Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85653fbe-fc14-358d-a48c-7a2c2d2a75f2.roa
File:                     85653fbe-fc14-358d-a48c-7a2c2d2a75f2.roa (raw, json)
Hash identifier:          W0SmHWhw4llhNTI3T5yc70RNVDPj7uaBaPSsMSOX/88=
Subject key identifier:   D5:5F:C5:32:DD:C4:CC:64:F0:2C:2E:B4:66:F2:0E:E9:6A:5B:1A:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B80CDDEDCA5FDCD6DE980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85653fbe-fc14-358d-a48c-7a2c2d2a75f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.219.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:80:cd:de:dc:a5:fd:cd:6d:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=36e52847-704a-456d-8ce0-c6146940699c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:0b:f6:59:80:84:8c:d2:dc:da:bf:cb:2a:
                    92:d2:dd:f8:70:73:38:3f:e0:b7:98:dd:f5:b8:15:
                    7a:73:9d:28:6c:ba:eb:e1:a7:f0:28:6c:60:4c:e6:
                    d8:78:34:b0:06:2f:d7:c8:f0:02:7c:7d:71:65:26:
                    ad:67:1b:70:ac:45:fd:9f:e2:5e:b2:1b:49:a4:0f:
                    d4:68:06:6b:16:31:d3:74:5a:d7:64:bc:1a:21:b1:
                    d1:57:fb:97:29:6a:7c:de:ca:f0:54:3f:ee:eb:32:
                    40:dd:ff:9d:3f:01:fa:e2:c5:68:67:4e:35:08:ad:
                    f3:c8:f2:95:32:70:b6:e0:55:05:4f:1f:ad:ea:41:
                    c6:4c:82:0e:94:b1:d5:22:75:e6:72:17:39:53:d4:
                    18:8d:f5:47:cf:86:df:fb:3c:f5:19:59:2e:1f:d6:
                    71:ff:ed:ac:64:10:d9:30:2d:e1:75:52:ca:cf:d5:
                    d0:0e:6e:65:aa:07:a9:05:29:4f:cc:bf:b5:71:f9:
                    c6:e8:69:e5:58:7d:fd:22:a2:03:27:73:b4:fa:b8:
                    21:43:30:6e:0c:a5:13:55:32:9a:9e:26:1e:1a:85:
                    7f:9b:fa:0d:a6:92:41:41:c1:e0:a1:4d:67:96:03:
                    b3:34:ff:11:91:d5:e2:96:3d:8e:2b:46:25:c0:ee:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5F:C5:32:DD:C4:CC:64:F0:2C:2E:B4:66:F2:0E:E9:6A:5B:1A:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/85653fbe-fc14-358d-a48c-7a2c2d2a75f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ea:da:3c:e8:65:5e:15:ec:2d:7d:28:99:7a:5c:3c:64:07:
         44:df:06:fd:ff:81:0e:98:57:a4:11:33:02:83:0a:a6:b5:7f:
         41:42:fd:3d:dd:5e:48:7c:c1:73:f9:16:a2:de:5e:8c:1b:c3:
         db:8a:d2:87:52:39:f7:d3:03:bb:77:11:c5:24:a4:88:29:71:
         56:57:d7:f8:de:79:ec:19:f6:fd:ac:5d:fc:c8:c8:19:c2:c9:
         3e:2d:d5:43:c6:3a:73:15:25:55:90:e7:16:8e:da:23:e1:c3:
         c0:c9:50:81:60:98:ef:f4:de:03:ad:02:67:0d:79:69:c2:1e:
         e9:2b:af:19:0e:4a:c3:02:11:74:8b:9e:b1:b6:15:64:a2:fd:
         0e:4a:e0:e9:9e:f6:53:e6:90:a9:34:a7:c9:43:30:f5:2c:60:
         b5:0c:b8:57:87:b7:93:b8:c9:e0:30:3e:d3:0a:29:a8:14:09:
         73:e3:8a:1d:fd:5e:e7:1b:c1:9d:b0:83:be:5f:ad:3f:c3:4a:
         69:e5:2e:4e:a1:2a:56:5c:0b:01:db:97:28:85:e9:2c:14:7f:
         df:ba:8e:82:14:73:a5:04:2b:36:79:48:f9:9d:12:69:60:99:
         fd:c0:29:9c:47:9f:77:f6:56:15:f2:be:66:c0:04:cd:65:74:
         c0:a6:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:52:19 2026 by rpki-client