Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d505615d-02a8-3d16-9662-6b0cd9891463.roa
File:                     d505615d-02a8-3d16-9662-6b0cd9891463.roa (raw, json)
Hash identifier:          FFoYoomon9Men32qG2MV5esDX7NY8LPRWLMrNJ2SRik=
Subject key identifier:   71:55:14:11:64:AF:3E:B0:02:F3:39:6E:AB:1D:57:43:4B:B7:D0:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7E94EBD45DB9573F535D6D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d505615d-02a8-3d16-9662-6b0cd9891463.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.220.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:eb:d4:5d:b9:57:3f:53:5d:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=f2530d48-75bf-411a-88fd-3676ca54b550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:b4:3d:7b:95:5e:cf:55:4a:52:be:6b:16:
                    bf:f1:57:a1:d2:d9:5e:da:ac:77:22:a2:1d:cf:bb:
                    4c:73:32:4b:88:4c:2f:d4:29:6d:3f:fa:f8:22:26:
                    c4:33:fe:53:8b:a1:ba:83:13:23:3f:f9:b8:a8:26:
                    0b:37:aa:c3:3f:58:38:05:15:10:41:9e:38:65:5d:
                    4a:0f:b0:dc:3c:86:18:f0:f4:93:65:ee:1e:1e:9b:
                    b2:8e:0d:b7:b3:bb:15:15:6c:6a:fb:51:02:f5:7c:
                    e9:7c:0f:57:5f:9a:f7:73:37:1c:40:34:9b:b6:9d:
                    08:14:c3:21:8a:cb:d7:20:57:9f:86:4d:68:74:2b:
                    cd:0b:44:e6:0a:80:f2:f0:cc:d1:ef:43:b4:74:77:
                    a8:96:2b:b8:f8:cf:79:40:7e:2c:29:b6:91:c0:e2:
                    83:54:86:31:b1:19:64:96:1f:d8:f3:1f:cf:17:0a:
                    0c:08:08:6c:48:fe:c7:86:f5:20:88:7a:6f:01:ac:
                    90:35:87:0c:2d:b9:7e:f2:56:6f:38:f5:ce:71:ec:
                    89:25:99:2a:2d:24:14:f4:5c:4c:97:c8:03:ca:47:
                    fa:d6:2c:9c:85:0b:53:9a:73:77:d2:3c:c1:c6:55:
                    23:77:2e:f4:3d:43:00:2c:ea:d2:53:ca:23:15:73:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:55:14:11:64:AF:3E:B0:02:F3:39:6E:AB:1D:57:43:4B:B7:D0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d505615d-02a8-3d16-9662-6b0cd9891463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.220.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:9f:71:ed:af:27:f4:46:c1:20:e5:82:6c:00:07:4c:21:
         96:68:83:99:05:10:6a:ce:b4:59:06:d7:ee:ea:cf:cc:8f:1e:
         27:34:ce:57:4d:4a:71:3d:19:71:1d:71:17:b1:2d:ce:c9:c5:
         da:3b:de:0b:54:f1:04:e8:b8:99:98:86:3f:dc:51:74:b4:7d:
         92:49:69:1d:04:f3:91:b7:47:4a:70:b7:44:2c:50:ca:a6:e7:
         88:d7:39:19:51:34:4d:c7:03:ab:58:6e:1a:1a:54:e7:7b:33:
         57:ba:9e:51:ad:7a:a8:35:31:a9:53:6f:99:e0:58:86:8a:ce:
         38:3e:5a:b7:c3:9a:53:41:16:e1:1c:fc:fc:72:51:ad:b4:6f:
         eb:5a:23:92:e3:b4:45:39:5f:2d:4f:f6:b6:9c:db:7f:c7:a6:
         0d:13:e1:c3:b1:37:47:b1:48:10:38:2f:40:a0:9f:b8:0a:b9:
         64:61:7e:93:a9:5f:85:7d:3c:3f:8d:fa:1d:a4:1b:8c:74:3b:
         4e:63:80:34:0c:43:78:2c:d0:24:dc:8c:e4:ff:cb:23:ba:4f:
         a8:c7:d0:33:17:35:cb:6b:c7:4c:fd:26:24:a4:f1:cb:54:37:
         7b:cc:9d:9d:6c:f9:8d:9b:f8:83:3d:46:19:fd:bc:01:0e:98:
         03:0e:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:21:22 2026 by rpki-client