Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68e554f2-7973-3e48-b46a-c63bd537f72b.roa
File:                     68e554f2-7973-3e48-b46a-c63bd537f72b.roa (raw, json)
Hash identifier:          0xMjbobviFtiqhOhLtePCkw01Ca5GioZCJ5Eim6jDkw=
Subject key identifier:   2D:71:1D:34:DE:7E:95:DC:EE:16:A4:0B:13:08:F9:D0:A7:3E:EC:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B98E4CA72D7430170EF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68e554f2-7973-3e48-b46a-c63bd537f72b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        174.213.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:98:e4:ca:72:d7:43:01:70:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5aad95de-4da2-464c-94bc-234e34e4fd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:ad:c4:a3:af:70:ee:67:da:67:96:61:83:
                    e2:f8:4d:c6:6f:58:77:1a:f0:db:56:22:58:dd:22:
                    85:6c:80:1f:6f:aa:ea:4b:20:5f:8b:7f:32:5e:a8:
                    46:6a:14:fc:ec:9d:f2:15:b5:e9:f1:fe:7f:95:50:
                    90:c7:88:87:fb:2d:a6:b7:c0:d6:1f:68:c9:7f:e5:
                    80:d9:9b:31:82:a1:bf:2c:be:cb:76:dd:4c:5e:1d:
                    0e:40:2c:a4:46:36:a9:04:29:50:ff:d5:ee:47:3e:
                    ed:c2:b9:a0:db:b1:3a:95:eb:60:0f:00:e7:b5:01:
                    7e:d9:b0:65:12:ab:fc:41:3e:58:a6:37:0a:d4:93:
                    0d:01:f0:e8:e2:40:02:68:f8:98:16:4e:49:e1:29:
                    e7:01:41:80:ab:12:3e:0f:15:f6:23:87:9e:3e:39:
                    a5:e2:c8:ab:2c:e1:bd:89:42:34:83:21:ef:bb:ca:
                    f9:77:71:c3:0a:99:3a:42:84:7c:5f:a3:10:79:a8:
                    c6:60:f4:cc:fd:c0:4a:b1:08:25:95:03:8e:7c:93:
                    58:6e:5c:ed:35:7b:62:dd:07:c5:39:00:86:57:29:
                    6a:67:f0:e4:0a:c1:e0:ed:a9:b0:45:4f:7b:59:8a:
                    20:48:28:80:16:5c:18:e2:77:ce:90:41:af:59:c0:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:71:1D:34:DE:7E:95:DC:EE:16:A4:0B:13:08:F9:D0:A7:3E:EC:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68e554f2-7973-3e48-b46a-c63bd537f72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:47:c7:81:16:76:ad:1f:66:1e:f4:b4:00:f4:d1:0c:71:
         9e:32:3a:2b:cb:54:0a:0a:09:fb:3d:d1:e5:ee:59:0f:13:3a:
         01:fc:17:f7:e8:ee:e0:9a:9c:bd:63:d0:4c:c6:f8:2e:ae:28:
         d4:4a:c7:5c:ec:ab:80:2d:ab:3a:71:90:a7:19:e1:48:78:5b:
         6f:ca:2d:97:8f:dd:2b:5a:2a:c5:75:53:ed:bc:5e:16:2b:49:
         76:b2:fa:46:2e:99:5f:ff:48:96:ba:dd:9c:67:7f:5b:a5:53:
         ca:0e:7f:8b:6b:bd:aa:80:3d:fd:ab:e0:18:3c:05:44:ca:7d:
         ee:93:b3:4e:db:ae:e1:67:4a:b9:76:b8:38:74:95:34:cc:71:
         7d:4c:d7:05:90:d4:a5:34:54:3c:ae:5d:55:04:0c:07:fb:5a:
         73:82:7c:e6:de:b9:33:dc:4e:3d:a8:f9:4c:b3:61:ea:71:9b:
         04:b5:70:c6:3e:d5:48:25:05:b8:f7:59:a6:05:2a:96:04:40:
         df:ea:c4:b1:de:46:44:da:2c:a3:6e:bc:4e:eb:d1:bb:7d:3b:
         93:50:74:58:86:92:4b:53:66:75:b5:be:6b:81:9a:b9:d9:f4:
         5f:39:7b:88:fc:31:09:23:fb:29:49:db:99:48:ec:4e:c4:e7:
         aa:7e:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:35:51 2026 by rpki-client