Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa
File:                     c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa (raw, json)
Hash identifier:          YRkDh4MlREH6J1m9QovYg/d7ls1PgQplXi7RtJwfPbQ=
Subject key identifier:   EE:7E:AB:09:8E:A6:29:54:53:6F:EA:10:4B:86:9E:28:9B:32:64:65
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B99FAE5D3AA5CCCB58900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.224.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:99:fa:e5:d3:aa:5c:cc:b5:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e6af347c-60be-498b-977e-1ad5594e74c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:55:e7:55:5f:9a:ca:04:e0:a1:1f:3d:8f:
                    76:ee:78:22:e4:9d:53:6d:75:d2:2b:19:56:d4:49:
                    3a:41:7f:15:29:20:2e:f2:1c:60:b6:6b:1c:44:ac:
                    38:88:31:24:1c:53:01:db:1f:c8:83:60:b5:bd:f4:
                    c4:cf:b7:44:b7:de:cd:48:7a:84:ba:64:7d:28:f4:
                    13:3d:8a:ba:2a:fa:34:aa:33:5f:c6:77:5c:42:1d:
                    4f:5f:f7:59:c1:d5:b9:82:ce:a4:af:e7:ca:3f:bd:
                    4c:ac:b8:fd:00:ab:93:cf:a4:f7:9f:5c:03:e5:0a:
                    2a:43:3f:ee:a2:01:63:22:61:49:72:a1:22:63:5b:
                    67:ba:e9:72:0a:68:97:3e:74:1a:18:dc:7a:e0:39:
                    a2:b6:a9:75:60:8d:0f:ca:12:b2:ad:a7:91:d1:aa:
                    c2:0c:4d:71:c0:4f:83:87:26:e4:03:f1:47:b2:5a:
                    f1:fb:e4:03:99:de:4e:cc:11:6c:50:fa:56:c3:64:
                    09:10:ef:d3:9d:d9:48:25:a4:dd:e4:28:38:f5:2c:
                    44:ca:d4:74:56:8a:b6:db:39:3c:51:f1:a0:fc:4b:
                    4f:15:8a:48:b4:bf:39:b4:7c:d3:66:e1:45:e9:aa:
                    6f:aa:3b:7a:43:3f:ec:94:70:8c:0d:e8:a7:55:8e:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7E:AB:09:8E:A6:29:54:53:6F:EA:10:4B:86:9E:28:9B:32:64:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4e02445-06ca-3e4b-8ff5-1222a8849f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:78:4f:b4:25:6d:18:4c:d9:44:f7:20:40:a1:d1:64:21:c0:
         10:01:69:81:1c:d1:34:44:a6:9a:93:00:25:59:ee:4c:00:15:
         02:db:ed:0b:08:4c:a5:7e:b9:c8:ee:52:ec:ba:1d:2b:38:c9:
         b9:36:5b:8b:af:cc:fa:d6:d9:2a:a8:7d:ff:47:99:32:f8:0f:
         d2:f2:2a:55:77:a2:bd:e9:e3:d9:9f:8a:f1:3d:95:a0:13:52:
         5e:37:21:b2:d1:07:e6:4b:bf:f0:e2:55:5c:4c:cc:61:3f:ee:
         13:b0:15:e5:e1:82:8f:a2:f7:e5:55:89:b8:7e:1e:b9:75:ac:
         2c:60:71:8e:d7:7b:f3:2d:94:87:f2:44:c2:1b:ba:19:5f:a4:
         a5:71:0c:53:c1:93:60:7a:18:e1:76:86:f7:37:e7:22:b5:6f:
         8a:19:82:f1:ee:a1:4b:93:e9:f2:1f:02:28:96:3d:b2:bc:3f:
         19:22:51:c9:d7:e8:55:d9:0e:82:37:72:42:d7:e7:70:d5:ac:
         80:58:80:64:eb:3a:45:ac:76:cd:b0:1d:0d:c8:51:2b:85:65:
         08:4d:81:c5:1b:76:c8:21:35:f2:da:5c:55:48:f0:26:c3:f5:
         b1:80:54:23:9e:26:fb:34:f7:84:b5:8d:92:77:5e:ed:5e:99:
         b6:85:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:43:13 2026 by rpki-client