Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa
File:                     db5ec7d7-1069-37bf-859c-6bbd9193c356.roa (raw, json)
Hash identifier:          pFac35eBcH248X+ijBc949ZEZGGNa7Yg/2OqZAFV8SE=
Subject key identifier:   A2:BE:16:F5:B7:C1:F2:64:58:E3:D4:53:25:26:36:5C:67:D7:0E:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E016B46650DE43AE791114C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        174.212.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:46:65:0d:e4:3a:e7:91:11:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=71beae48-f611-494b-a2c7-33b1bc4a3465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:f1:5c:1c:9b:68:be:1f:0b:09:bd:cb:ab:
                    1e:79:9f:c8:2b:59:5d:cb:96:72:bf:0d:4a:61:33:
                    47:37:85:61:0d:6c:42:a6:c9:77:d1:36:5d:31:07:
                    a6:f1:23:f1:de:08:96:0b:38:85:89:0a:74:6a:e3:
                    28:4c:d6:4f:12:a7:6d:c4:b0:ac:6c:c1:86:26:fc:
                    48:f4:2c:c3:3b:56:f4:87:de:88:d6:6c:a0:8d:c1:
                    95:c5:af:9f:33:fa:45:3a:4b:19:de:3f:e5:6d:55:
                    bf:47:69:31:70:72:92:6a:29:2e:16:eb:83:74:bb:
                    0e:c6:15:0d:79:1e:8f:f5:d5:af:70:d4:b1:86:a7:
                    1f:53:89:96:e8:bd:25:24:7f:7f:21:d6:06:36:67:
                    13:f9:2b:81:24:77:8b:7c:fb:90:9a:4d:3d:51:4c:
                    59:97:7e:b3:86:a0:a4:f1:4c:34:28:03:b9:56:f1:
                    3b:3b:d1:43:4f:89:28:a4:5f:54:93:60:9f:b8:fa:
                    84:74:85:bc:4f:66:ee:2d:29:59:2a:46:82:3e:f2:
                    46:6e:0f:ae:33:3b:39:c8:4b:93:58:3d:f1:86:0f:
                    89:e5:25:49:24:63:b0:ee:40:90:fc:1e:19:c9:0a:
                    32:fe:a5:bd:28:c3:bc:81:b2:40:ba:8f:cf:1f:41:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BE:16:F5:B7:C1:F2:64:58:E3:D4:53:25:26:36:5C:67:D7:0E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5ec7d7-1069-37bf-859c-6bbd9193c356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a5:85:c3:d8:45:ac:77:97:a0:8b:37:d7:ef:be:ff:f7:e9:
         8e:b0:78:47:29:b7:79:76:23:dc:f1:ed:5f:e0:35:f1:5a:ac:
         1e:d6:c5:a3:65:50:f2:69:38:8b:c9:6f:13:2f:df:18:4c:bc:
         fa:d6:b2:42:ba:e0:67:0c:7b:c4:b0:af:0b:7b:65:4f:85:83:
         ee:f4:05:4f:fc:69:44:9a:69:d8:d0:12:2e:e5:45:11:9f:51:
         f0:80:11:bc:14:26:07:d4:37:47:54:2d:2b:01:b0:d1:6b:a9:
         79:4a:fc:0a:e3:8e:eb:ce:d0:14:73:79:ff:55:52:37:f0:2c:
         49:68:98:a9:03:8d:5d:a0:0c:29:3d:f0:da:ae:47:54:9c:42:
         ef:97:5e:5a:e5:5b:32:ce:ce:f6:bb:e4:4a:46:a5:f2:95:0a:
         11:cc:47:07:20:b3:22:c0:a6:03:b2:73:db:98:8e:10:ab:d8:
         52:03:b0:2f:b3:bc:87:37:16:55:87:8f:b6:4b:7d:3a:90:8e:
         fd:79:3d:1d:76:5a:3b:b6:25:2c:1d:88:ed:1b:d3:e4:88:79:
         ee:cb:3e:bd:cd:54:a8:d9:28:f4:9d:e1:74:d7:24:d5:4c:c3:
         39:59:6c:d9:2a:57:d9:2b:63:21:87:74:7c:48:9a:f4:b2:5b:
         7c:7b:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:33:06 2026 by rpki-client