Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac87b74f-faff-3818-8d58-b345fa1bc412.roa
File:                     ac87b74f-faff-3818-8d58-b345fa1bc412.roa (raw, json)
Hash identifier:          q4b0JICxF9Tf3QHJYJS5946ftJZ7n7hd4+BILgHQq2s=
Subject key identifier:   A0:4D:1C:F6:88:DB:7F:75:4F:07:3E:04:D0:5A:AA:D7:72:13:1F:01
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49861240FF922BBB18E17700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac87b74f-faff-3818-8d58-b345fa1bc412.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.213.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:12:40:ff:92:2b:bb:18:e1:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1099ab33-db48-4c81-b1d9-109169fdf889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:6d:ab:5a:00:99:55:fb:ed:d2:d0:4b:d3:
                    0f:a1:4f:53:4e:4a:98:2c:2e:ec:cc:ed:51:dc:3c:
                    cd:e3:74:bb:ba:2a:36:95:e9:16:3c:69:f9:9b:f1:
                    4b:b6:9a:a7:4b:da:e9:78:ef:f2:e3:4b:c4:6c:ef:
                    1a:7b:2d:30:78:98:09:81:b5:63:da:aa:e4:81:64:
                    b7:6b:b8:c6:5c:92:d4:bf:8d:cf:36:ae:4b:96:8d:
                    ff:46:c7:7e:87:a8:61:25:a6:44:41:8e:66:c8:b8:
                    eb:36:2c:b1:ac:e5:c1:ed:0f:6a:4c:3a:df:61:f1:
                    2d:55:06:64:46:16:1c:37:58:c1:65:33:ad:cf:a8:
                    ba:54:8d:05:b9:6c:3e:f6:5b:5c:80:39:36:fa:77:
                    6e:14:90:86:e5:33:88:48:f9:66:f4:bd:b0:01:ca:
                    d3:bc:bb:e7:4a:a4:88:c9:37:0c:fe:ba:a6:57:ec:
                    d1:84:32:82:f8:9f:8f:87:6a:ff:d6:ff:7d:11:f0:
                    47:16:0f:7f:cb:8e:b4:07:d9:c9:9d:d4:0f:2f:1e:
                    40:f0:5c:d1:f5:ef:eb:39:db:1f:d8:96:95:4a:ba:
                    ec:a6:32:45:71:70:40:d2:82:0c:ea:5e:9d:c5:14:
                    e2:44:45:9e:07:5c:5c:5d:3c:6e:aa:5c:d1:74:68:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4D:1C:F6:88:DB:7F:75:4F:07:3E:04:D0:5A:AA:D7:72:13:1F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac87b74f-faff-3818-8d58-b345fa1bc412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:66:13:e6:3e:c0:80:07:27:49:89:c5:36:40:00:2a:b8:08:
         68:d7:61:2b:ea:7a:84:45:f2:63:9a:2d:d0:16:25:2f:4b:9a:
         e7:4e:61:aa:42:cd:42:bd:35:6a:cc:53:e4:d7:30:6b:af:c5:
         00:2f:d6:32:65:59:45:92:c3:0a:bf:12:b5:50:13:e8:a9:81:
         73:96:06:91:f3:00:2b:14:0d:41:60:1d:f3:f0:42:ad:bd:a4:
         ed:2d:0a:ec:d0:23:37:53:50:76:52:b2:42:53:40:a6:8d:fe:
         83:14:18:f2:fa:d3:7c:5f:9f:04:cc:9a:a0:9d:2a:33:23:f4:
         c3:b5:fc:5f:5e:9d:5f:9a:30:66:ae:7b:b5:8a:39:bb:a2:60:
         e8:c1:59:4e:7f:1f:35:2d:02:f9:fd:9f:3d:d9:43:48:d4:5b:
         c3:50:69:67:c2:4b:7a:09:ec:ab:cc:ee:73:77:3b:a4:7b:67:
         bc:38:bc:ee:e2:1d:81:e0:3b:5d:aa:b7:97:7d:aa:90:34:e8:
         e3:08:a1:6e:1e:63:30:11:64:e5:76:e3:0c:45:96:0e:2f:a4:
         4f:c5:4e:77:c9:c4:d9:86:f9:85:76:32:4a:2a:33:6c:f0:4e:
         62:54:07:9f:5d:05:58:63:f1:12:27:cd:a9:c2:92:99:a6:6d:
         f8:78:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:06:51 2026 by rpki-client