Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33668036-e694-348c-b887-bfbe92f48e15.roa
File:                     33668036-e694-348c-b887-bfbe92f48e15.roa (raw, json)
Hash identifier:          +4R09YMEouvF+5OaENFU2N0DXtPF3OF7S9ED1kVkFuY=
Subject key identifier:   DE:48:F0:90:D3:8A:42:4B:3C:72:AA:39:97:C4:26:68:0B:1A:31:C3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F655D6BA689978540DB5F8B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33668036-e694-348c-b887-bfbe92f48e15.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     6167
IP address blocks:        174.255.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6b:a6:89:97:85:40:db:5f:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=738b1834-e385-4191-b981-f9ce2f3b61c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:94:64:20:57:c8:87:04:4d:34:9b:4e:11:
                    60:c9:ab:e4:03:2e:7e:8b:9e:19:6b:2e:9e:4c:23:
                    5d:0d:4e:a3:28:82:8c:f1:36:aa:fc:95:ec:be:5f:
                    dc:92:be:03:70:4c:a4:53:88:6e:48:be:46:20:fb:
                    d8:ce:06:a2:bf:21:dc:c1:2f:4f:91:6a:6f:67:3b:
                    98:21:5e:d0:27:ea:38:b1:51:01:88:3c:ba:c2:57:
                    6a:55:d3:ea:6c:79:5d:05:ff:ab:4b:4e:8c:a7:61:
                    50:d6:82:54:80:7f:53:9a:fe:18:7f:fd:a2:af:da:
                    77:fe:73:78:66:f8:da:97:9f:77:70:aa:c8:c2:2b:
                    8f:47:09:80:8f:cd:9b:0f:86:ee:4f:a4:c1:05:17:
                    72:60:ad:96:95:84:95:9c:db:13:51:e1:93:85:f7:
                    8d:e1:8e:b0:0f:95:07:1a:8f:fa:68:79:28:9a:d0:
                    c4:03:6c:5d:69:4f:73:51:f8:1c:ab:c8:82:23:b7:
                    8a:d7:0b:df:7e:3a:55:c1:d8:05:48:ea:93:ed:29:
                    74:6d:27:98:11:57:ab:d0:c4:7f:30:dd:06:c3:0a:
                    73:80:c3:2b:6c:f9:9f:77:c8:bc:1b:b8:e1:0b:e5:
                    73:82:47:ad:ea:21:f0:6c:7e:b4:ee:07:c2:85:13:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:48:F0:90:D3:8A:42:4B:3C:72:AA:39:97:C4:26:68:0B:1A:31:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33668036-e694-348c-b887-bfbe92f48e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:48:d8:91:08:0d:89:b3:2f:e2:f8:20:2a:a2:2e:eb:46:cd:
         af:22:66:93:68:65:d1:eb:38:01:db:bd:89:4b:98:69:f1:be:
         f8:8f:2b:f8:e0:4a:5c:1b:74:b7:4a:96:44:c7:af:cc:dc:d1:
         21:01:d1:ef:af:5d:b8:dc:86:c9:e0:bf:8c:36:2d:5e:8d:d4:
         57:68:70:ae:ad:f2:a1:c4:40:fb:1f:fa:75:39:83:60:cd:f4:
         85:a6:01:4d:8b:a9:72:7b:68:ed:b0:1d:93:3b:11:02:b0:55:
         4d:28:42:7a:7e:8c:2c:62:94:51:55:4b:7d:82:5f:45:2c:3e:
         65:9c:c7:e4:bc:e4:99:26:e7:ad:5f:e3:d0:1d:f7:ac:6b:76:
         55:de:01:ec:91:05:fc:8f:2b:53:37:52:16:c1:63:95:c3:e8:
         13:85:dd:ba:47:f5:83:9d:d9:b5:be:95:15:47:e8:18:4f:d8:
         0c:bd:56:56:dd:22:dd:df:d8:d7:c1:43:d1:93:b2:42:63:f8:
         8d:39:85:fb:a6:3c:1c:03:1d:9d:5c:c4:bf:8a:cc:f1:ae:d2:
         76:e3:1a:1d:99:80:30:59:f5:85:d1:51:7d:8c:dc:dd:2b:86:
         c7:1e:36:68:19:04:b6:7b:31:24:3f:70:6b:2b:e5:8c:92:1a:
         fc:f5:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:18:06 2026 by rpki-client