Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8b10d8b-8f48-39f8-8fdd-5c307bda2891.roa
File:                     a8b10d8b-8f48-39f8-8fdd-5c307bda2891.roa (raw, json)
Hash identifier:          My54PCrt2JUXA1pLNw9uE2ik9Oxk1MX8ZeF6CIAHAFI=
Subject key identifier:   5F:97:72:EA:BB:98:72:7A:18:52:FE:84:41:D5:AA:F0:4E:0B:ED:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ED001FDEFE13B4CD9982C35C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8b10d8b-8f48-39f8-8fdd-5c307bda2891.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     22394
IP address blocks:        174.41.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:fd:ef:e1:3b:4c:d9:98:2c:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=c7b5f852-b081-4742-981a-5df92e2e7df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:54:6c:68:89:6a:63:0c:e2:31:dd:e9:a2:7f:
                    54:86:ea:7d:bc:4e:25:52:7e:09:ca:fa:14:05:a6:
                    b7:46:ae:f0:8b:d4:f3:d1:75:e5:26:76:15:70:b9:
                    26:35:62:0a:59:75:97:cf:01:b1:68:92:49:fb:79:
                    f0:01:5a:46:1f:33:23:06:e7:cd:bb:e2:9c:ae:57:
                    f1:c1:13:01:54:c9:1d:43:34:01:4c:2f:a8:c8:59:
                    68:c9:08:41:1e:df:ec:83:62:c2:fc:db:f9:60:ac:
                    52:82:a4:17:ac:0c:37:f9:cb:72:66:9e:7c:eb:f4:
                    e2:5b:a0:de:57:ae:c0:17:7f:8a:d7:e4:93:27:16:
                    de:62:0d:08:3c:8d:13:e2:64:30:bd:b4:f4:b3:79:
                    37:d0:1e:ef:92:a7:ce:f5:f2:89:f3:e1:2f:d3:79:
                    ea:c1:b8:5e:1d:df:3e:5e:4b:48:fc:b9:35:4f:75:
                    b4:2a:fe:83:4b:72:ef:66:10:cf:ea:e1:da:a3:8a:
                    86:d0:66:ae:86:85:c7:1a:9c:a0:6b:91:a8:98:6e:
                    4c:ca:c0:9a:aa:50:c7:93:02:40:9a:71:c3:ee:d9:
                    db:2b:19:8c:6a:d1:6c:df:72:3c:0c:a5:ca:ed:c2:
                    8c:89:58:ad:61:2e:35:80:2c:00:37:50:7e:45:81:
                    aa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:72:EA:BB:98:72:7A:18:52:FE:84:41:D5:AA:F0:4E:0B:ED:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8b10d8b-8f48-39f8-8fdd-5c307bda2891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.41.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e5:82:b6:8b:ae:b4:28:80:b4:71:da:c2:e6:04:cc:0b:df:
         9c:f4:88:52:ec:eb:fc:46:59:a0:60:ce:81:61:e7:ee:9e:f4:
         b1:29:4e:89:e9:17:46:f8:f2:a7:b6:ce:15:07:50:01:af:5d:
         c1:a8:b6:6e:7c:c2:e5:88:9b:bf:15:46:3c:47:2d:70:0d:5a:
         bd:45:1f:a2:44:67:be:aa:af:f2:9d:c7:e2:b1:01:89:12:b5:
         81:ff:66:95:52:37:92:97:13:f4:c2:82:40:0a:47:dd:91:07:
         4f:8c:52:5d:6f:0d:0d:fd:f5:05:55:80:da:29:c4:72:93:42:
         1f:d7:c5:ab:3d:1d:6b:f4:66:7c:96:d8:82:bb:45:b2:7e:bc:
         df:70:b5:a5:76:e2:73:69:db:8c:8f:ab:47:72:05:4b:e9:94:
         d4:ec:33:e2:1b:0c:26:8d:62:6c:5f:d1:56:13:75:4b:ea:08:
         aa:65:bf:fd:26:40:d0:16:5b:47:8a:bc:fc:eb:30:b8:98:16:
         74:65:57:b1:1d:bb:5c:98:f0:bd:41:fb:1a:cb:a4:ff:9c:fd:
         77:3e:ad:bd:23:cc:02:a1:9b:3f:c5:67:07:93:8c:2e:2f:f4:
         5a:41:ce:bf:62:bb:69:51:01:8c:f9:22:ad:9c:4f:66:d9:88:
         1e:c3:42:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:50:15 2026 by rpki-client