Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96b4f9b1-2668-3ed1-9d31-8b4bc1a5eafb.roa
File:                     96b4f9b1-2668-3ed1-9d31-8b4bc1a5eafb.roa (raw, json)
Hash identifier:          4qSNfaWyKZkhIelDodSEbQDOkTSZb27g78ELk4zAIXE=
Subject key identifier:   F7:88:8D:6D:47:38:36:27:8F:0C:DB:A7:C8:51:44:9C:A6:BF:ED:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B73A317552A5469106500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96b4f9b1-2668-3ed1-9d31-8b4bc1a5eafb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.213.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:73:a3:17:55:2a:54:69:10:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f6a85413-436f-44a6-907b-1a6bdbf2f6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:d5:2c:d2:f3:24:75:9b:80:b3:76:02:15:
                    43:8d:d5:20:78:6e:2a:8f:60:da:74:50:a6:da:20:
                    3f:e9:cd:0a:a1:24:b5:a3:53:98:e2:eb:97:b9:8a:
                    f5:42:e1:5c:01:1e:67:aa:c4:a8:6f:db:37:6b:96:
                    0c:0f:35:ef:c6:f7:82:b8:ab:17:1e:19:92:b8:19:
                    65:6d:54:e5:92:2b:f3:1a:7f:fc:87:d5:4b:4a:56:
                    34:ec:c2:d1:a3:b2:6c:10:c6:99:9d:af:8c:15:25:
                    06:0c:48:4f:6e:f9:83:e7:09:28:a0:b3:03:de:32:
                    11:04:7a:10:f0:c8:cf:44:b0:96:19:4f:04:ec:81:
                    3b:26:71:a4:06:59:b8:0e:b3:97:9a:53:41:95:85:
                    f8:19:1c:6b:73:ca:b7:3a:64:5c:75:07:49:7e:d9:
                    4a:d3:60:c4:20:15:ea:1c:3e:21:30:05:76:26:70:
                    0e:06:db:fd:b4:09:36:e2:51:7d:29:25:37:3e:40:
                    d9:4d:13:25:af:97:52:67:44:5d:1f:d5:d5:e6:f0:
                    7b:3a:e1:de:de:bb:9f:32:4f:c5:cd:8a:30:0d:9e:
                    bf:8b:7b:be:be:db:9a:a7:6c:02:c2:55:45:b5:c0:
                    b0:a7:c3:33:7f:fc:f1:b1:70:25:e8:ff:b2:0a:14:
                    4a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:8D:6D:47:38:36:27:8F:0C:DB:A7:C8:51:44:9C:A6:BF:ED:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96b4f9b1-2668-3ed1-9d31-8b4bc1a5eafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6c:3a:17:1a:95:35:fe:91:9d:50:2c:c1:4e:61:a5:39:c7:
         70:49:45:f8:b4:94:2f:84:55:4d:25:03:f6:19:28:5d:a5:59:
         7e:1d:8d:e0:de:1c:96:32:4a:39:14:42:05:23:cf:5a:a4:c3:
         7d:fc:88:d7:9b:65:4c:32:4e:a2:76:0d:91:a7:41:5f:6f:61:
         df:f4:da:01:a9:e5:cc:f4:4b:57:13:1c:f8:c2:46:1e:3d:a4:
         7d:34:5a:e7:05:51:9a:7a:6c:01:6c:1b:12:a5:ab:7a:a4:ff:
         f2:9d:02:bb:dd:e2:9d:b4:21:3d:a6:98:44:74:2c:4f:aa:20:
         b4:0a:11:5b:36:19:6a:49:fa:09:30:dc:0c:c9:ad:65:67:f3:
         55:a6:d9:12:6f:9f:c7:e9:65:65:d7:b8:f0:8c:be:c9:f7:1b:
         87:3a:24:d0:53:ed:a1:58:b1:54:10:44:91:ca:78:74:44:f7:
         7f:cd:76:8a:99:80:ae:a3:70:e6:2a:69:f7:f2:bb:9b:ef:75:
         d9:e7:8f:11:e6:8b:de:78:3c:63:68:18:22:00:ff:e3:be:4f:
         d8:79:29:81:15:86:41:a8:57:b0:bf:5f:4f:01:ac:e4:7f:3c:
         00:5e:1c:4a:41:20:bb:3d:5b:af:c8:44:b7:b7:58:3e:05:52:
         39:b9:ba:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:46:36 2026 by rpki-client