Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
File:                     04b328e8-739b-3c12-82aa-7a968703666c.roa (raw, json)
Hash identifier:          vLQNzNIp/kqQgn4maYSoua8rMtOZkFxma4ycaCmfRnI=
Subject key identifier:   12:C8:83:DD:44:CE:80:9A:1A:E4:0A:F8:02:59:96:20:A6:4C:04:AC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4FE1ECA283836FB05A580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.244.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:fe:1e:ca:28:38:36:fb:05:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=d4f2b534-ad38-4581-8411-526a2ea7e18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:4e:7c:61:2c:d0:4d:5e:55:e2:2f:cf:be:
                    3c:5c:62:f3:56:5d:37:87:03:57:c9:a1:f7:17:9d:
                    ac:a4:d6:3d:b6:55:bf:d0:35:3b:3d:65:9e:6f:83:
                    ac:51:f4:bd:ad:98:c1:a0:08:69:3a:34:98:8e:87:
                    f7:36:a6:51:59:45:f4:34:4e:cc:90:72:08:e0:e9:
                    93:5f:b0:ab:d7:2a:6d:be:69:97:6e:75:dc:39:ec:
                    46:92:e1:4b:5b:d3:67:88:ed:cb:7a:75:c5:02:63:
                    b7:70:32:78:ba:78:a1:fe:4c:9f:e9:4f:4a:6e:4c:
                    46:91:31:7e:97:15:d3:f8:61:74:11:43:8b:82:b0:
                    45:a6:0b:60:a1:ef:86:a4:79:a0:80:05:6b:84:20:
                    ff:da:05:06:3d:6f:01:6c:9b:00:87:0b:b6:30:b0:
                    14:2c:25:43:bf:96:54:e5:35:08:a0:10:51:c3:d5:
                    54:6d:43:ed:e7:7f:45:66:23:37:67:0b:3e:86:ac:
                    80:63:76:75:20:7e:25:81:1f:8f:41:42:1e:35:a9:
                    7a:f5:40:49:1a:93:9d:33:c8:66:eb:7d:d0:5e:e2:
                    d9:17:07:32:c0:3b:57:2f:40:10:87:6c:2d:42:56:
                    93:d6:48:0b:3e:d0:af:ff:c1:c2:61:8f:d2:6a:89:
                    52:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C8:83:DD:44:CE:80:9A:1A:E4:0A:F8:02:59:96:20:A6:4C:04:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/04b328e8-739b-3c12-82aa-7a968703666c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.244.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:48:b2:92:e9:c0:f5:02:b0:57:da:5b:90:48:93:6b:a5:37:
         e3:9d:2a:d3:38:b3:84:51:f5:cb:fd:03:e7:92:0d:de:64:83:
         ca:03:79:08:43:ba:28:a7:09:de:2a:b2:76:e0:b2:b1:6e:eb:
         0d:6a:ca:3d:a3:4b:a4:9a:02:1f:f7:d3:87:fb:b6:08:7c:fe:
         2e:45:4d:08:60:59:0b:0d:1a:76:f4:85:02:42:4d:cd:a4:33:
         f6:f3:2e:0c:ab:11:f4:c1:2a:42:08:ff:4e:da:55:e1:71:6c:
         c3:f0:72:66:e8:f2:1b:07:c6:69:56:f5:90:25:76:04:e1:11:
         18:2e:eb:4b:2d:a0:fa:91:e1:0b:91:0a:9f:9c:6c:56:47:cd:
         ff:aa:d0:27:b9:37:c5:5c:e0:20:40:20:4b:25:b0:13:6b:b1:
         2b:31:cd:23:33:3b:1a:14:04:cb:9b:93:63:07:cc:0b:ea:a0:
         82:c3:7f:3f:9d:13:a2:ba:7e:3b:e5:70:f2:a8:60:45:2c:90:
         7c:00:93:11:25:42:ef:7a:c0:87:33:0b:e2:cd:73:8d:e6:45:
         23:22:2d:d8:61:05:36:c9:b5:14:21:6a:a7:80:cd:83:e9:59:
         d2:d4:7d:e1:83:3c:c6:f3:c7:c4:8a:2f:a1:6d:f9:7b:c0:87:
         01:d6:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:29 2026 by rpki-client