Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
File:                     5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa (raw, json)
Hash identifier:          PzaHROlQsK36pl6OF7A9xgq0XZmW6sxBTKIjSONP1G4=
Subject key identifier:   3E:C6:96:2E:0A:B6:74:3E:93:64:1C:D1:6D:AD:C2:55:2E:92:3A:C1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809B2652CCF463925458480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.238.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:b2:65:2c:cf:46:39:25:45:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=ea3ee7f0-ed0d-490f-8bbe-8bbf5c098059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:35:e4:d4:95:4b:9e:31:cd:3b:ba:99:20:
                    24:b5:34:07:83:0b:24:12:bc:4f:0d:ef:36:4d:6d:
                    ec:77:24:fd:53:90:3b:16:c6:bf:32:af:d6:61:f6:
                    19:67:59:c8:fc:ad:b3:75:28:1d:5c:7a:15:28:f7:
                    94:b8:82:26:03:5c:2e:a1:20:98:0f:f8:fc:59:b4:
                    14:b6:98:d8:fd:d3:29:4f:57:36:17:20:bc:24:cd:
                    a0:14:7a:20:c7:4a:b6:fa:10:e1:29:28:8f:d5:b3:
                    6c:ef:7b:5e:eb:44:7a:4a:d6:f4:5a:85:62:24:bb:
                    53:c3:ab:5e:c1:30:66:df:80:a1:3d:6a:f7:b9:a6:
                    d9:0e:d1:df:a7:1a:6c:2c:40:35:01:43:87:47:09:
                    0c:81:3a:91:93:7c:a9:9e:02:da:3e:af:ae:5c:ad:
                    89:7a:63:70:99:33:9a:a0:07:f3:c7:41:14:b0:b4:
                    f9:d3:69:a6:49:db:3d:7f:34:a8:73:55:24:91:c4:
                    0e:3f:91:09:ef:fa:c5:d6:0e:2d:36:b6:e9:b3:55:
                    3e:37:66:5f:4e:42:2e:d1:7b:97:fc:27:8b:d6:cf:
                    73:f8:01:09:20:5d:90:53:9a:d0:c0:ff:7b:3f:61:
                    ff:ed:08:64:3a:d7:83:af:a9:60:de:1b:43:9d:4f:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:96:2E:0A:B6:74:3E:93:64:1C:D1:6D:AD:C2:55:2E:92:3A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dd8b51b-913d-3347-a7e8-4e0e7e239ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.238.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:dd:d5:e3:38:7d:de:f5:01:24:66:93:00:c7:93:68:af:
         1f:b1:10:6c:d0:fd:70:0f:f3:ad:91:ad:c1:93:2e:84:6e:7c:
         34:58:fe:9c:26:eb:9b:e0:3e:50:89:c5:85:2f:af:f6:4a:d2:
         29:b2:e0:b4:81:4c:50:22:7b:cc:6c:f7:da:ed:49:35:2d:ae:
         03:0d:d4:ad:71:65:a9:c3:4e:72:fe:7a:50:22:db:9c:88:c2:
         c9:98:74:2b:09:be:33:1a:5f:91:e6:2c:a7:51:41:ac:7a:ce:
         79:50:b1:3e:85:40:a5:2a:3d:b6:72:89:64:bd:2b:a3:26:bc:
         e4:f2:38:c9:47:ed:71:12:59:2c:ba:af:e3:b4:4e:8f:2f:1b:
         29:b9:ec:a3:0d:85:d2:01:ad:82:1f:36:24:89:d1:aa:92:a5:
         3e:2e:f4:51:6e:81:9f:a2:f6:09:10:7e:f4:96:1b:aa:2f:d3:
         b5:50:6d:70:09:ca:52:86:99:e0:cc:02:d8:fa:09:16:55:ca:
         b3:cd:50:bd:8b:ed:09:62:e3:92:84:ee:ac:4d:66:8b:67:5b:
         53:20:5c:e3:96:f6:4e:e0:7a:68:be:59:24:44:69:ea:44:3f:
         e8:2e:bb:c2:7e:78:9c:30:80:59:0b:09:88:33:7c:02:63:65:
         e3:d3:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:41 2026 by rpki-client