Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5281ff7-5ff6-3a5f-95f1-1400d5efeb64.roa
File:                     b5281ff7-5ff6-3a5f-95f1-1400d5efeb64.roa (raw, json)
Hash identifier:          ep2dsKj3zF7teyqUnu7ziv1TV3VXklQGGf9/9EUUdbk=
Subject key identifier:   06:FE:54:1B:82:73:7C:25:20:AE:D2:B9:E2:3A:CF:16:F0:AF:C5:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE2B5E1F154D95DA872086F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5281ff7-5ff6-3a5f-95f1-1400d5efeb64.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     6167
IP address blocks:        174.239.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e1:f1:54:d9:5d:a8:72:08:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=7a0cff3b-5256-4979-99e1-d39a2cc8ddf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:92:28:a7:44:e3:26:0f:fa:7c:87:28:92:
                    76:80:0d:be:e6:4b:85:c0:aa:dd:c4:ae:7c:30:7f:
                    91:b9:b2:7f:72:2c:e0:c3:cc:3a:50:99:e0:86:46:
                    92:11:9a:f7:f6:46:2d:8f:b2:7b:0e:6e:25:d0:5e:
                    af:82:9c:ff:12:12:13:39:de:88:15:f4:64:98:e1:
                    d1:5a:fc:a4:72:e5:54:15:20:cf:54:70:00:c7:4d:
                    9b:ba:f1:88:a2:c7:7e:cc:30:1d:e2:00:4d:fd:77:
                    e3:62:e2:5f:c7:0f:7f:b6:09:e0:a2:c6:10:a2:fb:
                    33:7c:37:6f:23:4f:ff:01:bf:31:98:ab:3f:2b:24:
                    53:22:13:f0:75:7f:0c:17:08:25:6b:fc:a6:33:75:
                    5a:d1:c0:98:56:a3:9c:94:39:bc:57:c2:a7:19:38:
                    7d:f3:90:df:99:3d:a2:9a:49:5e:2a:7b:47:17:8a:
                    74:ab:43:9e:ad:b9:f5:0f:89:f9:4a:e8:f4:4e:8d:
                    f5:0d:92:8b:7f:97:88:24:71:90:68:e4:41:05:6c:
                    2b:e5:55:f3:85:25:1c:7a:8a:2d:b0:90:1a:dc:94:
                    be:4f:f5:54:00:b9:ad:53:a9:c5:61:74:2b:df:cd:
                    c8:52:25:ad:1a:28:10:f5:13:7a:1d:35:41:04:4b:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FE:54:1B:82:73:7C:25:20:AE:D2:B9:E2:3A:CF:16:F0:AF:C5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5281ff7-5ff6-3a5f-95f1-1400d5efeb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.239.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ca:b3:c9:8a:51:48:86:b5:08:ed:73:05:64:06:dc:e6:e3:
         55:ac:aa:7e:76:75:77:b9:98:27:24:59:87:8a:af:e0:82:4d:
         c2:0c:2b:cc:df:ec:cf:c6:42:02:35:ca:cd:a4:4c:dd:f0:36:
         4e:d3:2d:93:1d:da:f9:b4:67:8a:ad:54:30:56:ed:32:54:6f:
         d5:20:0b:ad:80:54:47:c2:f0:88:13:9e:6a:0c:a2:1c:42:90:
         1c:04:cc:96:d9:09:2d:d3:bc:46:bc:2d:59:4f:1c:04:f6:fe:
         ce:8a:6e:f8:f3:8b:25:70:ae:52:32:41:8f:16:af:6d:e0:52:
         7f:04:75:56:57:d1:8f:6d:fc:20:55:df:c2:42:b0:11:f4:d6:
         8f:56:b5:bf:66:2c:67:5f:de:54:6e:8e:4a:f3:49:2d:f7:a1:
         e0:42:8b:70:06:8e:ba:dd:4a:ec:e6:c4:98:72:dc:b7:e7:cb:
         3c:07:90:7a:68:9d:4d:f8:6f:bc:c2:7c:56:31:f6:03:88:e9:
         fa:b9:d2:d2:c1:70:ba:45:7b:7b:ae:72:4a:81:e9:4a:33:8d:
         2a:70:41:e1:14:0b:d6:64:cc:6c:c8:c6:5e:a2:86:4d:88:53:
         8b:be:bb:d7:6c:ab:53:2f:e5:f1:7a:36:92:ae:b5:41:1c:8c:
         f7:39:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:05:48 2026 by rpki-client