Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa
File:                     fd224140-4d0a-3a04-9b68-dad4b44ae470.roa (raw, json)
Hash identifier:          orxcNCsYAQ1Rli/1bP3UGzTi5bnpDAP8spbc3WBGF78=
Subject key identifier:   01:80:6C:60:BE:F2:58:3A:A5:21:C2:36:4F:35:E0:50:8B:10:FA:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B663852D408B478193400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.200.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:66:38:52:d4:08:b4:78:19:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e3374fc7-7395-4dd3-a20a-69d00878da70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:51:35:a0:4e:73:3f:3e:78:5a:d3:7b:8f:
                    5f:2e:1a:9d:de:c6:3f:11:6c:ce:36:33:bf:6d:36:
                    42:ae:85:6f:d4:ec:f6:9e:a6:b3:b3:e4:c9:ea:88:
                    61:29:c7:b5:d4:97:c1:d8:09:f1:b1:eb:0c:09:70:
                    7d:04:1b:89:56:46:a2:61:98:2c:a4:5f:99:80:1a:
                    1e:e0:46:2a:14:fe:44:61:4c:79:ea:8c:cf:a6:42:
                    be:dc:db:f0:bf:7b:f7:23:45:24:ba:fb:4c:c3:84:
                    cf:a0:d8:2f:4d:7a:b8:00:0c:2e:50:c6:ff:fa:c0:
                    28:ac:71:72:b2:fb:16:7d:cf:86:1e:88:4e:62:7a:
                    92:7b:37:d1:9d:13:2e:d5:49:01:f4:16:ac:ea:87:
                    c2:22:61:ea:54:de:b0:4e:26:8b:4b:2b:68:bd:48:
                    53:e4:ef:42:f9:61:78:0d:dd:3c:a3:ae:08:60:82:
                    89:0a:e4:4f:b8:8a:fb:7d:85:e3:7c:90:6e:41:21:
                    cc:e7:ff:4f:22:76:3c:73:62:7a:6d:fe:de:7d:92:
                    0e:ad:9e:68:c3:72:86:27:ca:90:e6:1d:9c:6e:fa:
                    d9:f7:d4:06:9d:e9:53:73:3f:3c:7f:5b:b1:0e:85:
                    fd:b9:38:3e:c5:73:26:10:b9:3a:9c:9a:02:2d:fa:
                    42:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:6C:60:BE:F2:58:3A:A5:21:C2:36:4F:35:E0:50:8B:10:FA:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fd224140-4d0a-3a04-9b68-dad4b44ae470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.200.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b9:6a:d2:22:e6:3b:a3:b3:8d:b7:df:1b:10:47:f4:3d:f9:
         b0:f8:b0:14:de:82:3c:1d:5f:26:e0:b3:3b:57:f3:e2:f5:d0:
         38:59:fb:65:f5:c4:2e:40:5b:9c:0f:7e:af:21:38:14:4b:a7:
         08:a3:65:a1:a7:6a:01:17:b4:c1:9a:ae:81:18:85:ad:76:53:
         9d:d0:c4:03:e1:2b:d7:8c:eb:e1:38:b0:4c:d2:39:14:e5:f3:
         b7:34:8e:1c:1e:05:4d:37:83:11:e8:2f:23:71:3e:95:f3:71:
         08:5a:e7:5e:67:15:80:66:61:8d:75:ee:3e:d8:3a:73:6f:e5:
         d9:b5:72:10:96:4d:b6:8d:50:24:de:dc:b4:84:98:82:4e:1f:
         48:ff:de:9a:2b:f5:9d:b0:86:9b:8e:9d:58:10:01:1c:76:22:
         f9:00:53:9a:04:a0:d4:d8:b5:77:fb:ce:16:b8:66:2a:a1:1e:
         7f:32:0d:7e:d2:5e:52:26:f7:77:bf:d7:80:29:05:ac:a6:22:
         fb:c9:d8:df:48:0c:00:ff:17:27:a5:30:c3:31:f5:c2:e9:80:
         b6:28:66:5d:6c:a0:b3:e4:ee:db:31:7e:c3:1c:63:d5:26:16:
         fd:c7:27:83:4d:e3:30:ad:be:a2:6d:d2:80:67:26:f0:af:49:
         fc:57:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:32:43 2026 by rpki-client