Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc33545-d5ea-302c-aa64-bd86a558ac89.roa
File:                     1fc33545-d5ea-302c-aa64-bd86a558ac89.roa (raw, json)
Hash identifier:          RRf0zYjO03aRdGXmpXwHGhAT9yDjJFoZwC6Fcr2NHlo=
Subject key identifier:   8A:4A:B0:82:57:55:43:44:EF:99:A4:0D:B6:B3:AD:95:26:00:21:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B6F4F9467FD5D14717C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc33545-d5ea-302c-aa64-bd86a558ac89.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.209.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:6f:4f:94:67:fd:5d:14:71:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aea07dd6-09ae-4e2b-b857-b45507307165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:09:5b:dd:26:94:61:93:6c:c9:f4:f1:70:ce:
                    d4:f7:22:68:b6:73:ee:19:dd:5e:4f:4c:28:b3:12:
                    84:de:c5:47:73:70:33:c8:d8:e8:c0:e0:eb:8d:61:
                    80:da:58:cc:43:3a:1d:bc:e7:05:a5:49:3f:9b:39:
                    8b:c1:f7:5b:dc:b9:1d:14:fb:06:fd:af:42:9d:c3:
                    92:3a:f4:ad:ce:ab:c1:84:82:02:3e:47:15:f8:91:
                    50:ed:2a:29:44:a1:6c:83:ab:28:b9:fc:82:e3:8f:
                    7a:9e:f8:33:fe:48:e0:bd:bc:12:df:fa:bf:8d:16:
                    fe:23:d1:e5:e6:de:cf:e9:16:a9:c8:90:14:3f:58:
                    28:b2:46:3d:11:ee:73:48:5e:e6:b3:20:9a:8a:f2:
                    c4:44:72:b2:09:df:18:85:14:fa:b0:d4:2b:cb:cb:
                    5e:bf:89:5a:64:82:21:ca:1a:f6:65:b6:10:cb:52:
                    4f:eb:de:16:fd:a8:8e:01:d9:f6:ae:28:81:0b:88:
                    8c:52:cd:4c:39:88:ae:9b:aa:8f:0d:0b:b3:8b:11:
                    6e:a3:eb:c1:c5:2c:fc:2c:73:57:9e:78:6d:a7:32:
                    b3:af:32:61:39:b2:92:3d:79:f9:11:5b:0c:7e:e7:
                    9b:dc:a1:eb:07:2e:64:49:82:b5:88:63:ec:91:13:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4A:B0:82:57:55:43:44:EF:99:A4:0D:B6:B3:AD:95:26:00:21:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc33545-d5ea-302c-aa64-bd86a558ac89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.209.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:39:b4:7e:24:64:e1:bb:df:78:86:73:90:6e:80:62:46:9f:
         4f:90:f0:67:c9:73:f6:ac:3b:99:09:47:ee:d1:05:ae:d2:c8:
         04:f2:4e:bb:0d:68:ed:94:ad:e0:3a:a3:c5:7a:67:4f:72:0d:
         3b:60:d5:6b:7e:66:47:75:23:5e:82:ee:de:54:02:42:24:79:
         ca:64:b5:d7:d2:05:f7:4a:08:df:42:82:68:fc:ee:06:5b:06:
         cf:99:f9:bb:37:f6:0e:cc:d1:3e:a5:99:24:bd:c6:ce:00:46:
         8f:2d:8f:75:92:38:4f:20:b0:d7:3d:4b:92:db:85:3a:16:c3:
         09:46:95:0d:5b:6d:29:a8:f6:6f:32:8b:fc:a0:c9:1d:9e:90:
         8e:fb:2e:b9:02:a7:75:3f:5d:78:5a:a0:6a:a5:b6:d2:57:cf:
         3b:5a:26:19:26:7e:d3:48:eb:9a:b9:8e:91:7b:53:59:01:1c:
         74:3e:bb:33:c7:8f:ce:ee:83:a0:9f:14:2c:9f:46:12:75:fd:
         14:2f:64:b4:1d:1d:11:8b:6c:95:e4:da:cc:bc:a2:5e:30:da:
         b7:b0:1b:b1:77:7d:9f:b3:3d:f9:0c:0a:04:9b:1e:1e:21:14:
         85:87:1d:41:b9:f9:3b:05:41:d1:f9:cf:e9:e8:d4:28:35:78:
         4f:17:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:56 2026 by rpki-client