Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa
File:                     6010b20f-cf41-38db-9cbf-e96d77df2f07.roa (raw, json)
Hash identifier:          Uxqyau/WjLOYP0TG/CuNFnqju8QRaXZrHnR6hz6xd34=
Subject key identifier:   F9:51:AE:D2:16:FD:B8:71:71:BC:C4:09:98:5F:F0:80:79:4E:16:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06725A0029CE2457776B8100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        199.74.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:5a:00:29:ce:24:57:77:6b:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=c651fc69-4559-4571-8c9e-f604dd0a20cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:37:77:2e:34:67:6b:c2:09:06:b9:6f:b4:
                    0d:79:81:df:bf:60:20:ae:b7:87:0d:08:c9:cf:df:
                    c0:33:f6:99:18:e3:d1:08:4f:72:97:54:fd:a0:bd:
                    4f:0b:64:78:eb:4b:bc:e5:fc:04:b2:d7:cd:f9:31:
                    b9:01:09:2e:20:1d:76:67:83:f0:c7:80:73:30:b7:
                    1d:2e:7b:9d:9f:7c:3a:a2:94:94:8e:4c:24:d6:39:
                    aa:6d:99:2e:5f:53:1e:cc:28:98:09:3f:d1:ed:7e:
                    ca:9d:4e:f6:84:f5:ee:19:3e:2c:d1:78:8a:e5:78:
                    7f:18:49:07:1d:73:18:fc:c3:96:8b:4a:e2:15:f9:
                    8f:b7:2e:63:f4:bc:df:e0:73:2b:0b:24:cf:7c:47:
                    c4:40:98:22:0d:1f:dc:e5:80:c5:f0:a9:b8:da:d4:
                    d5:4c:3f:c7:83:2a:fd:18:b1:f2:5e:33:77:b9:96:
                    f3:13:a0:2c:eb:c1:ce:1f:af:15:29:10:58:65:57:
                    95:f8:40:d5:b7:06:ca:e9:e8:10:e8:c1:19:74:a5:
                    f2:48:cb:5c:4d:5c:b3:60:1d:04:3c:69:b7:0d:d0:
                    3e:89:3d:88:e7:0e:1c:63:79:4d:ae:24:f9:ac:08:
                    eb:a9:37:81:c7:16:3a:78:e0:b0:ef:30:6e:72:9c:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:51:AE:D2:16:FD:B8:71:71:BC:C4:09:98:5F:F0:80:79:4E:16:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.74.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:80:2a:96:b0:96:2a:2c:12:ac:5b:4d:c4:61:cf:aa:78:
         22:3a:fa:be:44:83:50:fd:54:56:b6:ef:20:00:78:fc:d9:a8:
         ad:ff:64:d0:7a:af:92:c0:b0:af:02:69:d4:2b:08:e6:90:b1:
         3c:2f:58:49:67:b1:49:ba:b1:38:4a:ed:56:48:15:57:bf:1d:
         a5:f2:8d:e4:32:8e:14:98:29:3e:f3:58:d5:e3:12:aa:70:21:
         d1:eb:ed:5d:c8:1e:da:20:dd:7a:1f:83:3c:ae:08:2d:da:6d:
         7d:33:d1:58:a6:02:05:d6:e8:fc:d7:eb:67:be:ac:69:8d:34:
         41:f7:0d:0c:d6:f7:91:dd:eb:0f:c6:29:ed:33:71:c5:25:7d:
         9f:fb:a7:d0:bb:c8:10:85:bf:46:39:4c:ab:9f:e6:aa:2d:e3:
         30:b5:94:5a:70:3a:21:60:be:cf:a5:96:f6:3c:9d:d2:dc:56:
         88:2d:ff:03:9b:f5:07:da:1d:01:04:4e:65:9c:21:62:72:f2:
         9b:b4:ae:88:e5:07:78:d1:f2:bb:3f:29:34:04:24:4e:ee:1e:
         ef:e1:38:a9:68:1d:0b:3a:55:45:34:e1:26:48:22:e4:d8:fb:
         4f:55:ff:be:8e:d3:83:e5:b7:14:b8:be:67:e4:3f:9c:07:a5:
         67:52:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:33:01 2026 by rpki-client