Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e3beb52-cc10-3ac6-9669-91b724121e95.roa
File:                     8e3beb52-cc10-3ac6-9669-91b724121e95.roa (raw, json)
Hash identifier:          0rFvT9xbe4jMNBdZ2nPRmNEeUudiblEFyrwkTdbX2jo=
Subject key identifier:   BF:03:9B:BC:09:CD:86:5A:7E:27:64:0B:81:B3:E9:9C:90:1C:C0:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C845AF8497E0411F9E100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e3beb52-cc10-3ac6-9669-91b724121e95.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.248.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:84:5a:f8:49:7e:04:11:f9:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=1c28759b-42cf-419b-b072-60a94de0e836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:5b:9f:94:ef:86:0a:36:93:a2:a1:e8:1f:
                    e4:0f:0e:c9:95:31:22:19:03:e3:1b:7e:30:3b:ac:
                    ac:6b:c6:18:5c:b6:7c:19:b3:7d:2c:63:2b:2b:87:
                    23:92:43:8b:45:10:8f:9c:c8:da:24:36:9e:6b:b3:
                    38:0b:b2:92:ba:72:5d:61:ae:a5:54:5e:ef:18:26:
                    9f:41:cc:e5:e9:7b:54:1c:b1:2e:0e:31:0c:f9:87:
                    ad:29:1b:ee:38:e2:7f:c9:d6:b6:52:f7:f8:7d:b7:
                    36:34:43:20:3d:3a:5e:eb:72:56:fe:a8:0a:a3:a1:
                    b1:6a:ce:0d:9b:bf:29:35:d1:91:e0:95:53:88:1d:
                    03:50:51:01:55:cb:3d:65:4b:9a:fd:9f:08:a5:18:
                    85:2a:20:10:1e:c8:89:85:d5:b0:2a:b0:18:4a:e2:
                    f6:0f:e4:1a:55:1b:05:f6:b1:23:f0:f2:8c:d1:1e:
                    41:11:af:7b:06:0e:4b:28:01:27:11:c5:8b:cd:dd:
                    26:fd:aa:84:9c:c1:7c:6d:4e:28:9c:a0:88:c8:6e:
                    49:00:dc:ed:0b:20:fb:ff:4b:9a:a0:a3:87:4c:4f:
                    d9:e1:83:50:a1:7b:ba:48:33:18:d1:90:29:b1:84:
                    53:7c:95:92:0a:36:2c:34:2a:04:46:47:40:d5:5e:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:03:9B:BC:09:CD:86:5A:7E:27:64:0B:81:B3:E9:9C:90:1C:C0:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e3beb52-cc10-3ac6-9669-91b724121e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.248.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:60:83:3f:b4:4d:f0:8b:2f:75:96:3a:6c:dd:0c:0b:17:
         3a:f1:90:9e:53:3b:fa:4b:0b:99:8a:62:7e:28:7a:f5:3f:d1:
         51:a1:ba:e2:1e:b5:6c:ce:63:d1:2a:a2:4e:16:49:11:c8:41:
         2b:d5:0c:a8:b4:32:51:f6:19:20:22:e3:86:2f:2b:4f:55:f5:
         bf:10:26:42:b3:63:ac:bf:70:1e:38:7a:d8:7e:f6:d1:c3:0e:
         ad:cc:26:e2:59:a0:1a:25:04:7b:03:9d:fa:07:27:78:69:dc:
         30:f6:11:cc:09:f0:01:21:ca:b7:36:97:ca:cf:c5:f0:9a:2a:
         f0:f6:46:c9:b8:55:81:08:ef:f8:39:d6:3e:fa:63:0f:55:62:
         cd:2b:cf:de:7b:16:e2:df:2f:63:05:c9:9c:75:92:28:44:0e:
         5e:01:4d:21:d5:50:86:02:1d:8d:3d:ae:cf:4c:b8:59:2f:80:
         61:0d:31:d3:27:6a:ca:83:3f:84:11:d1:aa:da:bc:75:e4:39:
         3a:65:53:64:22:30:fe:cf:60:7f:82:01:1e:61:1b:59:7a:30:
         b9:f4:d7:64:17:8b:63:9a:58:16:62:b1:1f:a1:1a:ee:b8:a1:
         c7:34:21:1e:66:36:c2:79:4c:bc:73:a5:c2:b9:50:ab:d0:47:
         0e:61:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:48:40 2026 by rpki-client