Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98346a51-6de6-3eeb-946f-d51a0ec96f1d.roa
File:                     98346a51-6de6-3eeb-946f-d51a0ec96f1d.roa (raw, json)
Hash identifier:          1JnUsXTRn+JQkSiOYl371Y0NTCRv76kxFFcgUJHEUR0=
Subject key identifier:   41:E4:80:F8:C5:DB:5B:59:B8:6B:67:BF:FE:98:7D:DE:54:CB:3A:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DF210AAD548B76E286CD4FD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98346a51-6de6-3eeb-946f-d51a0ec96f1d.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        174.196.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:aa:d5:48:b7:6e:28:6c:d4:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=9cac70e5-247b-407d-bb53-ee0bc00e7f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:04:2e:07:2e:0d:fe:ff:4b:c3:bf:fc:3e:00:
                    9b:33:22:73:7f:5c:e3:7a:78:bc:33:df:01:b6:e8:
                    60:99:a2:8a:57:3b:18:eb:27:53:05:18:19:18:e2:
                    06:38:ab:16:65:4b:b0:4e:ea:e7:86:cf:5e:f9:f1:
                    c2:a2:bf:38:c9:bb:66:12:7d:f6:70:2c:00:79:29:
                    ff:5d:5a:34:2d:5e:66:11:8c:95:0c:0c:1b:0e:47:
                    d3:c7:7c:b2:80:29:1d:0b:af:62:30:f1:75:22:8c:
                    72:90:a5:8e:eb:ff:94:d9:09:e7:17:4f:d8:d6:16:
                    24:7c:d1:93:ba:28:73:64:cf:12:8d:13:c8:b6:6f:
                    78:4a:5a:32:fe:80:06:84:9c:15:e5:87:bd:61:c1:
                    a3:8e:27:67:cc:ff:ef:52:c1:bf:8a:ed:ee:45:46:
                    7c:44:88:ab:97:a2:b9:09:1a:bc:32:3d:04:aa:cf:
                    93:3f:7d:7e:e4:37:ea:97:35:83:64:24:ab:33:77:
                    36:5f:dd:a7:54:a6:9c:7d:02:6d:62:58:eb:0b:83:
                    3d:2b:e1:90:d9:f8:bd:29:cd:9e:d7:f2:ad:f0:a7:
                    55:84:48:a2:a1:f3:82:f4:90:99:62:da:d4:eb:9d:
                    c2:05:8b:e5:f8:fd:64:ee:ea:c9:2a:d2:a6:d8:68:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E4:80:F8:C5:DB:5B:59:B8:6B:67:BF:FE:98:7D:DE:54:CB:3A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98346a51-6de6-3eeb-946f-d51a0ec96f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:29:91:48:9f:09:6e:4a:77:eb:24:9d:b9:cf:e8:a9:b0:6d:
         d6:2a:48:8f:82:84:04:9b:49:b6:ff:ab:00:4d:d0:95:a5:4a:
         f5:d0:fc:c8:29:a4:1d:b1:f6:8f:7a:e2:67:bc:4a:e7:ca:df:
         e0:ac:1b:a6:de:fc:6d:69:40:48:3d:92:d8:c6:30:b3:07:aa:
         85:52:f4:88:c0:54:a8:47:5b:57:c9:18:aa:55:e8:29:3f:a9:
         77:83:29:25:5e:ea:c5:70:2a:f0:42:6e:87:fc:27:4b:ab:91:
         8e:df:8d:35:66:da:24:f2:1e:a0:a8:6a:b0:ba:84:84:83:c8:
         bf:75:93:35:20:0c:cc:06:7a:0c:c5:3b:1b:d4:fe:f1:86:82:
         b8:df:e1:ec:9b:d9:69:50:34:bf:b5:cd:8d:a9:fa:e6:dd:f2:
         ed:45:c3:d3:11:43:79:c1:21:57:6d:06:38:75:14:23:41:ed:
         45:19:d8:13:8b:dc:4d:3f:18:27:73:35:30:7e:65:e6:0a:e7:
         db:1c:47:49:92:ec:46:22:af:0e:a4:47:04:60:22:e7:5c:42:
         e9:d8:24:a4:27:e5:d6:57:e0:c4:37:12:4b:9b:79:9f:aa:ca:
         d9:80:15:e1:4e:f6:23:eb:a2:7f:d9:d7:5d:21:36:c0:c7:27:
         98:b4:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:07:42 2026 by rpki-client