Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0693ab-ed06-3b04-bdde-f7e2e5d38ff6.roa
File:                     1c0693ab-ed06-3b04-bdde-f7e2e5d38ff6.roa (raw, json)
Hash identifier:          gH69LKsXQua0tIBlk3m/FR3l/cxIICmhoUUhEw0x7oo=
Subject key identifier:   4F:6A:DD:5A:BA:17:74:2A:75:BB:28:95:53:97:6B:C6:08:A9:34:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C5841F6B9DE03321ED79940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0693ab-ed06-3b04-bdde-f7e2e5d38ff6.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.227.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:41:f6:b9:de:03:32:1e:d7:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=6e858921-2074-47ec-8a5c-ea79177582a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3b:66:e5:88:02:9f:9f:87:f5:16:cf:35:42:
                    79:da:5b:0d:99:09:b2:33:da:56:a3:b1:68:5c:62:
                    e8:4e:e3:5e:f8:e0:1f:1b:6a:1d:5a:b0:b2:8a:c1:
                    56:be:48:21:64:ad:3d:ce:bc:25:87:7a:66:37:5a:
                    59:b5:25:69:bd:93:7b:fd:14:a1:33:1e:1c:2c:61:
                    c4:31:34:32:b4:49:f4:f5:26:ca:d1:2c:d9:df:d7:
                    e6:4b:7b:74:8b:d6:26:95:cd:69:68:c1:57:f1:1b:
                    92:35:0e:d7:91:97:35:78:75:4f:63:a3:9d:5c:1a:
                    e7:62:16:1a:d4:0f:bd:05:d2:35:23:41:12:03:7e:
                    12:a6:2d:9c:a8:88:50:01:f8:a1:d3:f8:90:f2:fd:
                    41:81:64:2b:6a:62:ba:27:cd:41:88:ba:5b:d7:57:
                    26:4f:e1:c0:01:cc:3e:1f:62:72:38:50:e2:84:5c:
                    53:47:f1:a2:70:d1:6c:40:57:4b:cc:61:0b:e6:1e:
                    bd:f2:18:6e:42:bb:28:0d:f1:5a:69:9f:2c:a5:71:
                    f2:57:7e:3c:cd:2a:c1:a8:b0:27:86:4a:2f:f9:a5:
                    9b:d9:87:ab:00:3a:68:cf:db:8d:e0:ba:e8:dc:e2:
                    bd:13:76:5c:b1:6f:68:a6:7a:32:f2:c7:6e:21:01:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6A:DD:5A:BA:17:74:2A:75:BB:28:95:53:97:6B:C6:08:A9:34:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c0693ab-ed06-3b04-bdde-f7e2e5d38ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.227.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2b:98:a7:9f:a1:dd:58:cf:61:0d:fe:a2:b7:e4:08:60:3e:
         2f:35:a0:37:db:9e:f2:38:ba:4c:a9:ec:1e:fd:b9:40:96:25:
         96:94:fb:a1:d2:76:64:1b:42:31:8f:11:a7:05:ad:b6:96:bb:
         f7:77:c4:b9:da:b3:ba:2c:4f:e1:66:a8:fc:a3:05:36:84:f3:
         5a:57:14:46:01:09:83:71:80:74:d8:f5:5c:4c:2e:8f:4f:3b:
         09:af:9c:8a:22:15:53:5c:f3:79:ee:a1:be:84:1b:4c:42:69:
         62:17:00:51:a4:09:21:2d:0a:a6:f6:d7:c4:d4:2b:d6:b7:86:
         c5:d5:d1:6d:0f:a0:57:29:9e:9b:46:fe:92:c5:e2:cd:72:06:
         3a:00:48:a9:6b:9a:5e:8a:1d:da:34:7d:e1:73:b9:93:ee:a8:
         df:23:31:aa:0f:96:27:39:c0:e4:cb:e9:cc:af:c2:26:5b:2d:
         ae:07:0e:02:2e:b0:39:15:26:1e:55:9e:24:fd:2d:f2:4d:c4:
         47:be:94:53:6f:31:7f:17:3d:a9:55:71:68:2d:b1:38:aa:66:
         3f:c9:16:09:d9:d6:c5:ba:29:e1:4a:cd:62:00:a2:c0:a0:42:
         db:d2:93:7b:a9:9e:53:69:2d:2c:fc:00:72:09:69:21:79:ec:
         a0:da:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:08:58 2026 by rpki-client