Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d185162-e069-3a87-bbf3-c3e90688ed40.roa
File:                     0d185162-e069-3a87-bbf3-c3e90688ed40.roa (raw, json)
Hash identifier:          kNhjMbTp43550vHBGyBIb6KP6NlFFzehmmQFNUt7dcc=
Subject key identifier:   3E:2D:10:80:4F:62:68:D5:5D:9E:62:9E:EA:CB:CF:63:DE:19:64:1C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D49E17012BD3EC7EBBED42380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d185162-e069-3a87-bbf3-c3e90688ed40.roa
Signing time:             Wed 25 Mar 2026 19:09:49 +0000
ROA not before:           Wed 25 Mar 2026 19:09:49 +0000
ROA not after:            Tue 23 Jun 2026 19:09:49 +0000
asID:                     6167
IP address blocks:        174.217.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:e1:70:12:bd:3e:c7:eb:be:d4:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 19:09:49 2026 GMT
            Not After : Jun 23 19:09:49 2026 GMT
        Subject: CN=fd46d2c8-3899-47c1-b24d-43628b1c9a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:e5:ac:6b:4d:65:72:3e:28:53:a0:10:29:
                    78:93:f3:dc:ae:7e:ea:f3:cd:8b:f5:f5:60:3c:7d:
                    0f:cf:55:79:33:30:e4:b4:dc:8c:b2:c4:16:74:33:
                    8d:3d:6e:0e:31:b2:45:8f:75:a5:85:93:f3:40:ec:
                    bd:63:4c:3a:89:c1:96:c9:bd:43:2e:20:e8:e4:36:
                    31:77:2b:ce:4f:30:23:0d:8a:28:82:2b:ae:d3:7d:
                    a7:81:6a:15:00:7c:b6:87:15:64:0a:59:f6:e1:36:
                    ef:30:75:fd:2a:ec:75:43:04:ba:9f:f2:dc:80:7f:
                    fd:06:c7:5c:52:0b:72:00:1c:1a:e8:4d:34:75:96:
                    2e:5e:5a:24:7e:63:36:e9:f9:3f:8d:d1:75:63:76:
                    1e:82:64:2c:fb:c4:54:75:6d:5e:1d:2b:69:09:48:
                    25:e0:af:84:c8:1f:dd:c0:83:40:9d:47:d0:72:9e:
                    16:78:5a:05:22:81:a9:e6:79:91:54:83:43:9a:69:
                    b3:e0:bf:55:46:62:ac:03:0c:71:b6:98:b2:5b:2b:
                    ee:7e:f2:87:2c:0a:54:5a:f9:d1:29:cf:a9:9b:45:
                    5f:5e:31:98:4f:18:04:4a:51:98:08:b8:ed:9b:e9:
                    af:27:7f:9e:8e:c4:85:3b:18:4c:73:35:90:d1:42:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2D:10:80:4F:62:68:D5:5D:9E:62:9E:EA:CB:CF:63:DE:19:64:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d185162-e069-3a87-bbf3-c3e90688ed40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.217.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:eb:be:c7:c2:47:b8:fe:34:53:e7:b4:b7:f3:cf:7f:dd:
         83:97:69:f5:81:70:f0:35:b6:70:e8:a9:04:77:e4:25:27:fe:
         bf:c5:a7:b2:9d:77:55:7f:84:eb:97:13:1e:57:fc:65:4f:48:
         b8:f6:e3:4c:dc:29:44:16:cc:f7:d5:e0:fd:8b:d1:12:8b:db:
         28:cc:92:92:a9:38:e7:28:07:c4:05:4c:e8:69:7f:fb:ad:15:
         7b:4f:79:5f:3f:4f:0e:65:af:c3:3d:fa:61:db:a7:69:eb:25:
         1e:f7:f9:6d:ac:8d:80:c6:0d:a3:9a:8c:74:60:5f:9f:69:27:
         28:28:da:d8:fd:5e:fe:04:b3:97:3e:df:fa:f3:08:f8:4a:9b:
         f5:b9:1f:47:ec:69:c8:8a:71:b7:74:9e:e5:0a:0a:db:03:76:
         63:68:fc:56:46:00:f7:f1:83:b5:ad:b6:0b:a6:0b:dd:d0:e3:
         51:77:57:73:4b:90:5e:7a:2d:3c:ba:b5:73:a7:13:46:0d:8e:
         8b:7f:59:0b:f9:a3:54:21:16:a6:e8:7a:16:df:91:af:11:1b:
         e0:7c:f8:6d:ed:12:ec:b4:fa:b5:53:cf:a6:1d:55:0f:3b:9e:
         a1:ee:03:c8:4b:f4:2a:6d:2d:15:1d:4b:a4:6c:8c:30:48:d7:
         02:71:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:38 2026 by rpki-client