Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a230ed25-d859-3052-9382-b75c99d283a4.roa
File:                     a230ed25-d859-3052-9382-b75c99d283a4.roa (raw, json)
Hash identifier:          RcK+4w1K/nC3C+GWyA+G8vEUjyZ0GWxkMPtuVp+/548=
Subject key identifier:   D1:78:53:99:36:45:17:33:49:EA:6C:0A:15:60:11:16:89:ED:BF:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F6C583E9AFBA68A18A53DA380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a230ed25-d859-3052-9382-b75c99d283a4.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     6167
IP address blocks:        174.250.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:3e:9a:fb:a6:8a:18:a5:3d:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=5a66de5e-ae7b-4090-9d39-724fa436b07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:5d:d6:3a:e0:78:32:e2:d2:30:3b:5f:43:
                    a5:37:53:31:4b:00:7e:76:56:2b:cf:82:23:d0:0a:
                    65:44:b8:19:b3:2f:9c:7f:fe:d9:85:9b:e1:be:f4:
                    59:7d:c3:0c:89:06:c8:1a:51:bc:00:20:71:e6:1f:
                    c1:45:11:84:e6:94:9c:06:5d:96:82:4f:fd:bd:6b:
                    78:5d:ab:47:d9:47:bf:df:b7:3a:1d:80:c7:67:4e:
                    82:5d:97:0b:6a:02:de:e9:31:0b:e9:a6:d5:5b:96:
                    5e:74:ba:cb:0c:c4:98:ff:36:e0:a8:7d:d4:c6:75:
                    08:f6:cd:93:88:92:03:02:96:62:fb:6c:ef:fa:bf:
                    01:b5:d7:c2:75:4f:3d:36:89:b8:ad:45:4b:57:43:
                    1c:ee:f7:6b:20:3e:98:ab:d6:2c:11:f2:f0:25:4d:
                    66:fa:cc:fd:57:d0:ac:5f:19:b6:ce:26:82:fb:15:
                    7d:d9:96:28:c6:1a:0a:04:1f:27:a8:58:42:9d:8e:
                    a0:fd:31:b2:2f:03:42:ac:5b:f0:a1:bf:35:4d:0d:
                    ef:aa:38:c8:c7:9b:31:34:46:8e:24:ee:fe:13:c7:
                    ee:8e:14:59:fa:5c:19:4b:1f:1c:3b:f9:fc:05:22:
                    7f:6e:8e:d2:79:40:be:bb:b9:6e:b1:0a:9b:8d:c1:
                    67:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:78:53:99:36:45:17:33:49:EA:6C:0A:15:60:11:16:89:ED:BF:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a230ed25-d859-3052-9382-b75c99d283a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:49:91:3f:72:3b:4f:ff:cb:a9:01:88:e5:82:b5:62:ff:
         91:42:fb:63:3a:c3:cb:fd:96:4b:b8:37:e6:06:a5:93:df:09:
         9f:6a:00:e6:04:e1:1e:45:68:bb:0d:0c:8b:c0:52:73:76:2d:
         de:92:50:0a:f0:3c:ca:46:5e:ce:70:24:63:4a:1a:75:b6:d4:
         cf:eb:b9:14:b4:f0:50:fb:1f:f3:c5:6b:5e:57:47:1d:35:ca:
         d8:b6:32:d5:86:4a:d2:c9:b0:dd:91:f5:1b:d8:37:20:dc:89:
         8f:e9:aa:1a:01:d4:30:9e:06:d1:35:cf:0f:00:a5:e0:4f:12:
         42:9e:69:0f:a3:d0:3a:d8:c2:5f:57:f6:b9:7f:2e:67:05:f7:
         16:05:c9:31:23:8d:0f:c6:35:7c:40:ad:2a:8f:ad:09:02:8c:
         c3:ea:84:88:4f:db:a5:a2:63:f1:12:9f:38:cb:de:c5:13:62:
         2a:0d:39:21:3d:dc:1f:5d:87:84:4b:a1:34:3a:45:3e:80:3b:
         c3:76:cc:f5:f9:ab:b8:41:12:77:53:56:76:08:ee:06:f8:66:
         ea:cf:27:5f:44:df:57:ac:99:61:e7:6a:d3:5d:57:06:14:0a:
         99:50:41:d0:ff:e1:11:15:ee:2a:4b:94:46:b8:73:e0:f1:b4:
         60:47:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:43:22 2026 by rpki-client