Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa
File:                     24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa (raw, json)
Hash identifier:          fJLeFqXgUJxWHsqPM2Gkz8Nt+UuSvoVWAouQMqPmJYQ=
Subject key identifier:   54:36:3A:15:F0:F3:07:55:ED:52:D7:9F:87:09:F9:D2:F0:DB:7E:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809B65BF6694C27FA613E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.246.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b6:5b:f6:69:4c:27:fa:61:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=edc061a7-46c0-4576-a476-44203bfd7b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:d1:36:6d:92:d2:75:ac:e1:81:98:27:dd:
                    75:91:26:59:cf:94:69:e5:82:19:b0:53:ee:1b:fb:
                    11:bb:6f:b9:86:34:63:64:cb:0e:6d:a5:e6:20:36:
                    6c:31:55:c4:a4:1b:88:3a:ee:01:88:51:cc:34:45:
                    95:77:7b:06:9e:2a:38:ae:be:f7:47:eb:86:51:ee:
                    5e:43:89:f0:4c:c9:78:f5:da:9e:4e:0d:8b:32:7f:
                    2d:55:72:8f:f3:44:13:dc:8a:29:6b:9e:42:ee:6a:
                    9e:ac:f6:a0:22:57:07:ab:59:0b:8b:11:06:74:67:
                    a9:0f:d8:f0:e2:5c:40:87:4e:20:18:04:3d:cb:f0:
                    ad:e0:ea:a0:11:82:a2:cc:85:aa:44:56:3a:85:60:
                    3f:fc:78:83:9a:1a:2e:3e:6d:2e:3e:f8:cc:c2:44:
                    64:47:90:15:3d:d3:f0:b8:58:4c:eb:6d:ea:44:06:
                    ac:58:39:0c:91:70:71:79:46:24:77:89:4c:27:6b:
                    eb:5d:b7:7c:50:a2:09:48:e7:b2:da:06:a5:78:fa:
                    f4:f9:1a:04:1e:18:6a:d1:52:c2:9a:b0:5f:02:2d:
                    df:a0:13:b6:3d:82:10:f7:b9:52:f5:d9:f7:6b:6f:
                    1a:be:fc:5f:20:a5:2c:b2:4c:8d:b0:63:9e:6d:b6:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:36:3A:15:F0:F3:07:55:ED:52:D7:9F:87:09:F9:D2:F0:DB:7E:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24851b99-d0d6-345e-ae71-08c0f9f2c08e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.246.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:b8:ac:39:f4:cb:a5:65:ed:07:cb:a5:a4:4b:b2:64:68:bf:
         4d:6c:d7:ca:dc:fa:d7:af:68:35:fc:6a:73:9d:a5:26:2d:72:
         d5:13:3c:39:fa:d6:4b:66:42:da:ee:b3:0f:cc:aa:16:10:1b:
         65:58:5c:e8:01:a2:18:5c:94:ca:19:32:66:b7:cc:01:ab:0a:
         1b:f5:5f:4e:fd:b5:2b:4e:2a:c2:5a:81:65:44:59:e7:93:c5:
         8e:75:e4:a1:f2:fa:fe:9e:5f:37:bc:60:59:e5:da:59:be:b5:
         9e:05:5b:df:f2:f8:eb:c5:e3:6b:25:1d:7d:a2:16:92:5d:a5:
         27:0d:4a:d2:e7:ac:98:48:f9:cd:dc:44:09:19:e6:be:bf:28:
         ea:23:9f:32:3f:a1:ba:dc:bf:1a:65:e9:e0:fd:ea:8d:86:9c:
         d6:a3:53:b7:1b:ce:a8:8c:f9:b4:da:73:4b:f0:8f:bd:97:7d:
         aa:1d:d6:db:e5:bd:73:22:2c:ed:e2:6d:c6:85:f9:13:22:fe:
         22:93:24:ef:4b:6f:17:82:07:45:6d:ed:d5:b3:f8:3a:aa:68:
         a7:71:fe:a8:49:35:82:2f:34:66:60:97:b7:9b:96:b0:d4:8a:
         f8:12:e6:b6:09:6c:c3:2e:5f:17:f3:6b:d4:52:c0:23:e1:be:
         96:7c:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:34 2026 by rpki-client