Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc74dc9e-23a6-31d5-9d48-f79cceb0079c.roa
File:                     cc74dc9e-23a6-31d5-9d48-f79cceb0079c.roa (raw, json)
Hash identifier:          G3bVg4Xu/ehRKcwsD83sfHhAlJ1xV2PoUnDkl01d1NY=
Subject key identifier:   EE:76:23:D6:8D:F5:8C:F6:4C:02:49:17:21:B9:AA:69:0E:0B:71:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4588FAAA4D5E19463053C740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc74dc9e-23a6-31d5-9d48-f79cceb0079c.roa
Signing time:             Tue 23 Jun 2026 22:35:17 +0000
ROA not before:           Tue 23 Jun 2026 22:35:17 +0000
ROA not after:            Mon 21 Sep 2026 22:35:17 +0000
asID:                     5650
IP address blocks:        47.189.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:88:fa:aa:4d:5e:19:46:30:53:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 22:35:17 2026 GMT
            Not After : Sep 21 22:35:17 2026 GMT
        Subject: CN=e820f7bf-cf9d-4a42-9ff8-d9b0c799459a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:e4:83:0b:97:08:47:88:f2:13:db:5b:88:
                    6a:41:cb:c9:c2:dc:59:c5:d2:91:e6:3b:1a:00:69:
                    ac:a2:94:b5:8b:f4:c0:83:bc:80:1c:37:d9:ae:1b:
                    f8:f9:7c:2e:9b:35:f2:f6:0c:ac:8b:55:28:22:9e:
                    87:b9:75:f7:de:9b:c7:51:a6:a7:89:54:4b:fc:bf:
                    dd:23:56:ee:b3:32:37:61:42:b4:4b:82:3f:83:63:
                    a8:67:5e:ee:5b:15:14:44:b2:bc:0b:eb:06:73:75:
                    a5:49:95:68:4f:7c:4a:26:c4:b5:72:55:b9:49:b5:
                    a1:cd:ce:57:d5:c9:b3:74:33:51:d0:b2:ae:7d:3f:
                    a7:a2:87:58:c8:e5:62:a3:7d:40:aa:38:33:4f:41:
                    aa:af:39:97:4b:86:b4:72:20:b2:a7:cb:2f:9b:c4:
                    bb:38:32:cc:26:ba:3f:8e:a9:7f:8e:83:fb:1f:7a:
                    eb:3a:8a:22:fc:5b:b2:b0:93:f4:9f:a7:6a:1d:0c:
                    02:aa:88:c3:11:d9:41:1d:9a:40:86:53:19:6c:c7:
                    25:d9:09:22:97:f8:47:5f:c8:53:99:77:58:1e:f8:
                    d3:c7:2b:e1:84:4c:8c:8d:7e:0a:1a:3c:df:b8:02:
                    52:0c:e1:0f:2e:b0:ac:53:87:ad:c1:02:eb:93:fd:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:76:23:D6:8D:F5:8C:F6:4C:02:49:17:21:B9:AA:69:0E:0B:71:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc74dc9e-23a6-31d5-9d48-f79cceb0079c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.189.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:00:2b:7a:1e:e0:3b:15:e8:c1:32:aa:c9:ec:3e:af:5a:38:
         2f:17:32:f0:62:70:f9:1e:ac:cf:62:6e:21:0c:59:fb:3c:82:
         ab:01:84:18:33:55:77:fe:c2:63:67:a6:96:17:c0:55:ea:86:
         45:db:62:85:ab:36:eb:5e:19:f4:46:8f:a1:08:b9:f2:67:da:
         49:30:96:62:07:8a:79:83:57:ec:72:80:c8:9a:9d:6f:a5:0b:
         7f:94:cf:a8:49:0d:a0:1e:5d:20:7d:31:2c:f5:18:5d:10:b7:
         6e:e0:a5:c2:40:bb:c3:33:3e:5b:80:a0:53:bc:b7:3d:64:f3:
         f1:47:be:dc:b4:43:1c:f6:7b:a6:83:a7:6b:63:53:5f:f4:fd:
         d4:fb:f7:d5:47:96:f3:5a:c1:89:5e:3e:7f:0f:ed:d2:78:d4:
         bf:ab:b7:7e:c8:45:ee:80:2c:b4:5b:52:8c:3c:ca:cf:52:f4:
         ec:51:d9:35:82:ad:f2:45:89:4b:28:4f:a5:1c:e7:0b:f4:ba:
         a9:7c:db:5a:7d:a3:ff:13:2c:3f:18:cb:a6:8b:54:1e:7e:14:
         b2:82:63:e6:3f:6e:6d:b6:cc:4d:ad:8e:a3:c7:e6:a1:23:a3:
         51:82:ae:d6:12:1d:c6:8f:e6:4d:aa:cf:dc:25:6d:db:0c:90:
         73:7a:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:32:58 2026 by rpki-client