Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04138cf1-146f-3d29-9512-6cbecb09249d.roa
File:                     04138cf1-146f-3d29-9512-6cbecb09249d.roa (raw, json)
Hash identifier:          UtwVUatiA/X5kLGvRccWIQcPKjpzRCjk5CGQVEbA5zY=
Subject key identifier:   1D:2D:C9:22:CB:3D:F0:95:5D:8F:DE:16:46:F0:FB:B0:00:62:06:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B6B54EF5674E420759080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04138cf1-146f-3d29-9512-6cbecb09249d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.204.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:6b:54:ef:56:74:e4:20:75:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d5bb96fc-ea7c-465b-8b75-8fda5e6bbdba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:01:63:da:1e:a2:0c:49:e0:01:69:8c:5b:59:
                    44:ad:0b:6a:97:d3:c8:1d:b4:2a:30:79:5c:b3:6e:
                    3c:85:93:ab:7a:20:41:1a:7c:85:f9:61:69:0d:5a:
                    14:3f:5b:94:49:5a:0a:de:e9:60:f1:b3:d7:44:13:
                    f5:4e:93:aa:de:aa:94:47:6e:1e:a7:07:05:df:0f:
                    a8:eb:7d:c8:d1:63:dd:4e:ab:3e:68:3c:bb:5f:f6:
                    c2:87:16:ff:fb:be:6a:bf:0f:e7:b2:fb:b3:01:0b:
                    9c:e0:36:64:fc:07:14:7a:29:cf:71:67:29:1b:8f:
                    6e:be:a1:c6:33:69:ee:1d:7c:6a:ba:bc:02:99:f6:
                    69:c2:d5:e4:e2:77:b2:c9:20:3a:30:2f:3c:44:57:
                    47:a1:20:83:61:83:3f:68:cc:ea:b7:1b:36:ac:ad:
                    55:16:18:97:77:be:1f:b9:59:32:cf:a0:34:d6:1c:
                    76:dc:38:b4:90:44:22:1f:1e:29:39:8f:ad:78:ef:
                    99:83:b5:cc:7b:8a:71:89:e8:0d:99:ef:9c:e3:34:
                    f0:5f:a6:01:7f:bb:64:c7:ae:b4:c4:98:d2:32:d4:
                    73:9c:0e:5c:07:a2:ad:85:81:d7:cf:a1:47:12:88:
                    b9:ea:57:68:92:dc:ba:d5:15:f5:da:da:7e:72:bd:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2D:C9:22:CB:3D:F0:95:5D:8F:DE:16:46:F0:FB:B0:00:62:06:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04138cf1-146f-3d29-9512-6cbecb09249d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.204.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:5b:31:10:50:dd:04:c8:f5:37:71:71:9c:72:b9:c8:af:
         5b:19:b3:86:b9:8e:d9:ec:98:01:6f:a1:32:8f:f2:db:79:fe:
         ef:30:bb:5e:af:ea:11:be:75:b8:28:40:25:46:18:e4:47:96:
         24:c2:aa:9a:af:c5:cb:7b:91:1c:e5:6b:07:b2:62:17:43:26:
         02:c0:96:c1:be:c9:33:ee:d1:3e:46:3d:3c:26:55:f7:3f:59:
         87:4c:d9:29:30:84:07:de:8a:03:03:c8:46:05:98:15:cc:37:
         6f:ec:4f:50:50:5d:30:e2:54:70:91:9c:26:b0:d1:f7:ae:7f:
         02:53:7a:e6:b4:7e:e6:d4:09:78:ce:c3:5f:24:3c:e6:82:75:
         9c:ce:a8:78:84:4d:6f:fe:63:cc:08:7a:b6:35:ed:92:d8:f7:
         2e:88:d6:6f:fd:46:b4:40:66:aa:8f:99:e1:66:7b:51:4a:04:
         b8:da:14:7e:77:69:c4:44:6e:6a:09:40:79:2f:dd:eb:37:3d:
         06:42:d8:86:f1:5f:2d:60:0b:1e:35:76:8e:4d:d7:3e:a4:64:
         2c:1f:87:96:bd:77:ed:8d:26:f0:1d:42:3c:7a:62:8e:4e:9f:
         a3:33:a9:8b:0f:b3:76:d8:b7:62:54:c8:dd:2a:60:c6:76:0e:
         d8:34:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:01 2026 by rpki-client