Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa
File:                     0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa (raw, json)
Hash identifier:          8l84tsUNU56bdcB4+g+5sbCOm1W1yStSEdDwOZH2DR8=
Subject key identifier:   4E:3A:96:20:BF:EF:94:6F:6B:8F:6D:EF:23:66:D4:D2:9C:A2:58:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C584B277B3F084FB7C98A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.247.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:4b:27:7b:3f:08:4f:b7:c9:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=9bf8b3e9-88f7-4cb2-9691-c6887c555b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0b:3c:25:b2:25:a1:aa:9f:cb:b4:8b:76:18:
                    41:5e:ff:94:a4:75:cb:4c:c0:98:3b:f3:88:ea:5b:
                    63:93:5b:d5:4c:45:72:95:67:48:fa:21:0e:23:e4:
                    8b:87:1c:f7:a0:d9:34:f6:0d:97:c6:a1:3a:1b:cd:
                    b1:c5:7c:bb:97:69:6a:08:20:44:52:de:4d:05:10:
                    d4:59:8c:3a:20:e9:4e:ef:fc:c7:e7:b4:e5:9d:b8:
                    a3:f7:31:bc:e5:8d:e5:a5:39:fa:dd:d6:34:68:7f:
                    30:49:e8:2f:67:82:4a:bb:94:dd:59:98:65:56:30:
                    13:85:e5:3f:29:6b:92:45:cc:bb:3c:84:fa:e5:a4:
                    f7:e2:6e:9d:17:9d:4f:36:9b:97:dd:8c:f1:0b:b4:
                    66:cc:0f:2e:65:15:fc:e3:1f:0c:4b:b1:aa:14:d2:
                    d1:39:c8:2d:c7:aa:84:04:09:5b:d6:f8:9a:e1:ab:
                    30:28:03:9f:0d:a5:cd:6e:21:3d:17:41:a3:51:56:
                    0f:cb:5e:c8:fd:a5:7d:ae:14:0e:e6:98:7a:29:4d:
                    c7:18:71:1d:3e:01:24:a4:03:25:0f:7c:b6:a9:18:
                    a8:0e:d2:52:ee:f9:b8:c6:23:2b:e6:63:0d:7c:ec:
                    b0:8a:51:e4:0b:1c:ed:12:a5:b1:e5:db:88:f3:a8:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3A:96:20:BF:EF:94:6F:6B:8F:6D:EF:23:66:D4:D2:9C:A2:58:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.247.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ff:31:a8:23:ff:67:14:09:04:b9:eb:7b:5f:4f:aa:b6:87:
         bb:30:44:ea:4d:6a:cd:4d:83:04:c3:ef:5c:ad:74:b5:38:ee:
         fb:c1:ae:f2:ef:dd:82:53:6a:05:41:b7:a1:b1:4b:f6:1f:e6:
         66:41:2f:24:b1:e3:da:a3:52:89:e3:03:df:69:96:f5:d3:e4:
         60:e5:b2:be:a7:73:a9:97:e3:e8:6a:2a:03:e7:4b:ec:0e:34:
         17:43:74:e1:d8:e6:d9:44:a7:c4:52:78:92:9e:ae:b2:09:5d:
         77:ea:d6:ef:0c:2b:71:63:f7:d0:a5:74:df:06:31:fe:42:f1:
         69:af:aa:2d:a7:28:0f:cf:1d:56:37:51:d3:be:ea:76:b4:fb:
         0f:12:da:79:6a:31:a9:6a:6f:d7:ef:b8:0f:44:60:64:f2:8f:
         96:a7:53:d7:3c:db:7e:29:a2:03:88:80:e1:4e:66:3e:1a:5c:
         01:1e:7f:85:0d:0a:57:dd:92:78:e3:31:8c:81:28:6b:9f:09:
         f5:5e:0e:4d:f2:70:03:76:c1:1b:ab:fe:9f:9c:47:83:03:56:
         3c:86:17:67:13:0c:78:6d:b2:f9:ae:cf:64:f9:f7:ea:b2:40:
         de:17:0a:f6:c7:14:20:cf:2e:f0:bc:42:e8:cf:08:8b:a2:d5:
         6f:9c:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:52:51 2026 by rpki-client