Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa
File:                     f630205b-9c91-3f36-9c56-8a7d876e6812.roa (raw, json)
Hash identifier:          V2J8HwjFi21gZKfsKa4AXH/4algF5o8byfT+vQVVoYw=
Subject key identifier:   C9:24:0B:AF:A3:4B:CC:72:BC:8C:83:A8:2A:F6:90:C8:17:90:27:A4
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584EA79535B13C158C89BB542190
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        173.199.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:35:b1:3c:15:8c:89:bb:54:21:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=756ba72b-f54c-4a61-ac74-78c9b146efe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:77:85:db:d6:67:61:7b:b0:c6:df:17:5e:5d:
                    c1:64:ba:65:e5:a4:aa:81:d9:4b:0f:5c:10:39:0b:
                    c6:bd:7a:99:92:40:8c:48:b2:46:4d:20:14:4b:c9:
                    ff:3b:8d:f1:45:1f:d6:c8:4f:fb:a9:0d:c9:89:ee:
                    7f:9b:24:e5:c1:e3:7a:f0:12:2f:7d:9f:71:c2:74:
                    64:9c:22:39:e5:53:f2:2f:0b:f6:03:17:f7:2e:6a:
                    9e:ba:f5:5b:8d:59:f5:01:ba:d4:b6:b6:a6:2e:fa:
                    eb:b9:10:f2:d2:b4:f2:04:c2:40:f7:b6:90:46:e6:
                    6c:08:8f:37:aa:e5:75:9b:c8:54:ba:22:61:30:ad:
                    c8:66:ad:60:60:22:19:6e:14:b1:db:2c:a5:c2:82:
                    0a:63:7b:89:24:5c:6e:7d:62:1c:34:b7:83:6d:a0:
                    40:08:5e:2e:f9:a5:57:4e:bb:92:7d:70:c3:7f:6b:
                    ef:60:e2:57:2a:6a:48:b4:01:42:1d:9f:55:e9:8d:
                    64:2d:a1:7e:6c:bb:25:45:38:c2:4a:5e:c2:3c:3c:
                    79:d6:79:2b:e1:6a:cf:71:54:27:c4:b8:c7:b2:51:
                    74:3d:0c:1f:0e:66:6b:b2:19:7d:69:79:2e:b3:2d:
                    bc:fd:da:20:e5:9a:78:89:85:45:37:ed:07:23:6c:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:24:0B:AF:A3:4B:CC:72:BC:8C:83:A8:2A:F6:90:C8:17:90:27:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f630205b-9c91-3f36-9c56-8a7d876e6812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:f8:3a:2d:07:72:6d:aa:5c:20:df:99:a6:33:c3:e4:ca:c9:
         41:7a:18:b1:4f:df:4e:fb:11:86:1e:36:ad:81:8f:9c:9e:53:
         cc:d2:6f:3b:6e:3e:c9:3f:45:01:ca:87:4f:25:b1:a3:8a:77:
         29:60:99:5f:ce:a7:4a:97:f0:d5:f6:78:55:e3:8b:15:a2:b2:
         c9:59:a1:b8:a4:12:e4:3d:c6:7d:7c:72:db:4f:49:34:70:0f:
         81:39:d1:e6:23:41:57:f6:0e:fd:24:3e:fb:dd:d9:f4:df:d3:
         9a:fc:9d:dc:27:8b:11:88:cb:63:ca:49:e0:80:0d:14:bd:00:
         f1:51:6b:98:36:90:76:1f:16:ba:ce:8d:f8:07:39:e7:76:6e:
         26:82:02:24:8a:ae:b6:5d:6c:6a:72:5e:f1:c6:b5:5a:b9:18:
         71:af:23:2d:7a:ca:7d:67:0a:4e:3e:ef:41:85:32:82:8a:e6:
         8f:54:40:e0:c0:d4:f4:64:fc:56:2e:c2:5e:21:6e:9f:5b:ca:
         f2:8c:12:23:63:cd:7d:fe:3f:a8:46:87:19:66:7b:0c:c4:d6:
         45:91:be:ae:b5:8d:c7:2c:f6:66:f4:e6:1a:f5:2e:0a:91:d7:
         30:be:a0:60:11:43:c4:70:35:55:cf:f5:7c:c1:2d:ef:3a:ba:
         20:88:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:01 2026 by rpki-client