Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9a4393e-3212-3a84-bbed-bae0087d2925.roa
File:                     e9a4393e-3212-3a84-bbed-bae0087d2925.roa (raw, json)
Hash identifier:          fCjYGmLFXG/T3f5tr4xxcmRYBLOFOoUKm/VQLXCCHuo=
Subject key identifier:   C8:16:DC:8C:43:0D:58:91:03:2C:A0:1B:0A:EA:53:13:D5:EE:26:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E1A1450A22771E174F084A740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9a4393e-3212-3a84-bbed-bae0087d2925.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        174.255.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:50:a2:27:71:e1:74:f0:84:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=def5c7b6-851f-43ac-9846-2a21bd6d814e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:fe:97:40:67:75:31:59:31:c6:cb:5b:af:
                    27:fd:63:3f:ff:03:6e:a7:c1:ab:a0:ac:28:52:7f:
                    f3:7d:81:f3:98:80:7d:fe:a3:fd:ae:05:2d:20:50:
                    0e:81:22:43:df:a0:47:6f:8f:b0:a3:4b:1e:6b:9a:
                    fe:9b:de:6b:4b:b9:56:1a:e9:50:1d:e4:29:76:79:
                    49:c9:a4:73:79:49:43:d1:83:5d:a9:7b:33:89:4d:
                    a5:9a:cd:57:b5:8d:7d:4c:01:4a:a8:f0:9a:d6:ba:
                    83:b0:e4:25:e7:a6:0b:85:2c:ad:25:05:f9:2a:64:
                    bc:a1:b4:1c:a6:ec:6c:a7:33:29:d9:1a:cc:10:96:
                    97:3f:c8:17:60:d8:21:c0:92:b1:f6:0c:44:f1:11:
                    d3:f3:f6:70:e8:3e:ef:2e:81:a9:63:7e:b7:42:34:
                    0f:0a:e1:44:9e:80:b6:f8:df:9f:7e:5b:6b:94:d5:
                    2c:83:73:81:3a:7e:38:67:c0:c9:1c:14:0a:23:8b:
                    e2:a5:4f:0e:a2:5c:27:57:4c:e9:8d:ec:b4:08:6e:
                    df:5b:ab:b9:db:e1:e7:c1:c4:51:9b:07:55:33:5c:
                    7e:78:0e:d6:3c:1c:7e:85:41:ee:2b:ae:af:5d:2e:
                    11:bb:92:4d:e1:13:87:2f:63:61:97:63:07:81:87:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:DC:8C:43:0D:58:91:03:2C:A0:1B:0A:EA:53:13:D5:EE:26:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9a4393e-3212-3a84-bbed-bae0087d2925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:ea:f6:65:58:58:32:bb:92:c3:15:63:2a:9e:ab:55:6a:
         2b:09:2c:fe:96:aa:46:49:f8:3a:b0:77:7d:63:0d:c5:8d:72:
         b4:eb:33:a2:9a:2b:86:c3:1e:92:1a:d4:43:e7:59:11:67:78:
         64:36:b0:f2:4f:2f:c6:b9:bf:e2:9b:00:e6:2b:22:e4:20:3d:
         60:60:7e:d0:c6:a2:94:e9:c0:bd:64:77:45:68:c5:ee:98:94:
         90:e0:1c:dc:97:a3:38:41:cd:99:13:2f:16:50:81:23:18:50:
         e0:31:23:62:02:d2:2f:f8:1a:b7:1b:88:25:18:06:7c:e9:ee:
         c9:eb:b0:9c:84:99:51:13:04:b5:09:da:da:af:ea:f2:cd:f0:
         72:09:43:dd:50:23:17:10:be:eb:8c:39:77:22:3c:ac:71:95:
         b1:f2:46:d1:ec:aa:73:c4:cb:bd:d3:84:04:d4:0e:1f:1e:49:
         fb:d7:94:5c:1e:e5:2a:3f:e1:cc:d7:5e:7b:99:0c:50:14:dd:
         0c:3d:b3:8d:ff:5d:2f:03:5d:db:70:73:45:2b:a5:a2:c5:bf:
         52:46:9f:c4:22:2c:32:d6:0f:a9:fb:b1:b3:1e:18:cb:2c:b7:
         b7:63:f6:3d:e5:a2:7c:03:ca:66:51:f8:43:10:5d:c0:3c:24:
         62:6e:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:10:10 2026 by rpki-client