Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a4a60f7-2ec4-3cfd-bb62-9aab73f0f78b.roa
File:                     8a4a60f7-2ec4-3cfd-bb62-9aab73f0f78b.roa (raw, json)
Hash identifier:          53ns4UfylKh9RlIhp1HcTz++ZEWbSDsvPKPiVlA8r60=
Subject key identifier:   BA:1F:6E:12:02:59:5D:C2:14:C2:C8:67:9E:D7:7D:2F:A8:A3:20:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E94EA855CD9A8BBC831AB1D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a4a60f7-2ec4-3cfd-bb62-9aab73f0f78b.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        174.255.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:85:5c:d9:a8:bb:c8:31:ab:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=af894ca0-5092-48d0-b6a1-71647a32de60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:5f:a0:de:2a:ee:1d:9f:1c:7f:d1:24:8a:
                    60:23:75:ed:8c:f2:ba:33:d0:c1:a4:2d:24:a5:bb:
                    2a:b8:ad:45:bb:cd:50:74:93:95:1e:0b:79:13:bd:
                    d3:d9:1c:ac:70:a6:c1:43:c6:4b:14:a7:24:92:44:
                    d4:50:1f:e2:11:75:b5:5b:03:70:41:8f:b7:ba:36:
                    88:20:70:cd:51:c1:f9:d7:2d:e4:b2:6a:55:8e:9c:
                    73:f9:bb:4e:92:39:d3:76:4b:a0:67:52:9b:ce:06:
                    63:ed:1e:e2:16:f0:b5:c7:37:be:69:13:9d:6f:75:
                    3e:29:0d:fa:77:23:57:84:2d:a3:60:e9:23:34:f3:
                    22:24:90:ff:f5:55:35:ac:48:00:9a:cd:98:10:b4:
                    f6:f6:7c:9b:2d:72:c2:b1:87:ce:ea:b4:ce:b1:09:
                    f0:88:60:37:00:9c:4f:65:47:35:a1:18:a5:5b:5c:
                    93:40:ac:7a:f6:41:23:91:72:cb:0a:91:7b:77:0a:
                    02:15:d1:a7:62:e0:9e:2e:68:68:8e:ef:eb:c0:53:
                    46:f2:00:50:1d:90:8f:2b:6b:0f:47:55:89:5b:84:
                    12:1f:36:5f:cd:71:21:05:bf:38:a5:00:32:a2:4a:
                    69:c4:9b:a4:39:ca:37:b6:ce:20:a1:c8:ea:d8:ea:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1F:6E:12:02:59:5D:C2:14:C2:C8:67:9E:D7:7D:2F:A8:A3:20:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a4a60f7-2ec4-3cfd-bb62-9aab73f0f78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:45:dc:97:5e:5c:24:60:cf:03:d3:45:7e:67:a5:7a:6c:83:
         82:bc:4d:6e:ee:59:f8:e7:0d:81:44:7f:0d:1b:8b:2a:f1:92:
         69:ab:de:ec:d4:98:24:e1:f3:ca:ed:47:45:62:b6:5e:85:4b:
         25:dc:0c:fe:b3:6b:2f:6d:f7:88:20:f7:db:9d:13:4e:b9:0e:
         50:19:1f:5e:cb:ca:c9:3b:0d:a5:eb:4c:fd:23:f1:19:ea:dc:
         7d:c5:cd:ce:4a:27:49:b0:10:46:80:1f:3e:a2:67:53:e8:e3:
         02:de:55:ef:f0:c0:67:19:70:c8:21:41:cf:0a:67:24:46:86:
         28:4d:2f:3e:d5:55:af:f5:bb:7b:77:33:c8:6d:90:7f:97:8f:
         5e:7f:67:a0:c8:dd:5e:dc:18:79:8e:26:bb:84:18:a1:d6:55:
         12:8a:69:45:33:76:f8:25:46:9d:b9:da:9f:94:8f:4e:22:4e:
         23:9a:a2:0b:c5:96:94:5a:35:8d:bb:90:93:27:ef:96:44:3c:
         5c:60:dd:7a:99:13:9e:56:30:e7:a8:9b:ab:b6:3a:8a:67:c1:
         b1:b4:90:48:66:09:04:53:2d:24:0c:dd:3e:4a:4f:dd:df:d3:
         f3:e8:f3:ad:ef:43:ba:81:07:82:43:cc:c3:51:ef:36:41:1a:
         7b:21:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:10 2026 by rpki-client