Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/285c8328-bdfe-3c08-a57a-71838604253a.roa
File:                     285c8328-bdfe-3c08-a57a-71838604253a.roa (raw, json)
Hash identifier:          f6PbM5MtOGfp1fwr0kIFofg7N1urJbaKV/NxMeMfIJ4=
Subject key identifier:   D8:C8:66:18:F8:72:98:FD:A5:A5:2E:03:1A:13:8A:F5:F1:29:6C:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809B489362B10276AF7EB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/285c8328-bdfe-3c08-a57a-71838604253a.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.242.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b4:89:36:2b:10:27:6a:f7:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=59868d27-7bbb-47ef-97ec-f3e13e52f695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:3c:b4:f4:e9:d9:b7:8d:2e:df:eb:41:ec:
                    5e:b6:4b:56:69:83:18:d6:10:bf:ab:5c:9e:aa:c8:
                    61:bf:0e:e8:69:be:e6:5a:9c:00:4f:c3:26:be:29:
                    db:ab:65:3e:db:1d:89:d1:4b:88:15:00:45:8a:2b:
                    3e:7a:87:6b:72:64:34:5e:75:72:24:b8:b3:17:fb:
                    3a:53:7e:7d:e1:2e:35:df:07:64:16:a2:28:74:2f:
                    a3:b1:b2:b1:76:9c:f8:b2:aa:94:5c:6b:c7:d4:c4:
                    b9:b9:2f:cd:c8:fd:f4:35:83:c3:72:4e:fd:23:b0:
                    e4:96:0a:6c:71:ec:9d:93:d4:86:77:90:04:17:5f:
                    86:a3:b4:27:13:a6:64:8e:07:05:22:de:14:0c:65:
                    16:50:53:e3:db:7f:13:38:dd:4c:01:00:5f:45:5b:
                    70:96:b4:34:a3:55:49:c1:ec:af:b2:3d:63:cf:22:
                    65:a2:a8:0b:a3:2a:c2:a4:9c:2a:a1:2e:db:9b:4c:
                    0d:d3:7e:ba:58:de:14:83:d2:e2:5a:9d:58:47:50:
                    e1:e5:c6:f8:3c:55:50:f1:95:ce:74:8b:fe:51:e0:
                    b8:a1:bd:d2:87:fb:f1:d1:a7:21:f2:14:08:28:57:
                    a3:a8:1e:d1:55:e8:3f:b4:27:00:c1:9e:5d:bd:7b:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C8:66:18:F8:72:98:FD:A5:A5:2E:03:1A:13:8A:F5:F1:29:6C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/285c8328-bdfe-3c08-a57a-71838604253a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.242.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:c5:7a:a3:90:72:0d:36:b4:95:e8:06:36:2a:b8:69:e2:
         0c:34:c7:3a:46:ff:e6:c3:0c:f9:4d:a5:cd:dd:94:7e:45:58:
         8c:44:77:1c:87:a3:1e:67:9e:b8:b1:8b:cb:0e:71:dc:43:8b:
         fc:be:50:a1:3f:b5:11:7d:26:89:7e:3e:59:b4:b6:f9:47:11:
         e1:65:9e:2d:8a:b9:89:a5:62:69:e3:e5:cc:40:38:d2:28:9b:
         e9:ea:c2:8a:90:18:8b:ec:76:a8:ba:8d:a3:35:0b:1e:db:66:
         e0:0c:2a:cd:74:8f:4d:c6:25:95:b8:f7:0c:7f:c6:46:12:44:
         7e:61:33:b1:f5:a4:2c:4f:04:80:29:8f:f7:9a:c1:47:3d:6b:
         2c:54:29:d6:df:3d:63:c5:bb:5e:fb:94:ee:7a:f1:72:45:dd:
         2c:96:8a:56:ac:6e:96:a5:38:73:d8:97:57:38:1f:d4:c6:57:
         f6:45:fb:ef:72:86:00:7d:41:e0:7e:d4:b1:fc:ac:0f:d9:6b:
         dd:6b:4b:56:f2:f7:5b:73:03:22:1c:50:5d:19:99:5e:92:a9:
         40:6e:19:af:b6:34:22:ef:60:33:c8:cb:8a:33:04:18:b6:7d:
         98:b4:97:7f:15:7b:85:da:e5:ad:56:f5:43:93:2a:20:a3:87:
         5e:b3:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:20 2026 by rpki-client