37:E3:8B:AB:5F:A2:7D:1E:93:10:D5:D8:66:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f851f5-6c09-3d99-a865-b9e7eaaa4951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:37:e4:09:c9:fb:88:32:ae:a4:e6:20:e1:23:ee:27:ad:5a:
         6a:08:12:f1:e0:c5:fb:f3:12:f0:3e:ba:85:47:29:21:73:d9:
         13:52:4e:ce:00:2e:ca:15:bd:e3:c4:38:f8:cb:53:fd:f0:5b:
         34:a9:f6:cf:1c:25:95:24:4b:7d:cd:92:51:44:90:d1:c0:fb:
         4f:a1:19:f1:83:1d:3e:7a:1b:0e:5b:80:4f:81:a5:41:5d:27:
         2a:2b:0f:e3:e1:0d:be:da:5f:7b:55:ee:b6:2d:13:d2:17:e2:
         f9:fb:ba:5c:01:8d:7a:61:21:5a:2c:40:54:53:b3:c6:e7:19:
         37:56:ad:7d:00:34:5d:37:36:b0:7f:27:d2:ad:8a:45:72:1b:
         88:7f:dd:12:69:54:7f:b9:c0:ca:0c:34:67:6d:5a:88:7b:01:
         06:d2:68:ee:e4:63:f4:fc:54:07:da:3e:62:6c:73:8c:1e:46:
         70:a8:a1:8a:35:86:52:f0:16:5b:17:60:08:ac:83:7e:d5:b8:
         22:98:e8:23:4e:81:7f:74:f4:c6:46:10:cf:ad:bb:12:1d:62:
         8a:7a:ed:7b:c2:a7:2e:ba:9e:e0:1a:c4:33:5d:9c:68:d5:ed:
         cc:fb:59:6e:04:9b:a6:85:b2:49:51:7d:06:02:aa:fc:95:f6:
         4d:d8:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:28:02 2026 by rpki-client