Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d457510a-6300-367b-ae74-451b2b76ffc0.roa
File:                     d457510a-6300-367b-ae74-451b2b76ffc0.roa (raw, json)
Hash identifier:          lkiAjOugJwv9TsFNq1lbElj8fuzQwwgHMusKyc1oAo0=
Subject key identifier:   E4:4A:A9:14:9F:DC:96:43:8C:86:94:F1:32:65:79:8C:FB:6C:BB:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECA6C7496FB8EC0A5E21398A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d457510a-6300-367b-ae74-451b2b76ffc0.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.231.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:74:96:fb:8e:c0:a5:e2:13:98:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=c854a772-cdb8-4dd0-be25-fa61e3799d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:06:21:99:9f:ee:9f:17:0d:7e:e0:cd:f7:
                    be:df:b3:3d:a3:b2:5a:4c:3a:96:30:79:f4:88:b0:
                    d0:05:0d:74:0e:63:49:fe:b8:ba:ff:2d:8d:11:1e:
                    17:0c:e0:c9:a2:6c:ba:b3:9d:c6:86:f1:f5:af:b8:
                    5a:6a:a6:05:43:73:ba:a9:a8:ea:d4:5f:50:bc:17:
                    17:f9:65:a2:80:af:ec:b5:86:af:98:73:aa:17:f8:
                    29:51:ec:92:1f:7e:cc:d7:ae:08:f0:16:96:a4:80:
                    5b:8c:71:2c:99:2d:74:70:d7:b1:89:b6:e2:28:25:
                    65:37:45:f6:24:f7:93:f4:30:ab:97:d1:c6:8c:de:
                    70:b5:cb:1f:6a:e2:72:c0:d2:cb:bc:de:09:ae:9f:
                    2c:f9:62:66:0a:1b:25:b6:97:bd:39:bc:af:29:f2:
                    35:50:d3:22:46:89:1d:cd:af:90:07:78:5d:27:52:
                    f3:73:78:3d:9d:ca:18:39:60:f7:23:9d:4f:67:59:
                    e8:8e:31:f6:d4:b7:51:fc:cb:5f:1f:cb:ca:f3:20:
                    4f:61:58:3e:a2:b7:7b:5a:36:f9:3b:c3:b7:ef:3f:
                    91:28:04:99:88:b8:27:49:31:d8:e1:9f:cc:cb:0e:
                    5d:f0:58:4f:a3:99:fd:e4:17:34:0d:4b:01:ee:b0:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:A9:14:9F:DC:96:43:8C:86:94:F1:32:65:79:8C:FB:6C:BB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d457510a-6300-367b-ae74-451b2b76ffc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.231.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ea:05:52:89:ad:98:ea:27:78:52:07:8a:65:0e:a6:bd:07:
         62:8d:98:02:4b:f7:e0:18:91:45:96:f5:30:a8:77:f8:94:2f:
         b8:cb:30:26:c9:fb:56:12:bc:8f:a0:0e:bd:31:40:64:c2:93:
         13:ec:26:20:16:32:b1:c6:40:3b:60:e2:2d:7e:3b:dd:76:9f:
         a8:d0:2a:e6:30:d5:bd:cf:1a:1d:70:72:49:7a:bc:1f:e9:19:
         4c:a0:14:44:71:ba:aa:5b:88:4b:37:13:9c:c9:27:ff:33:f5:
         31:91:40:4e:a1:38:eb:9e:85:84:8c:49:31:1b:1a:25:bd:ed:
         25:d7:aa:a9:f8:bc:6b:00:ce:7f:d7:7f:bf:bc:92:3d:00:fe:
         5a:0d:0d:7e:19:24:1b:c7:a6:d3:2f:a7:ea:fb:16:a9:7e:73:
         6f:c9:d7:ae:51:92:f7:89:7f:ef:aa:7e:29:00:18:64:09:67:
         1d:2e:76:35:b3:60:9a:54:dd:58:49:5b:3c:7f:73:ef:f1:6d:
         80:33:e8:c7:37:4c:11:a4:1c:e6:ec:4b:7e:e5:d4:4b:46:7c:
         5e:98:65:f4:4f:6a:f7:91:3c:ad:a6:91:c8:bb:26:74:5c:23:
         03:65:82:0c:96:8a:52:21:f9:7e:c2:6e:43:ef:3b:7c:3a:28:
         d1:42:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:02:39 2026 by rpki-client