Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa
File:                     c3f9bec5-8977-39ee-a8ad-199602882af1.roa (raw, json)
Hash identifier:          Coi/eOQCTSFwfs3k4NsoRKi9GEz/kehLi2dU6AY8beY=
Subject key identifier:   70:7A:4F:AC:D4:61:1A:34:E2:54:23:09:F4:FB:AE:F7:22:FC:89:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E016B3CB4EDE96CCDD61ACD70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        174.216.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:3c:b4:ed:e9:6c:cd:d6:1a:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=227c261c-a436-40c1-b779-6472648e5315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:8a:d5:2a:10:08:7d:74:cf:2c:7b:11:40:
                    c7:5c:c4:47:3d:ff:6f:19:e5:9e:3e:3d:4b:32:fc:
                    ff:e9:1e:21:ed:2b:5e:6d:f2:45:be:ad:fc:b0:90:
                    65:00:6b:38:7b:77:88:5d:d5:f3:a0:d5:cc:1a:04:
                    03:47:ed:18:21:c3:aa:57:f6:be:7f:c8:87:aa:fc:
                    f3:9d:a3:3c:2b:b7:d7:27:28:81:81:fc:53:2f:2d:
                    05:b3:c9:7a:39:f1:26:17:60:cd:8b:f6:e9:8e:eb:
                    d9:e3:4c:31:77:1d:e4:af:06:4c:fd:0b:b0:50:36:
                    01:3a:22:35:e0:65:da:92:c9:0f:82:9a:de:28:68:
                    6c:82:af:a2:ae:a9:8a:61:61:f6:ba:b0:25:64:e9:
                    58:e4:b1:b2:2a:b4:26:4b:24:21:5d:7c:f2:55:fb:
                    26:71:2f:e3:5f:c7:78:56:3e:31:b2:4f:e2:29:67:
                    85:e6:f9:a6:41:26:8e:bd:ad:c0:d7:71:05:ac:ae:
                    ac:f8:a7:12:10:f4:58:6d:16:9b:61:16:95:b8:b7:
                    d5:50:df:fe:45:0d:2b:73:6e:14:6c:c8:1c:f0:11:
                    88:81:52:d1:13:7a:d5:8a:66:e0:fa:68:4d:44:72:
                    95:fd:09:8d:3a:03:0f:44:f6:80:24:9e:a2:cd:bd:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7A:4F:AC:D4:61:1A:34:E2:54:23:09:F4:FB:AE:F7:22:FC:89:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.216.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:cc:2e:56:20:e2:e3:1e:bb:8b:a4:df:fb:0f:50:72:be:
         93:ce:3d:33:df:8e:40:a1:81:c1:a8:38:5f:38:7b:15:74:ab:
         54:a9:d0:25:7f:ae:7f:43:e3:9d:f5:94:87:98:fe:18:e6:e1:
         f2:47:bc:81:7d:80:14:70:f3:2b:cf:de:82:86:45:08:bf:bf:
         0e:31:7a:7a:68:09:bc:aa:72:f7:e9:52:a3:c6:2b:4d:27:9f:
         d3:a7:b9:e6:b4:d9:1b:86:39:1c:cf:ea:ab:c4:66:e4:52:34:
         77:0f:c3:4f:40:e0:3f:45:28:32:b8:f5:96:04:13:5a:9c:fc:
         2d:7a:89:58:5c:d1:2c:17:18:b4:55:c4:ca:a0:a5:e0:2a:19:
         9b:41:a5:b2:1e:f1:93:03:7f:68:b1:24:75:3b:39:36:23:11:
         49:d1:de:fa:ec:b3:50:a6:86:d7:d0:b6:f5:ae:ca:0f:06:dc:
         28:4d:67:4d:f4:41:38:4e:75:ae:ac:39:2c:ec:2f:14:11:4f:
         b0:69:5e:03:2b:34:f2:c5:8c:9a:72:b6:41:72:5d:39:e7:da:
         13:43:0e:13:09:19:2c:25:1a:f5:d2:4b:d6:a2:c9:bf:34:06:
         02:51:78:14:2e:6e:b1:4f:9e:12:09:3e:30:42:f1:d1:29:f9:
         36:cb:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:26 2026 by rpki-client