Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4842a8fc-b410-30c4-9b00-93da957eac25.roa
File:                     4842a8fc-b410-30c4-9b00-93da957eac25.roa (raw, json)
Hash identifier:          kQIcoX02JcrNM93vLlobvg0mt0pe1tSHk0kj7tK12EQ=
Subject key identifier:   8A:08:26:44:BE:AE:CC:58:BC:F3:B8:DC:18:CB:6A:E9:B2:59:A9:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497EF3F1F445F14619C84A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4842a8fc-b410-30c4-9b00-93da957eac25.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.204.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:f3:f1:f4:45:f1:46:19:c8:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=93fcf818-def7-4208-8a55-abacdecbe558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:22:4c:84:02:fb:01:f2:71:35:ce:b1:d3:
                    fb:23:a2:b9:e5:29:af:60:4c:36:87:a1:06:50:1f:
                    72:b9:55:0f:20:dd:81:d8:88:22:ad:c6:1f:09:cb:
                    3b:de:6b:a9:66:db:87:21:f8:0d:65:71:85:fa:e2:
                    c0:ad:28:6f:97:db:08:e4:bb:12:cc:72:5d:25:74:
                    f4:be:ce:f7:79:61:9d:6d:63:dd:80:99:e8:36:a4:
                    d9:e4:9d:39:35:34:9d:f8:5c:ec:ed:c3:5c:a7:e1:
                    a0:d1:ac:a5:57:b4:ca:39:c1:56:c2:28:dc:d0:81:
                    3f:7e:d7:5e:49:81:12:09:51:ed:9c:54:91:64:14:
                    f2:32:57:40:7c:12:d7:73:66:34:cb:68:da:63:b7:
                    d4:a9:b4:97:37:ef:c1:79:2a:c4:31:d6:35:2c:cd:
                    2a:58:7e:75:fa:c3:16:73:49:5c:d6:2c:b2:11:8e:
                    52:5b:48:78:24:75:af:5b:9d:f9:41:37:0b:1f:9a:
                    77:fc:73:fb:ca:11:60:29:84:e3:54:67:c1:41:b2:
                    8d:22:b9:14:22:61:cc:9f:a3:91:f1:03:5e:44:77:
                    21:c5:37:3b:50:8f:d3:9b:1f:2e:1e:d2:ae:32:52:
                    8d:a7:72:10:fa:bb:6b:1b:b3:10:b3:11:58:f5:2a:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:08:26:44:BE:AE:CC:58:BC:F3:B8:DC:18:CB:6A:E9:B2:59:A9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4842a8fc-b410-30c4-9b00-93da957eac25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.204.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:08:97:82:3f:9e:38:c4:e5:86:f8:e8:06:0a:98:f1:1d:25:
         13:44:a0:8c:18:6e:b0:d8:70:6b:d2:de:0d:eb:69:81:da:36:
         61:24:9d:88:b2:a4:f1:f4:44:17:f4:12:f6:99:5f:b2:32:90:
         e5:02:9b:59:4d:a1:d2:2a:e7:3d:b9:11:29:cf:71:b0:fd:b8:
         eb:1a:27:ca:40:48:3a:05:7a:2d:d2:d8:e8:38:37:68:07:ef:
         59:3f:f1:aa:cd:7f:57:75:9a:75:0b:dd:60:fa:08:81:f7:fa:
         05:36:af:f1:b0:97:ee:89:31:f1:62:0d:12:73:52:3c:63:f7:
         9c:25:85:b9:11:c9:4b:e6:7e:e3:f6:01:9c:af:b0:f3:33:17:
         8b:e7:23:a4:81:16:c7:41:0b:43:03:fc:3e:81:31:d3:ea:55:
         b4:26:6a:3c:5a:70:54:61:d0:f9:9f:ff:90:27:da:70:63:c8:
         94:c8:14:34:d4:17:14:d2:53:63:fd:a3:ed:3b:73:6f:49:e8:
         93:be:89:52:33:d9:59:2d:81:da:07:e8:a0:52:fc:3c:93:5f:
         53:ab:04:69:7c:5b:ac:aa:f0:67:90:76:27:ef:67:d8:9c:a9:
         0d:b0:a1:83:72:4e:de:56:63:ff:86:f9:0c:8e:05:d1:b0:38:
         b3:8d:91:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:06:42 2026 by rpki-client