Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8a6cd5-3153-3b39-ad3f-30ff813ede6c.roa
File:                     cc8a6cd5-3153-3b39-ad3f-30ff813ede6c.roa (raw, json)
Hash identifier:          mJtFJdnDMWQfOAVNr7QrKjwonS8+JukmaajlyFcBk2k=
Subject key identifier:   FF:64:32:D2:0E:85:FE:50:4E:EC:8C:4B:70:6D:0F:EE:44:98:20:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498609703513E0F098706580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8a6cd5-3153-3b39-ad3f-30ff813ede6c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        174.195.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:09:70:35:13:e0:f0:98:70:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bbd04392-5379-43e6-ad6c-cb51a155aac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c2:91:c9:18:14:15:85:12:f7:5e:0f:8c:cb:
                    9d:68:77:02:7c:6c:35:85:a8:89:29:74:aa:8a:e9:
                    b7:26:5d:56:f3:d7:30:69:91:25:22:ad:fe:8f:fb:
                    8b:d4:f0:5f:5f:76:6b:a2:12:13:69:00:96:64:91:
                    2f:9c:1c:78:99:27:46:bd:fc:40:28:b6:45:23:47:
                    f4:e2:11:41:1a:df:cb:60:98:6a:48:d0:ed:05:ab:
                    6b:cd:3a:48:af:9c:0d:5c:44:89:21:71:d9:9b:a7:
                    07:d2:c5:23:8b:4a:43:8b:33:f9:33:82:10:d5:51:
                    6a:fa:84:e4:2f:0a:3a:1a:bd:6e:68:71:b9:0d:0b:
                    20:05:c4:98:1c:98:fd:d2:f8:73:b8:74:a9:ab:e4:
                    f1:78:aa:c0:18:60:71:75:67:85:59:bd:7e:80:f4:
                    1e:8b:d8:d5:db:dc:6b:85:95:62:14:3c:d2:70:80:
                    ca:ad:d7:0a:83:c1:ce:3e:90:2e:f0:b3:cc:3f:7b:
                    97:dc:eb:9c:1d:7a:ea:8d:9a:ed:8b:ae:fb:58:e8:
                    41:d6:2d:ef:6c:e4:08:91:ee:77:e9:9c:2e:33:fe:
                    5a:a5:21:71:aa:68:23:01:e1:9d:95:63:3a:a0:9a:
                    05:d6:3b:0e:f3:c1:20:25:35:6c:b7:17:4d:aa:35:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:32:D2:0E:85:FE:50:4E:EC:8C:4B:70:6D:0F:EE:44:98:20:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8a6cd5-3153-3b39-ad3f-30ff813ede6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.195.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:26:38:0e:7d:bb:6b:b9:52:44:be:8b:da:89:9f:83:7c:b2:
         01:d1:1c:d5:46:f9:1f:53:4c:ad:68:89:fb:1b:cf:95:fb:db:
         59:54:d8:5f:8b:58:71:1b:e9:1d:e7:dc:21:23:b9:01:6c:63:
         45:a8:92:7e:a0:50:2b:85:96:0f:16:c8:e2:37:1e:42:83:ae:
         fb:0c:5a:84:9e:96:3b:5f:00:7d:97:0e:56:ac:b0:45:43:2c:
         89:76:0d:10:a4:b5:4a:bb:82:1a:4d:dc:1e:d4:91:9a:c2:b2:
         55:26:34:aa:cb:e7:b6:82:c0:5a:3d:0c:8c:8f:ce:93:72:85:
         9a:ae:39:7e:d3:c3:d9:1c:4d:a5:ad:73:a1:e9:be:40:23:30:
         97:bc:9e:55:92:82:0e:0c:a9:b6:18:41:cd:38:85:e5:f9:f3:
         54:ff:96:da:a6:7e:6b:ea:a4:6e:18:0f:65:b3:df:bb:a7:28:
         6b:94:10:af:71:d7:38:fb:7a:4a:39:8c:c8:f0:15:7f:b0:b5:
         75:76:83:bc:7c:71:f6:f7:ef:48:e3:6e:b5:eb:40:9b:5e:54:
         a5:aa:bd:e2:1b:f5:97:a1:52:1f:20:9e:6e:08:03:14:25:8b:
         0e:e9:32:52:86:d6:c4:4b:90:22:ee:94:e2:fc:bf:dc:5f:04:
         0e:42:5c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:30:49 2026 by rpki-client