Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa
File:                     a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa (raw, json)
Hash identifier:          yXSrEM3+nzk4KFGDvQLAEj66c54xb6goHQqyAv/Vd/0=
Subject key identifier:   2B:EF:C1:15:6D:DB:ED:39:2A:09:DE:05:62:0B:D9:76:40:42:A9:B8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B9A7D0596685C94291A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.224.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:9a:7d:05:96:68:5c:94:29:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6e987f1c-934c-4207-a967-39968fe4bc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:25:fb:8f:c6:70:ed:0a:cf:da:81:25:bb:
                    d9:6b:f2:8b:79:38:21:01:15:69:78:fd:74:11:c2:
                    8c:95:35:86:2c:90:4f:d0:f3:79:78:8c:a5:71:2f:
                    00:a1:d2:ae:a4:8e:69:1c:56:76:a2:50:85:fc:a4:
                    c6:43:f8:55:dd:e6:5e:8d:05:01:8e:e8:b9:aa:83:
                    5d:f4:8a:42:71:bd:fe:db:bd:c4:2e:97:94:17:9d:
                    71:fe:0d:35:6c:ef:8c:05:97:c8:6f:a4:86:50:f5:
                    c3:9c:b7:ef:b2:1d:8d:83:13:52:75:a4:5d:97:38:
                    6a:37:24:90:09:59:c5:53:6b:a9:0f:42:56:92:f7:
                    63:45:ce:b0:43:cd:27:7e:d9:e7:12:fb:fc:a1:46:
                    3c:c1:a7:76:7f:b4:a7:f4:14:21:55:21:1b:be:60:
                    22:f8:f0:1e:3c:ea:8c:7a:a4:2a:20:33:fd:4f:f3:
                    1a:99:b4:1c:3d:70:97:36:47:63:67:ce:f5:96:e6:
                    e5:62:7a:14:5d:b9:d5:7f:8f:20:5b:f2:9b:1e:e3:
                    2e:30:97:13:c3:ba:a2:58:f0:e6:09:a3:77:66:2a:
                    b9:4c:61:29:51:96:13:a7:79:08:15:92:c1:fd:06:
                    f7:4b:5c:84:4e:e7:09:6e:de:13:cc:21:29:42:e8:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:C1:15:6D:DB:ED:39:2A:09:DE:05:62:0B:D9:76:40:42:A9:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8a6ac0a-090b-3051-9e0c-3c15b89ead18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:38:32:33:bc:e8:e6:28:e9:61:de:88:69:05:2e:ba:c5:cf:
         df:f4:9f:cf:31:d6:54:22:e2:bc:27:3e:fc:23:5d:01:0a:ea:
         19:10:bb:3b:e8:c8:ab:67:24:d6:e8:81:f1:42:b7:d6:c4:5a:
         06:ff:72:71:45:ca:43:d4:56:37:63:ce:45:5d:90:0d:ce:d7:
         49:c8:e2:19:50:ee:59:6d:92:2f:1f:cf:7d:f5:0f:cf:03:df:
         c2:1f:25:50:97:a6:99:20:7c:d7:26:fe:04:f6:66:23:e1:a9:
         57:9d:46:74:08:62:aa:b0:12:a3:eb:1b:79:8b:97:bc:d4:53:
         13:11:aa:71:ec:34:68:19:d7:4d:54:14:e8:91:13:86:44:75:
         06:05:88:50:a0:07:a4:8b:a9:04:8c:b1:78:3c:cf:a9:e4:83:
         ee:6a:a6:e3:f7:77:b4:ff:cc:00:e1:a8:b2:1b:8d:2c:a4:38:
         60:84:b6:c7:ff:4e:c9:56:e6:5f:db:a3:75:94:f2:79:0a:63:
         70:df:37:96:c5:9b:ea:e8:50:6a:d4:5a:31:aa:c0:f5:7e:59:
         d5:06:1f:b2:47:83:d9:1a:12:4f:b8:e8:40:83:37:21:51:bc:
         09:d2:52:01:38:d8:ce:2d:4a:88:4e:26:a6:4d:d1:42:0b:80:
         0a:56:49:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm5p9BZZoXJQpGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmU5ODdmMWMtOTM0Yy00MjA3LWE5NjctMzk5NjhmZTRiYzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqEl+4/GcO0Kz9qBJbvZa/KLeTghARVpeP10
EcKMlTWGLJBP0PN5eIylcS8AodKupI5pHFZ2olCF/KTGQ/hV3eZejQUBjui5qoNd
9IpCcb3+273ELpeUF51x/g01bO+MBZfIb6SGUPXDnLfvsh2NgxNSdaRdlzhqNySQ
CVnFU2upD0JWkvdjRc6wQ80nftnnEvv8oUY8wad2f7Sn9BQhVSEbvmAi+PAePOqM
eqQqIDP9T/MambQcPXCXNkdjZ871lublYnoUXbnVf48gW/KbHuMuMJcTw7qiWPDm
CaN3Ziq5TGEpUZYTp3kIFZLB/Qb3S1yETucJbt4TzCEpQuibWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvvwRVt2+05KgneBWIL2XZAQqm4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYThhNmFjMGEtMDkwYi0z
MDUxLTllMGMtM2MxNWI4OWVhZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruC4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALA4MjO86OYo6WHeiGkFLrrFz9/0n88x1lQi4rwnPvwjXQEK6hkQuzvo
yKtnJNbogfFCt9bEWgb/cnFFykPUVjdjzkVdkA3O10nI4hlQ7lltki8fz331D88D
38IfJVCXppkgfNcm/gT2ZiPhqVedRnQIYqqwEqPrG3mLl7zUUxMRqnHsNGgZ101U
FOiRE4ZEdQYFiFCgB6SLqQSMsXg8z6nkg+5qpuP3d7T/zADhqLIbjSykOGCEtsf/
TslW5l/bo3WU8nkKY3DfN5bFm+roUGrUWjGqwPV+WdUGH7JHg9kaEk+46ECDNyFR
vAnSUgE42M4tSohOJqZN0UILgApWSak=
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:50:24 2026 by rpki-client