Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7387f7f8-b5ea-3d99-a5b5-3dfb9186c070.roa
File:                     7387f7f8-b5ea-3d99-a5b5-3dfb9186c070.roa (raw, json)
Hash identifier:          kfI4sjJ+Eb35OEC5cioKO542CVAwPvg6cN6n6Hlu57U=
Subject key identifier:   71:A2:AD:F3:B2:A4:F7:68:71:6B:AE:11:E4:10:A1:A8:C3:C9:F6:46
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809AE263C8295BBAF09C7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7387f7f8-b5ea-3d99-a5b5-3dfb9186c070.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.228.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:ae:26:3c:82:95:bb:af:09:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=42b83307-22a6-41fa-9fe9-37c9089ad5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:40:0d:d4:26:53:7e:b3:ac:d7:fa:d4:68:bd:
                    8c:75:09:ec:41:cf:7b:16:d8:4c:26:47:ff:1f:b5:
                    10:38:ca:12:77:71:46:60:ec:2f:a1:be:a4:2e:12:
                    4e:f9:7a:11:4d:b8:da:33:7c:b8:84:f3:b7:fc:3f:
                    0d:2f:30:e4:d6:a4:c5:da:d1:e2:cc:3b:f5:73:98:
                    2c:e3:00:0d:9f:9a:ad:b0:20:7f:fa:4e:ce:ed:34:
                    30:e8:69:b8:37:c2:12:6f:7e:29:bb:c8:1b:eb:c2:
                    85:eb:53:55:e9:a2:2f:c0:e9:c8:cf:c3:01:97:cb:
                    1b:1b:27:34:2f:11:e9:2b:8f:2c:5d:d5:bc:42:7a:
                    8a:bd:34:e7:47:49:85:41:2d:fe:ac:c6:d4:2b:a4:
                    75:74:90:2a:91:94:c2:16:1c:19:11:81:f4:e2:aa:
                    59:f4:31:87:66:3c:f2:4f:52:86:8f:2f:ef:fb:83:
                    ef:07:49:a6:74:1b:ec:c0:ae:ae:6d:d4:f2:5b:e0:
                    e0:b8:6c:f9:f3:69:80:aa:ac:50:04:55:38:32:14:
                    36:01:85:b5:44:83:20:77:62:8c:42:e8:52:2e:be:
                    58:20:44:c3:04:13:40:53:81:5b:f1:67:c2:43:c4:
                    af:b7:53:8d:4f:54:3e:ba:11:36:dd:50:ef:6f:da:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A2:AD:F3:B2:A4:F7:68:71:6B:AE:11:E4:10:A1:A8:C3:C9:F6:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7387f7f8-b5ea-3d99-a5b5-3dfb9186c070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.228.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4c:3e:62:a8:95:10:f3:ba:06:65:3d:e4:5c:0f:b4:46:20:
         7a:3c:e7:ba:70:16:08:71:b3:62:fb:3d:25:fd:2a:bc:ec:a7:
         db:8d:6f:33:87:1b:62:f5:01:17:d7:93:b5:bb:33:f2:8d:76:
         dc:b4:49:11:8b:af:ad:bc:7f:3d:d3:f9:07:3d:51:2b:c8:08:
         5b:81:75:b1:09:75:13:d2:f9:16:7c:13:2d:eb:d0:58:01:46:
         e6:f9:7f:3a:f8:32:1e:75:b0:bc:96:27:9f:3b:e8:87:cc:05:
         c4:26:8b:b5:1c:bc:3e:10:20:7c:aa:96:20:9f:36:ac:e9:84:
         10:06:bb:14:a1:15:25:e6:bb:70:ea:20:6d:fe:ff:a3:83:8e:
         84:44:96:a3:b7:fa:3b:7b:0e:f1:e8:e1:a9:2a:d9:ee:04:7a:
         f7:3e:1a:44:35:6b:cb:0a:b3:71:fa:42:5a:be:ee:de:4e:23:
         bf:3b:2d:c6:17:ea:1e:0c:75:b3:64:fc:8f:8d:d4:e1:12:3b:
         5a:a7:7c:f9:d8:ec:8d:47:92:ee:9e:e8:88:85:f5:04:a8:2e:
         45:e6:0d:e2:1b:c8:aa:c4:a4:45:37:7b:62:96:de:45:8b:57:
         51:95:83:8b:dd:76:e1:33:82:97:ee:a1:48:66:0b:01:75:65:
         29:92:c9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:01:19 2026 by rpki-client