Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a636ce54-53f6-38c7-b898-4487d080241a.roa
File:                     a636ce54-53f6-38c7-b898-4487d080241a.roa (raw, json)
Hash identifier:          Iu9bSEOsk/DUnyFOUzwM3ZvMVPZSpVAvZKTkUzBwttc=
Subject key identifier:   EE:BE:74:62:77:CA:71:B5:86:27:34:1F:62:C7:AF:6B:E7:86:6D:CC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DB0758E693F5B415911B4F500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a636ce54-53f6-38c7-b898-4487d080241a.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        174.237.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:8e:69:3f:5b:41:59:11:b4:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=0a021c19-d9db-4ab4-b166-5740c47429e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:fb:59:3b:51:ba:73:b7:83:07:9f:1b:15:
                    c8:9f:96:c3:bd:16:23:19:3a:b3:f9:70:06:97:1b:
                    67:51:df:c3:6e:5a:a8:c5:f9:de:6d:9a:eb:f3:c4:
                    a5:ce:1e:aa:a5:5d:af:70:bd:ce:23:42:4e:fa:e5:
                    04:b6:1b:61:71:35:5c:09:08:f4:1e:0e:e8:d4:ec:
                    89:9d:1f:6d:a6:9f:21:d5:e2:b6:3c:c3:7f:74:62:
                    8c:db:30:1f:08:93:cf:4c:41:75:47:1a:a2:6b:7e:
                    15:89:ee:d9:56:8e:3e:1f:48:8d:05:69:a5:0e:6a:
                    22:a9:76:d1:c2:7c:d2:63:3d:c8:2c:dc:92:7d:16:
                    32:24:21:aa:d1:a9:39:ae:48:1f:d2:1a:c3:2b:14:
                    43:6f:10:5b:59:fe:66:e3:55:a3:bb:ee:a8:2f:82:
                    fe:c1:3f:6e:83:b2:af:fd:d2:da:ae:99:6c:f0:70:
                    93:1b:a8:c6:5b:79:ec:d9:87:af:11:39:7b:11:5d:
                    0a:1b:aa:8b:35:fb:67:c7:79:62:42:d4:bd:9c:9f:
                    11:28:b2:a1:74:6a:51:8f:e3:6b:47:12:27:c3:a9:
                    b9:40:c3:0a:d5:a7:e2:d5:58:aa:54:ab:bf:43:da:
                    e2:83:44:97:82:7b:95:64:3f:6e:1b:4b:9d:4c:7f:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:74:62:77:CA:71:B5:86:27:34:1F:62:C7:AF:6B:E7:86:6D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a636ce54-53f6-38c7-b898-4487d080241a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.237.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:86:d7:e5:ce:2d:8a:1d:53:4d:23:66:74:54:05:17:90:
         6e:de:c9:99:ee:fe:08:e8:a4:04:5d:76:dd:f5:62:43:ca:9d:
         00:17:55:1b:c9:33:83:19:46:d3:38:d7:17:c0:5e:8d:cb:e2:
         82:6b:b2:87:ad:39:63:9f:c8:20:05:39:3f:9d:3d:3f:93:20:
         04:07:93:70:06:90:0b:1f:3f:4d:b0:fc:b3:1f:00:6a:6f:23:
         ae:82:2c:7b:e6:c6:1d:07:32:ef:63:ec:ba:d8:de:71:70:0d:
         67:3f:6e:c2:96:f1:15:62:a8:bb:8d:62:e1:f2:36:7b:76:e3:
         ec:95:96:d1:11:7b:5a:98:f8:3d:52:03:ba:19:4c:34:70:95:
         c8:4b:e1:ec:2e:6f:e0:e7:47:19:53:36:ed:93:50:64:1c:c0:
         ac:15:50:da:4f:a0:60:73:c7:8c:10:f1:c9:3f:c2:7c:dd:12:
         8d:fb:32:65:8d:ed:b4:d9:0d:01:58:ea:96:09:05:cc:38:d2:
         ed:a1:b7:74:93:f4:6a:49:cf:91:6b:57:44:80:40:76:14:3b:
         cb:11:78:aa:72:00:a2:dd:4a:c0:8a:1e:a1:11:dd:2b:1c:41:
         1a:dc:e7:51:03:b7:08:7f:6f:4d:17:29:43:a5:b4:4f:2d:dc:
         de:8d:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:48:31 2026 by rpki-client