Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c04fb9-12c3-3f06-81b7-081475aebdb1.roa
File:                     40c04fb9-12c3-3f06-81b7-081475aebdb1.roa (raw, json)
Hash identifier:          TI3+jmHKRe4i3v/pHdppqyIt58xXrsI/A8+OXrz3ubE=
Subject key identifier:   0D:B1:99:15:F5:9B:4C:80:F0:7E:0A:99:DE:4B:C2:64:ED:52:39:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B7EB1F03F400582D21000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c04fb9-12c3-3f06-81b7-081475aebdb1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.218.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:7e:b1:f0:3f:40:05:82:d2:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9eda7739-63f1-4bd9-9585-c5f0d496249b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:86:e8:02:bf:db:7e:f3:f4:47:bb:e5:6f:
                    0a:41:c2:cb:71:42:d1:ee:8d:92:f7:87:36:74:40:
                    b8:49:a0:27:2f:2a:e6:32:8a:65:65:ad:57:21:15:
                    bd:b6:ac:44:aa:06:e2:37:0b:32:bc:f2:58:5f:79:
                    7a:39:4f:59:de:bb:d6:54:61:7c:56:a5:eb:72:b8:
                    d6:48:ec:4b:e3:2d:37:77:6e:39:37:8a:71:1e:e6:
                    fd:ad:6d:be:f7:b0:9d:37:34:71:09:2f:75:ca:16:
                    5a:a5:ae:7b:6f:13:b6:76:df:36:dd:be:cf:fa:a9:
                    d8:44:2f:49:52:69:03:ad:1d:73:8d:65:d4:36:99:
                    e6:21:8c:80:c7:4f:46:46:04:1d:a0:63:3f:e8:57:
                    e1:2f:32:5e:f5:a0:4b:ed:4f:71:20:f9:4a:5a:3e:
                    14:22:64:b9:d9:49:c9:09:98:93:b4:f8:af:7c:9d:
                    a6:50:59:38:8a:84:d7:1b:93:4c:6a:a0:3c:11:2b:
                    74:0d:97:a1:c6:b1:74:aa:13:2c:a6:83:30:47:76:
                    b7:c5:ec:57:0e:55:33:b1:2c:f0:b2:4b:10:b9:d0:
                    d1:63:3f:fb:14:e8:33:31:af:ec:ff:fa:0f:89:d9:
                    8c:29:3d:b6:42:52:32:12:5b:41:a7:b9:90:42:53:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B1:99:15:F5:9B:4C:80:F0:7E:0A:99:DE:4B:C2:64:ED:52:39:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c04fb9-12c3-3f06-81b7-081475aebdb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.218.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:10:cb:58:6f:19:c4:eb:9e:f5:07:f5:20:ba:e7:b0:11:e8:
         20:c0:e0:06:c2:f9:6e:ce:38:fa:93:e3:b8:0a:d7:1c:45:d6:
         4d:92:fc:b1:1a:b9:18:11:f6:cc:b9:80:29:b5:d8:48:0c:20:
         81:97:0e:eb:0a:f9:e2:04:06:c3:a5:26:8d:fc:3a:8f:25:83:
         78:7a:86:2d:45:c2:60:5b:24:1e:8d:60:cc:0b:0b:11:9b:b6:
         8a:40:83:a6:31:5b:40:01:bc:04:60:40:9a:9e:d9:69:52:6a:
         3b:8c:d5:00:cf:1c:7b:b4:7a:2a:f3:cf:67:d2:51:18:f9:ec:
         6f:ac:69:08:37:de:d5:78:03:9b:e7:6f:2e:c5:7d:17:e4:62:
         da:d7:a9:a0:9a:9c:af:a3:f6:49:c8:80:5a:b8:e0:24:33:a9:
         65:9b:9e:58:cf:bf:47:66:9e:3f:f5:b6:a7:14:0e:c2:82:e3:
         e0:95:cf:36:f1:62:1d:1a:eb:98:7d:7d:3e:b0:69:b6:db:fb:
         0a:c6:8f:20:5a:bf:83:82:6c:90:73:fc:ef:92:c2:80:a0:12:
         15:96:bb:6a:41:66:6a:b0:a8:c5:e2:d8:e2:de:2b:f8:e6:49:
         0e:21:fb:9e:84:61:e6:b7:c2:8c:8c:46:70:ee:62:08:c0:00:
         f3:ae:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:12 2026 by rpki-client