Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c24a427e-ce9b-3c63-aefb-1979beaff378.roa
File:                     c24a427e-ce9b-3c63-aefb-1979beaff378.roa (raw, json)
Hash identifier:          CtIWZd29bKspXP50rMr9cZ62fcmmK41IcarJESjbuKU=
Subject key identifier:   D1:0B:C8:F2:03:FC:4E:E2:78:1E:7F:B9:E1:C1:55:E0:92:65:45:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C74A85D7746BED9039F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c24a427e-ce9b-3c63-aefb-1979beaff378.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.231.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:74:a8:5d:77:46:be:d9:03:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=247febc1-d1e7-4258-a4e7-c03d5adc981e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:f7:f2:58:9d:60:1e:97:ed:b7:d0:6c:0f:
                    8e:7b:23:b7:25:18:7a:06:cd:77:f4:82:ff:31:25:
                    c8:c1:24:b7:d1:a0:2a:a2:b5:c0:5c:a4:aa:bd:e2:
                    c8:1f:52:f5:43:be:5d:b5:99:b0:39:d9:e1:b1:55:
                    62:db:2e:fa:e4:73:87:62:a8:a2:69:56:e5:c9:c3:
                    3d:cf:0f:72:2b:c2:64:db:79:eb:5a:24:6e:ac:f2:
                    fd:42:67:28:53:57:2a:ee:14:63:d9:5b:4d:83:d4:
                    5c:ec:69:58:7d:9e:02:ec:24:71:d1:4e:a5:56:79:
                    00:4a:c0:b0:12:d2:db:39:d3:8f:fe:10:c4:4e:f4:
                    d9:ce:44:b5:fc:fc:5d:37:26:72:45:be:46:f3:07:
                    19:a4:f0:6b:51:1e:e9:25:47:24:ee:52:90:81:06:
                    3d:30:ba:1b:1c:a1:f7:5f:0a:95:cc:aa:41:6c:06:
                    b4:c6:73:7c:26:6b:2d:3e:fe:90:71:9d:e3:1f:17:
                    88:f5:86:a8:37:ba:e7:92:13:f1:22:ad:4e:6a:44:
                    88:1b:99:30:d5:a8:01:8f:39:6e:0d:f3:56:28:2d:
                    35:aa:07:b1:32:86:19:e0:bb:c4:e2:b3:10:0d:d5:
                    fd:00:0b:cb:cb:c4:b6:5c:ec:11:e4:95:2c:28:08:
                    6e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0B:C8:F2:03:FC:4E:E2:78:1E:7F:B9:E1:C1:55:E0:92:65:45:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c24a427e-ce9b-3c63-aefb-1979beaff378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.231.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:1b:6b:b5:54:2c:f1:a0:f6:9f:81:62:f5:b3:d3:74:a8:
         fa:5b:19:92:48:b8:d4:2c:b6:38:58:48:fb:18:f6:86:3f:47:
         c8:31:b9:0c:de:33:db:5a:f8:cd:13:73:85:35:1a:79:52:cd:
         3e:30:4a:bb:3a:55:64:dc:fb:bf:ab:38:8c:8c:1b:e0:17:7f:
         58:f1:f4:0a:a4:e0:e7:e5:1f:e9:fd:b4:11:cf:8a:d2:e8:09:
         3b:4a:31:72:b0:73:9e:2d:13:86:23:3e:3f:1f:32:e1:9a:20:
         54:2b:3c:64:f3:2c:c1:31:07:c0:d0:2a:e5:5f:2e:0b:a9:e5:
         5a:cf:68:03:be:0c:a7:99:71:11:dd:52:12:f6:1b:a6:d1:84:
         bc:48:6f:75:bc:0d:be:9b:d5:73:1e:d0:14:b9:74:f0:0e:1b:
         d3:8c:4a:99:f2:3a:02:50:9b:e2:2a:3a:4a:fb:d3:31:55:ba:
         f9:72:d7:d3:fd:38:15:3a:c9:c2:47:32:09:9b:54:94:09:5a:
         63:a4:e8:77:dc:1b:de:5a:ec:91:a7:93:3f:26:f3:18:71:c9:
         7d:19:40:60:bb:74:1f:29:a2:73:51:8d:03:df:cd:33:6b:c0:
         19:ca:4b:58:cc:33:89:af:17:ae:4c:12:03:01:44:67:6b:42:
         2c:35:f4:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHSoXXdGvtkDnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
MjQ3ZmViYzEtZDFlNy00MjU4LWE0ZTctYzAzZDVhZGM5ODFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoD38lidYB6X7bfQbA+OeyO3JRh6Bs139IL/
MSXIwSS30aAqorXAXKSqveLIH1L1Q75dtZmwOdnhsVVi2y765HOHYqiiaVblycM9
zw9yK8Jk23nrWiRurPL9QmcoU1cq7hRj2VtNg9Rc7GlYfZ4C7CRx0U6lVnkASsCw
EtLbOdOP/hDETvTZzkS1/PxdNyZyRb5G8wcZpPBrUR7pJUck7lKQgQY9MLobHKH3
XwqVzKpBbAa0xnN8JmstPv6QcZ3jHxeI9YaoN7rnkhPxIq1OakSIG5kw1agBjzlu
DfNWKC01qgexMoYZ4LvE4rMQDdX9AAvLy8S2XOwR5JUsKAhuTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNELyPID/E7ieB5/ueHBVeCSZUVtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzI0YTQyN2UtY2U5Yi0z
YzYzLWFlZmItMTk3OWJlYWZmMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErudAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyOG2u1VCzxoPafgWL1s9N0qPpbGZJIuNQstjhYSPsY9oY/R8gxuQze
M9ta+M0Tc4U1GnlSzT4wSrs6VWTc+7+rOIyMG+AXf1jx9Aqk4OflH+n9tBHPitLo
CTtKMXKwc54tE4YjPj8fMuGaIFQrPGTzLMExB8DQKuVfLgup5VrPaAO+DKeZcRHd
UhL2G6bRhLxIb3W8Db6b1XMe0BS5dPAOG9OMSpnyOgJQm+IqOkr70zFVuvly19P9
OBU6ycJHMgmbVJQJWmOk6HfcG95a7JGnkz8m8xhxyX0ZQGC7dB8ponNRjQPfzTNr
wBnKS1jMM4mvF65MEgMBRGdrQiw19OE=
-----END CERTIFICATE-----
Generated at Fri Aug 28 01:39:57 2026 by rpki-client