Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5c61915-68ec-32a7-9874-eff565b59372.roa
File:                     b5c61915-68ec-32a7-9874-eff565b59372.roa (raw, json)
Hash identifier:          GPhXlg1BT5Tpx0kMe1z0cWKURq+fU+5j1QZgpAQcMO0=
Subject key identifier:   BB:54:2F:BA:3D:C6:4B:E9:F8:AD:5F:B3:17:70:9B:5A:E2:D5:6F:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C7FA4C2DD93866AE5E700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5c61915-68ec-32a7-9874-eff565b59372.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.240.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:7f:a4:c2:dd:93:86:6a:e5:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=85ff8ee4-d881-4331-9c5d-e5495854905a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:70:9b:ae:5f:b3:05:5f:22:bb:b5:83:92:
                    0e:e5:71:65:c7:c4:8a:f4:fd:12:96:90:a9:14:23:
                    a9:3f:fe:2c:ab:dc:ab:d6:40:ec:50:e2:d9:46:22:
                    f4:4f:18:2e:dc:31:a2:44:cd:20:d2:6a:01:49:d3:
                    51:cb:37:3b:18:5b:60:c2:1b:6d:da:e7:e6:39:69:
                    8a:2f:0a:63:70:11:3d:98:00:63:02:c0:a5:57:07:
                    e3:66:e3:8e:80:09:22:e4:c8:fc:67:bd:0c:eb:62:
                    f5:5a:45:04:4e:8e:0b:5d:4e:23:4d:bf:81:89:9f:
                    45:ca:99:e4:17:31:83:20:ec:f1:a0:f6:5c:af:d7:
                    12:82:df:56:09:4a:c0:b3:a3:95:63:97:d5:71:a8:
                    60:70:9c:1e:ea:45:0d:b4:a5:b1:99:e5:87:86:d3:
                    bc:49:38:a4:32:a0:c9:1c:3b:a1:b2:08:0e:a6:c1:
                    4b:4c:08:b4:26:a3:30:c7:77:ca:d1:94:95:a7:8b:
                    ac:3f:a7:5e:9d:b2:3e:0d:fb:65:98:9e:7b:da:28:
                    d6:d9:1f:ce:1f:7c:18:c0:80:2e:fe:94:aa:e8:25:
                    b6:c1:ca:b6:23:96:2c:40:9d:ca:fa:67:ce:f9:a1:
                    a1:dd:af:36:38:d5:f2:8c:33:88:23:21:c1:17:6d:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:54:2F:BA:3D:C6:4B:E9:F8:AD:5F:B3:17:70:9B:5A:E2:D5:6F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5c61915-68ec-32a7-9874-eff565b59372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.240.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3b:b3:b2:0e:bd:18:80:0d:a4:69:d4:52:ed:30:41:84:c6:
         5c:80:4e:86:74:2e:ef:4d:50:22:bf:22:2c:98:46:d7:c3:c9:
         91:07:40:df:87:21:c7:b7:17:d6:70:a1:84:05:8a:85:5c:37:
         7e:37:d6:18:7b:ca:15:b0:92:c8:52:16:f2:c1:7b:c4:c4:16:
         79:57:67:7e:fe:10:c2:3c:b4:7c:40:85:a0:b1:f0:35:ab:3b:
         59:0d:81:40:6b:bb:f8:75:db:bc:83:84:b3:50:02:df:66:96:
         a0:12:b3:ac:28:85:47:bb:f1:e5:72:da:bf:49:0d:a7:3d:5b:
         d9:44:6a:97:46:9d:3d:58:52:e7:08:3c:78:68:c0:0c:7b:6e:
         46:05:6e:ce:5d:45:c3:f4:cb:89:f3:d4:8d:88:bf:99:ad:99:
         1d:59:6f:cc:f4:e4:3c:01:8d:3b:25:e5:3c:35:e1:2b:dc:49:
         90:17:49:f4:10:1b:b0:d4:e5:0f:88:ff:1f:74:10:29:f5:02:
         7c:e5:f6:03:1d:10:f2:5b:79:3b:a0:54:79:d4:71:d4:8c:ed:
         96:5f:f7:4f:bd:04:30:57:68:a9:ac:f6:79:ef:88:9f:18:1b:
         c6:7a:5c:01:68:b1:e8:53:b3:f5:43:9a:b7:64:6f:8d:c0:7b:
         43:ba:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:55:06 2026 by rpki-client