Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdef32d2-6104-3260-af9a-288481209d08.roa
File:                     cdef32d2-6104-3260-af9a-288481209d08.roa (raw, json)
Hash identifier:          atVKXWvJP7czCPNG07ynOFibW3vcBa8rwFX5DMpN8+4=
Subject key identifier:   56:84:24:10:CF:8E:B0:6C:EB:DB:C0:2B:7D:4E:E7:A5:8A:C9:DD:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E6574B1E1E19DDDB7D3649F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdef32d2-6104-3260-af9a-288481209d08.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     6167
IP address blocks:        174.254.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:b1:e1:e1:9d:dd:b7:d3:64:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=da264e9d-1e19-4b99-ad81-064445293f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:7b:04:fd:32:8f:d0:ed:d2:7a:b5:8d:0c:
                    3a:e8:31:e1:d0:48:f7:d6:f6:f0:91:08:d0:a4:91:
                    2f:52:94:1f:cc:cb:95:37:89:44:ca:f5:30:61:50:
                    33:b9:cf:0a:0a:49:76:95:6c:ba:2f:4f:e9:87:ae:
                    d7:61:22:5c:b3:80:8e:b0:eb:6c:63:02:90:bc:c8:
                    f8:66:e1:38:d2:3f:7a:f1:6f:04:30:16:35:67:a4:
                    99:3d:be:bf:e0:69:bc:5b:7a:8c:58:13:b3:39:5d:
                    f9:4f:97:1e:bc:d6:c2:70:4a:44:ae:0f:02:98:23:
                    2e:0f:11:48:27:6e:6d:39:c5:a6:e4:c9:4a:8f:0a:
                    8a:bd:9c:51:71:aa:b9:5a:55:1d:af:e4:bf:6a:ad:
                    be:d7:a9:61:2b:bf:0b:ea:21:9f:3c:a9:8b:1c:ed:
                    04:f8:03:35:8d:12:c9:60:ab:cd:6c:2d:f1:a7:e4:
                    76:6e:61:1c:48:6c:9a:54:e8:8f:93:85:c2:10:6e:
                    fc:50:a0:2a:da:1d:23:f9:e2:a1:62:97:5e:7b:4b:
                    38:3d:a6:96:d6:bd:19:73:1b:ce:a8:a6:0d:95:e5:
                    98:6d:ec:6b:28:50:49:03:ea:7a:68:28:43:1a:4d:
                    3e:3c:87:06:82:66:9f:e1:18:ed:01:d4:63:00:79:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:84:24:10:CF:8E:B0:6C:EB:DB:C0:2B:7D:4E:E7:A5:8A:C9:DD:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdef32d2-6104-3260-af9a-288481209d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:e1:67:1c:4c:94:33:06:cc:82:5b:b1:6a:33:1f:df:60:
         c3:b2:de:5e:e0:a6:c1:95:73:d2:18:72:fe:75:4f:2a:cd:d1:
         67:3e:68:c4:22:dd:ee:6f:e5:58:1f:06:f5:11:08:bd:c5:d0:
         28:b4:fa:72:cb:bd:97:ec:c8:cc:74:52:bc:b6:4f:56:49:1f:
         f0:47:f1:0b:a4:29:1c:1b:29:c0:96:3c:32:8c:cf:fd:e5:f9:
         13:c6:06:ba:8a:71:b2:df:92:d8:c5:dc:3b:08:ce:b5:21:c2:
         3d:ce:a2:c6:0c:f8:4c:53:f8:27:cf:1a:88:d5:17:53:29:ba:
         8f:11:0b:68:f2:15:c0:b8:0d:19:cc:4a:05:76:af:1d:47:40:
         8f:7a:cf:78:a8:59:cb:9a:e4:42:94:7e:b4:12:60:25:44:2f:
         8e:29:46:d6:66:19:01:8b:9f:f7:a1:42:4b:47:c2:08:68:87:
         17:d3:57:cb:ea:fd:b0:c4:73:77:4e:d5:ef:5d:c0:c7:71:63:
         54:3e:1d:28:f1:64:a1:50:98:31:52:6f:6b:2e:4c:4e:44:71:
         fe:10:10:76:a2:3e:87:84:a7:79:f6:ed:ba:a6:ec:d3:9b:e1:
         50:d2:69:6b:83:7b:36:61:66:dc:62:c5:10:81:b7:03:2a:23:
         1a:1f:71:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ldLHh4Z3dt9NknwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcwNTA5MDAxM1oXDTI2MTAwMzA5MDAxM1owLzEtMCsGA1UEAxMk
ZGEyNjRlOWQtMWUxOS00Yjk5LWFkODEtMDY0NDQ1MjkzZjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMZ7BP0yj9Dt0nq1jQw66DHh0Ej31vbwkQjQ
pJEvUpQfzMuVN4lEyvUwYVAzuc8KCkl2lWy6L0/ph67XYSJcs4COsOtsYwKQvMj4
ZuE40j968W8EMBY1Z6SZPb6/4Gm8W3qMWBOzOV35T5cevNbCcEpErg8CmCMuDxFI
J25tOcWm5MlKjwqKvZxRcaq5WlUdr+S/aq2+16lhK78L6iGfPKmLHO0E+AM1jRLJ
YKvNbC3xp+R2bmEcSGyaVOiPk4XCEG78UKAq2h0j+eKhYpdee0s4PaaW1r0ZcxvO
qKYNleWYbexrKFBJA+p6aChDGk0+PIcGgmaf4RjtAdRjAHkYVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFaEJBDPjrBs69vAK31O56WKyd3BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2RlZjMyZDItNjEwNC0z
MjYwLWFmOWEtMjg4NDgxMjA5ZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv6gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKko4WccTJQzBsyCW7FqMx/fYMOy3l7gpsGVc9IYcv51TyrN0Wc+aMQi
3e5v5VgfBvURCL3F0Ci0+nLLvZfsyMx0Ury2T1ZJH/BH8QukKRwbKcCWPDKMz/3l
+RPGBrqKcbLfktjF3DsIzrUhwj3OosYM+ExT+CfPGojVF1Mpuo8RC2jyFcC4DRnM
SgV2rx1HQI96z3ioWcua5EKUfrQSYCVEL44pRtZmGQGLn/ehQktHwghohxfTV8vq
/bDEc3dO1e9dwMdxY1Q+HSjxZKFQmDFSb2suTE5Ecf4QEHaiPoeEp3n27bqm7NOb
4VDSaWuDezZhZtxixRCBtwMqIxofcXM=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:51 2026 by rpki-client