Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fcd990-b355-3070-ae82-9b6a76430b44.roa
File:                     86fcd990-b355-3070-ae82-9b6a76430b44.roa (raw, json)
Hash identifier:          MqvN/M++Bl7f5pwzQ0TH3/UjqAfWNPAcHTYcM5fmNj8=
Subject key identifier:   EA:E3:11:56:89:67:0F:24:3A:24:A7:A4:0E:D8:E0:AF:7B:E5:FF:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C583EA7765E38AF23173F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fcd990-b355-3070-ae82-9b6a76430b44.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.250.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:3e:a7:76:5e:38:af:23:17:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=89b77f6e-5999-4cf1-9171-1e56ac74a0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:94:84:2f:bb:31:bc:bf:25:7d:ad:37:25:
                    b9:2b:8a:3b:f3:b8:6c:6b:82:f7:28:d8:ba:6f:80:
                    00:73:cc:0c:e8:33:ed:8e:56:7d:fa:c2:0b:d0:37:
                    26:c2:aa:ac:70:46:58:51:9c:49:b0:f1:06:00:8e:
                    44:45:de:67:af:cd:58:bf:37:66:ee:7f:ab:45:55:
                    69:b4:5f:4e:63:d3:ed:e8:8a:f5:25:81:ac:21:14:
                    d4:55:6b:25:43:50:c1:5d:2f:51:47:d7:ef:03:d8:
                    ef:52:43:72:1a:48:a3:fc:85:37:6f:24:66:71:15:
                    7d:4a:d5:ce:50:1b:4a:c6:be:aa:ba:16:31:f7:74:
                    6a:3f:46:64:f7:c4:61:b5:eb:7b:76:ba:c4:d1:f5:
                    ea:45:b0:12:03:dd:a2:d2:f3:0c:b5:31:48:a3:23:
                    f6:0e:a9:3f:91:60:27:e5:e4:f3:d5:20:f8:5d:fd:
                    3f:40:56:10:95:13:9d:b9:31:46:b1:ea:ad:0f:d5:
                    e6:6b:d0:12:b0:aa:e4:be:69:75:a8:12:34:71:e5:
                    e7:d5:26:35:8f:d7:c6:df:44:92:27:ba:3e:88:15:
                    83:05:be:12:27:30:57:64:0c:c0:42:da:43:64:60:
                    29:38:eb:9b:35:b2:c5:24:de:20:b4:be:04:03:c2:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E3:11:56:89:67:0F:24:3A:24:A7:A4:0E:D8:E0:AF:7B:E5:FF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86fcd990-b355-3070-ae82-9b6a76430b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:56:5f:04:1d:22:75:b2:3e:6e:91:f0:3a:bf:42:20:e9:
         d6:a1:84:d7:fe:61:46:2d:c7:89:8c:b3:ea:b4:c6:e3:9f:a2:
         00:87:b6:ba:34:dc:ca:5d:e9:52:43:75:ae:c6:42:26:77:81:
         d1:eb:c5:42:d7:8e:e0:dd:f3:b1:22:fc:aa:5f:6b:ca:bf:44:
         b1:c0:20:4f:72:92:f4:e8:ed:12:25:d7:01:dc:d6:08:66:6f:
         62:fc:ba:58:3a:2e:9a:5f:fb:16:0c:ce:44:60:ea:d6:db:84:
         a1:3f:36:98:2a:7c:05:4d:fd:8d:68:82:7f:6b:18:50:0a:a4:
         ce:4d:fb:21:85:1b:6f:46:61:87:a9:13:40:de:d0:be:5a:b0:
         68:2d:fd:d4:7b:e9:06:59:0f:4a:80:d9:2f:d4:53:32:5c:53:
         41:ae:eb:8c:4e:aa:03:50:77:55:01:16:36:3e:db:27:ea:f7:
         5e:d3:2c:08:41:17:6e:eb:6b:81:d2:ee:82:bb:0f:59:5e:5d:
         e8:2b:e5:d1:b3:60:06:80:2f:60:68:bc:d8:a8:ee:a0:3e:e7:
         f4:7d:4a:aa:4d:38:c1:ae:25:3f:a9:b2:a4:ce:16:a3:f0:cd:
         93:06:50:82:05:6b:90:36:a4:cb:49:88:46:7c:c3:f6:df:4e:
         b0:17:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:27:47 2026 by rpki-client