Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5031a313-1633-300d-a0ed-e14093d4d123.roa
File:                     5031a313-1633-300d-a0ed-e14093d4d123.roa (raw, json)
Hash identifier:          TRVhOl25w4nEbloWqylDWsMfn6UZAA8wBjM+Z4MGtRw=
Subject key identifier:   96:33:98:1C:0F:FA:0D:D4:D0:9C:C9:7C:06:C1:F6:CA:26:BF:13:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F0A6F9C95CA49892B7380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5031a313-1633-300d-a0ed-e14093d4d123.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.219.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:0a:6f:9c:95:ca:49:89:2b:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f094d135-d009-4be3-99c8-bd56ed71d9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:34:08:00:eb:75:6c:3c:3b:1b:18:41:96:
                    8e:2c:d0:43:09:17:d1:70:07:bb:4c:fa:2a:3c:cd:
                    87:93:52:f3:fe:d9:f3:ba:30:ed:8a:5b:ee:13:c7:
                    91:5e:5b:36:28:57:5b:41:a1:20:7b:27:3a:17:bc:
                    be:c2:bd:da:15:63:01:5d:d6:99:da:21:6f:2f:e9:
                    84:4b:50:e1:68:26:dd:a0:7d:a9:6c:78:c8:e6:ed:
                    59:ad:b0:e0:e8:42:a3:79:94:1a:07:dc:3f:c0:9e:
                    04:cf:9a:97:42:48:7a:76:54:54:f8:14:55:ca:7b:
                    d5:44:e6:bf:32:cc:fc:b6:14:d4:f3:22:0f:42:96:
                    81:e6:33:79:1a:e3:3c:69:a4:89:34:36:a9:b2:79:
                    6d:4f:b1:61:46:8c:1b:3d:f2:3f:53:28:4f:53:44:
                    54:d5:65:0f:49:8e:9a:d1:ad:6c:75:2c:7f:97:0e:
                    f2:66:0c:6e:b4:9e:7b:8e:97:b7:ef:15:70:6e:b6:
                    d9:ca:b7:79:f4:23:37:ce:91:93:3c:e4:f1:de:4c:
                    42:cb:00:4e:cf:8c:ae:e8:ef:43:67:35:66:02:32:
                    0e:36:76:7c:3a:b7:78:23:12:bb:67:7b:0f:2e:80:
                    ad:5a:78:fe:e2:05:3c:c8:bd:78:55:3e:0a:29:1a:
                    c5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:33:98:1C:0F:FA:0D:D4:D0:9C:C9:7C:06:C1:F6:CA:26:BF:13:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5031a313-1633-300d-a0ed-e14093d4d123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:97:e3:6a:3f:75:2d:13:6e:58:d6:97:84:51:52:2b:9d:d7:
         77:b0:25:93:cc:f0:bf:b2:0c:71:fe:09:3e:cc:3f:04:d4:17:
         7c:0d:47:ec:74:97:f8:33:ad:ee:19:ac:ea:9f:3e:4b:84:f1:
         e9:7e:3d:1f:f7:b4:3f:c5:6d:6c:18:3c:07:97:79:09:a0:85:
         96:2d:85:c4:73:4b:c6:47:23:af:ab:70:7f:84:61:4a:29:e4:
         e2:6e:aa:52:5a:7c:39:2b:d4:00:03:1f:02:64:76:f8:95:9b:
         d8:a1:5b:6b:7a:0c:d1:c6:e8:be:1a:44:2a:35:b3:4d:f4:49:
         0f:7d:42:6c:aa:a3:39:c5:dd:33:7f:35:ee:3b:44:eb:76:c3:
         72:f4:86:b7:ea:75:09:ca:86:1d:d4:ef:84:70:0d:53:13:66:
         60:0a:b7:30:2f:bf:4b:d4:21:66:e8:23:32:8a:cd:31:10:28:
         eb:c4:89:1f:f0:3e:24:ab:1c:9d:75:f8:27:30:25:9c:52:89:
         07:87:84:a5:7b:82:dc:4c:91:86:96:57:a0:cf:ad:3e:47:ca:
         41:07:80:31:b2:b5:0c:00:5b:04:35:5e:0f:18:5f:ee:e1:bc:
         71:63:4d:e9:3b:95:e3:a8:b8:93:4a:68:55:3c:c5:54:d9:77:
         f8:11:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:33:16 2026 by rpki-client