Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a9ace6-201c-3fce-bf1a-a59a358eab9b.roa
File:                     99a9ace6-201c-3fce-bf1a-a59a358eab9b.roa (raw, json)
Hash identifier:          OcauvU9Dem31N8/qQ4VJB/mxK2IyEty2Nr26awuioy8=
Subject key identifier:   A5:49:3E:DC:FC:BC:1E:68:15:37:83:82:EB:4C:C9:93:50:D5:BE:21
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF7179F0BBC81A362C4043A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a9ace6-201c-3fce-bf1a-a59a358eab9b.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        74.107.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:9f:0b:bc:81:a3:62:c4:04:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=6a577e1e-e87f-4e75-aac0-e3ec38794966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:e6:76:8a:d6:03:b9:19:af:38:58:28:df:
                    74:c6:0e:77:47:70:58:3d:0b:be:1a:cb:c5:7c:5b:
                    8c:ee:97:c5:0e:ea:d3:ba:a1:67:d9:2e:39:7a:51:
                    00:3d:a9:c3:21:76:f9:c1:0d:65:68:b8:cc:cc:58:
                    99:76:36:86:c5:4d:3a:88:aa:38:3c:16:e2:52:0c:
                    6b:9b:8e:42:04:2a:ba:01:3d:0e:2a:93:df:26:2b:
                    db:b3:aa:01:af:25:7e:a8:e0:56:b0:85:e1:93:0c:
                    89:fc:e2:7c:99:9c:9d:0b:01:55:fc:29:51:1c:66:
                    3f:b4:08:62:d0:c8:60:ca:5a:5a:ac:b5:8c:89:c4:
                    3a:e1:c3:91:d0:6a:f7:75:6c:91:4a:42:14:fa:6a:
                    a8:5a:16:68:f5:f4:53:cf:a4:9b:c0:f6:e9:21:7d:
                    85:9a:49:11:85:64:54:43:aa:91:19:05:fa:cd:8e:
                    6a:ea:72:9d:0f:a6:a4:03:45:a6:e8:78:91:07:2b:
                    aa:58:76:9b:9d:91:07:e1:63:48:6a:d2:05:7d:64:
                    85:33:5f:c9:4d:d7:1d:2f:a5:76:db:ac:70:9b:f1:
                    1e:51:de:8b:ca:7e:3d:39:ab:e8:10:00:1c:71:9e:
                    a8:2f:f8:12:c5:b2:98:16:48:0a:9f:9e:11:00:31:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:49:3E:DC:FC:BC:1E:68:15:37:83:82:EB:4C:C9:93:50:D5:BE:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a9ace6-201c-3fce-bf1a-a59a358eab9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.107.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:ea:5b:ba:66:63:08:6d:db:54:b4:6a:ed:8f:e9:8d:8f:
         11:ba:8c:2d:87:01:10:59:33:1f:86:e9:e0:0f:9d:1a:aa:8a:
         2c:11:c6:a8:3a:ee:4e:de:b5:e4:bb:d4:7f:83:0a:b3:e0:a1:
         e5:39:7c:04:68:06:e0:f1:15:5f:be:ac:4d:3d:6d:8a:1f:67:
         d9:99:3a:76:ba:48:f8:af:9b:a5:03:76:b7:e7:e1:d3:cd:91:
         2b:74:56:2c:dc:d0:92:9f:29:d8:e9:c3:b1:d9:bd:c8:d7:be:
         c7:56:97:07:83:45:ea:33:89:18:d2:2f:f0:d9:0d:a1:0f:dd:
         79:9c:20:af:56:b8:85:a6:3c:12:e1:78:b4:b9:6f:73:a7:06:
         77:4b:55:22:1e:e6:4f:9d:1a:54:1d:49:5a:eb:c5:f9:45:1c:
         a9:23:89:84:e3:b7:25:c7:95:0e:89:22:ca:d4:10:d7:9c:7a:
         d3:73:15:6a:ad:64:81:0f:56:66:e2:1c:17:8f:65:f7:75:05:
         df:d3:fe:2f:d3:a3:fa:d5:73:0b:6c:1b:32:f4:e8:8b:5b:0b:
         dd:97:c3:66:9f:d3:25:e6:cb:12:68:a3:14:fd:54:20:5b:87:
         f4:91:19:5e:69:51:b1:90:28:63:f4:9e:4a:42:f4:72:ea:ab:
         03:f8:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:39:48 2026 by rpki-client