Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa
File:                     1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa (raw, json)
Hash identifier:          iq5EDoHo41KXw0U8Y1gTDv9OrLpakEpdcDSqmqKs8wA=
Subject key identifier:   4D:89:93:46:0C:66:45:98:13:56:73:8B:6E:B2:53:AA:08:B0:70:BF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F71EDC11066F9F92F5D73B180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.255.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:c1:10:66:f9:f9:2f:5d:73:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=1ffe73aa-72f2-4ee4-a27d-2ade5cc8b07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:b0:a2:05:34:ad:7b:51:90:0d:3b:a3:54:
                    a6:2b:57:f0:19:8f:d2:ee:4b:f7:03:dd:0c:be:da:
                    7d:1b:35:39:1e:8b:a9:bd:df:52:17:3f:a2:ce:9e:
                    59:ec:6f:22:ce:6a:4c:b4:14:aa:f4:88:d6:8c:c1:
                    e6:fd:be:bd:2a:71:7a:87:5e:1b:5a:d8:36:8e:66:
                    18:6c:45:02:a3:54:1f:8e:be:bf:55:3c:bd:09:b8:
                    a2:1e:f2:4d:fd:31:c6:50:f7:14:13:25:19:e6:aa:
                    32:f7:96:14:07:3a:b8:36:5f:1b:f3:d5:0f:f0:38:
                    48:03:9b:d8:44:9c:13:f2:46:72:29:59:cb:03:c9:
                    30:bf:87:ad:96:78:42:ba:3a:82:7e:60:41:ae:f7:
                    99:f0:55:79:df:af:89:5e:00:85:d2:a0:22:61:9a:
                    71:97:d2:c7:4e:52:e5:5a:72:01:14:c5:ad:81:2e:
                    37:53:8c:71:6c:79:3e:65:73:21:d5:4c:95:f6:03:
                    54:6e:89:3a:91:bc:de:82:e2:e6:59:a5:77:c3:88:
                    ac:06:87:8f:47:fe:6a:67:f1:95:4b:3e:e4:08:7a:
                    c1:b6:46:2f:7d:71:fd:b2:5a:89:c3:a2:d1:6a:9a:
                    1c:34:79:f2:b3:63:21:bd:49:88:9c:f9:08:4c:e4:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:89:93:46:0C:66:45:98:13:56:73:8B:6E:B2:53:AA:08:B0:70:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:25:3c:1f:63:a6:db:60:b6:4a:b8:e3:08:53:38:28:15:b5:
         a2:76:c1:a4:a9:f3:eb:e3:ee:ef:43:98:3d:9b:b6:cf:85:92:
         b2:cb:50:58:99:aa:ca:63:59:a4:4e:31:e4:c1:5a:15:fa:10:
         e3:6e:71:fa:73:73:d6:32:e9:3a:75:55:d0:fa:66:45:c7:98:
         23:29:b1:5b:f8:07:ea:02:d3:06:7e:1c:9d:fe:a0:2f:7b:98:
         67:51:b5:6b:0f:aa:21:f5:95:70:dd:35:f4:f8:43:6c:9a:f4:
         8f:9b:16:f1:e8:f0:e3:f6:af:ef:18:b4:15:af:4a:b8:f9:84:
         cd:ed:10:17:ee:55:d5:73:a4:a1:d6:70:c0:6d:6e:3d:5a:ef:
         f3:54:29:3d:13:35:ed:58:ea:38:98:d4:6a:0d:fd:fa:d3:89:
         a3:5f:6e:a5:70:d9:22:5a:ab:02:45:0c:1e:a9:04:d4:56:67:
         ad:32:22:5a:f3:d1:92:13:42:65:fa:ae:ba:f2:bb:e4:30:48:
         78:bd:1e:88:4a:bd:cc:76:26:2a:79:c2:33:bd:6c:96:c0:88:
         fd:c0:69:ed:36:d5:56:3b:ee:af:ad:e9:c5:46:4b:34:e4:5b:
         a3:f9:56:b5:0f:28:31:01:31:eb:fc:c9:5a:27:47:63:75:63:
         f6:33:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:31:21 2026 by rpki-client