Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7758cc6-bdb0-37dc-b5eb-c8e0dde9b8dd.roa
File:                     e7758cc6-bdb0-37dc-b5eb-c8e0dde9b8dd.roa (raw, json)
Hash identifier:          kXNuB2BtXmm4ZkvkcO7K58cwGsVPDZBPT0D8aU+k7No=
Subject key identifier:   55:93:A8:AE:1A:6C:C7:72:F9:7B:84:76:23:55:8F:82:20:E5:EF:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2809AC0D003DBEBC9EA0A440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7758cc6-bdb0-37dc-b5eb-c8e0dde9b8dd.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     22394
IP address blocks:        174.192.0.0/10 maxlen: 10
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:ac:0d:00:3d:be:bc:9e:a0:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=db070adb-8cc0-4810-b4af-f9b4ff76bdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:2c:d2:fe:fd:62:f3:63:be:ec:ea:ae:59:
                    23:36:03:0f:72:fd:3f:d4:7e:65:e0:1c:cc:6b:f8:
                    49:c2:5e:e8:8f:ef:e3:b0:84:95:57:2f:b1:04:db:
                    a4:96:bc:47:07:0e:ba:39:4f:c5:03:48:54:ba:68:
                    cc:58:cd:c1:63:d4:8e:90:e7:d8:07:dd:cd:d1:57:
                    d0:b0:58:64:83:e2:98:9d:7a:2f:d7:f6:d0:73:47:
                    a0:8f:46:a2:02:2e:b4:31:0b:a8:6f:87:7e:99:e1:
                    3e:90:f3:62:f9:13:62:77:ec:38:67:5b:6d:af:f2:
                    d0:38:d5:0b:12:87:7b:2c:cc:ef:16:cb:02:03:09:
                    73:16:bd:e9:d9:80:8d:c9:ee:a1:98:c8:1e:54:7d:
                    0a:b7:47:8b:5f:56:de:d5:90:fd:eb:5f:52:b6:68:
                    90:af:1a:35:65:a8:7d:8f:b2:61:64:85:e4:ae:d2:
                    24:a3:9b:11:0e:71:90:ee:24:f8:2b:9c:52:c5:aa:
                    d3:b2:e4:6b:f0:dc:37:41:7c:c8:fc:a9:31:78:b4:
                    09:ba:36:60:cc:a4:df:56:43:f5:56:ab:74:96:ba:
                    c6:9f:43:74:fe:79:56:fe:1e:88:dc:45:5b:d6:cd:
                    1e:39:59:f3:a5:c1:44:d0:2b:ac:8e:b9:70:87:27:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:93:A8:AE:1A:6C:C7:72:F9:7B:84:76:23:55:8F:82:20:E5:EF:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7758cc6-bdb0-37dc-b5eb-c8e0dde9b8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.192.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:76:5e:34:31:84:9c:42:df:f4:4d:91:99:91:b7:73:5d:7a:
         ac:7c:aa:0c:8e:70:33:4d:90:7a:1f:7f:3f:63:2f:14:3b:ea:
         68:c3:fd:73:17:cf:5a:5a:28:45:89:7f:e2:4f:cd:50:ae:d4:
         fe:a6:ff:f1:64:de:d6:5e:55:71:6c:19:80:0b:7f:9a:3a:fb:
         26:2f:57:d0:52:51:81:03:81:27:61:2d:34:43:81:66:77:c5:
         a4:eb:21:af:30:fb:40:ec:79:ec:97:03:b5:cc:6c:18:b4:a8:
         da:e0:a3:25:31:f9:9f:6a:61:5f:f1:39:be:e6:3e:77:cd:9a:
         b0:fb:e6:03:34:84:3f:b2:f3:c6:75:12:bb:f5:f9:9f:e0:45:
         a7:40:97:cf:dc:9f:00:d7:1a:8c:6d:08:df:2e:2b:47:ee:10:
         83:7b:6a:f0:a2:d2:d1:f6:5d:f4:7b:9d:7a:24:ae:6c:c1:b4:
         8e:0b:81:dd:21:88:d3:d8:56:44:d7:9d:e2:3d:83:90:04:07:
         f9:6b:b7:74:ce:f0:82:74:61:67:26:f4:fa:45:28:74:32:f6:
         8e:bd:ac:73:04:b6:de:8c:44:8b:9f:98:8e:55:0d:60:92:e5:
         51:58:c4:84:b1:ff:25:88:c9:93:24:9d:35:91:4c:60:6b:24:
         07:4e:64:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:33 2026 by rpki-client