Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb3d90bd-e3c2-35a5-861c-e57ece99c886.roa
File:                     bb3d90bd-e3c2-35a5-861c-e57ece99c886.roa (raw, json)
Hash identifier:          Z50+DRKGkbaCE+uTTniOh/f4xhJcmA6V9dIkpRGXlw4=
Subject key identifier:   5E:DC:CE:B0:D6:32:48:09:8C:39:4F:43:83:58:C7:82:51:37:98:D4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F374D5328DFBF8E73A6E4F900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb3d90bd-e3c2-35a5-861c-e57ece99c886.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.252.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:53:28:df:bf:8e:73:a6:e4:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=2d980103-8e91-42f1-be76-8c029a79c7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:3b:bd:48:74:e8:e1:f8:e5:27:b3:4b:0b:
                    b6:df:07:32:4c:70:10:9f:00:51:2b:08:30:85:ed:
                    ef:57:6b:c0:7b:7c:20:e7:37:60:85:40:82:86:6b:
                    58:68:61:80:4d:88:f8:03:b6:6e:d9:dd:22:18:df:
                    52:47:20:bd:b2:01:bf:70:a2:b1:d7:c6:41:c8:7c:
                    1c:c2:ef:d6:4f:ff:60:64:86:3a:cf:af:1b:8e:59:
                    0c:f9:1f:a3:1a:aa:17:33:d0:a6:89:2c:c1:13:f7:
                    b7:05:ea:4a:0c:eb:27:27:68:44:18:ae:ac:df:93:
                    6c:71:b6:93:73:ce:35:bc:77:11:b3:79:41:96:5f:
                    94:44:88:2b:95:ea:c8:e9:f8:a0:24:84:dd:bf:8c:
                    ac:c3:3a:fc:7e:d2:fb:61:ef:8e:ec:1a:1a:45:6b:
                    99:71:98:74:1e:e5:1a:e5:99:6f:dc:aa:be:4f:ab:
                    90:01:12:30:b9:29:9b:c3:3f:91:ae:b0:16:d1:89:
                    13:ab:b1:95:f5:a2:cd:0c:c9:0f:07:ed:3d:55:c7:
                    75:3c:bb:a7:7d:b5:06:20:31:b5:cf:58:87:3e:3e:
                    2c:e4:83:b4:f2:1e:97:32:4b:0c:06:77:c0:44:f9:
                    eb:7b:53:a1:5f:81:a0:6d:ba:b2:73:b5:a4:a0:36:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DC:CE:B0:D6:32:48:09:8C:39:4F:43:83:58:C7:82:51:37:98:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb3d90bd-e3c2-35a5-861c-e57ece99c886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.252.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3d:ef:cd:87:78:13:a2:c8:89:b4:c9:46:91:32:59:82:cd:
         35:d4:76:00:a1:c7:6e:6d:7a:41:19:3c:01:1e:0a:93:6b:2e:
         70:14:c7:09:4e:7f:c8:f9:58:90:27:d2:5e:ab:0a:10:71:f1:
         31:96:a9:0a:d5:32:b8:e8:36:99:ff:c4:f2:5e:8b:1e:1c:07:
         13:85:f8:25:6b:2a:03:46:c9:eb:4a:aa:67:99:7e:75:c0:4e:
         eb:1c:08:94:65:5d:eb:68:18:68:36:a3:6d:33:14:b5:88:ba:
         6e:b7:d4:f0:d6:b2:23:f0:1b:29:25:09:eb:59:2c:16:ad:be:
         1e:7a:47:b2:b3:8e:c5:0f:56:be:ff:e1:fd:3c:e3:fa:e9:c6:
         99:2f:57:9d:ef:71:6a:0a:ec:04:31:df:ae:13:27:38:5f:3b:
         b2:48:fb:a8:6d:39:96:70:8b:c0:84:df:a1:be:e4:da:a9:1c:
         e4:82:75:88:c7:3c:8b:9d:52:8c:8e:3d:b3:2d:8a:b9:ef:72:
         be:7d:9a:d9:78:b1:88:ba:88:54:00:f7:c7:2e:bd:6b:6e:e5:
         63:5f:d3:57:f8:3a:67:21:83:eb:da:22:50:8e:1c:d6:cb:57:
         27:53:53:d6:a3:ae:89:80:f8:f7:39:b6:ec:b2:98:98:30:5b:
         67:f6:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:05:42 2026 by rpki-client