Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0dea0d5f-fda9-3c4d-b505-8519ef24755b.roa
File:                     0dea0d5f-fda9-3c4d-b505-8519ef24755b.roa (raw, json)
Hash identifier:          NcZ275h36Z7bnnj+gzPdWcuEkqGjcfyRZqL4tzhrv5Q=
Subject key identifier:   31:EB:24:F5:F3:04:D3:DA:2A:FF:C7:D3:F9:2F:89:63:C4:B1:63:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF72B6E6DFE83B737B6E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0dea0d5f-fda9-3c4d-b505-8519ef24755b.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.213.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:72:b6:e6:df:e8:3b:73:7b:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=9bb1adf0-2a5c-4c90-8c32-23644f97ddf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:1b:4c:ed:49:9f:05:5b:94:2e:6e:ed:d7:
                    82:aa:5d:e8:cd:ee:0f:0a:41:df:a1:c8:e8:0c:76:
                    6d:9a:84:55:bc:1b:06:aa:6b:90:38:ae:4e:7d:8c:
                    2d:ce:a9:a4:d8:95:f7:f6:86:21:39:15:51:17:16:
                    9a:9c:a0:17:78:fb:82:1c:57:af:6c:45:e7:b6:a4:
                    2a:4f:12:de:8b:18:9a:9b:53:2c:2f:a1:8d:c1:43:
                    bf:c9:96:a8:ef:a2:71:b9:8f:a7:39:5f:d4:ba:7b:
                    e3:ec:73:4e:ce:a0:2e:6e:0b:f6:b2:b5:c3:d0:34:
                    fb:15:d5:c6:73:57:a0:d6:8a:ad:ea:62:57:a9:3c:
                    db:fc:ca:ac:53:6e:fe:01:9e:81:be:d3:d2:ef:56:
                    3c:c5:0d:53:92:cd:e1:4d:43:c6:87:01:c1:a2:4f:
                    49:47:4a:78:b4:94:f5:19:df:53:bb:e9:96:79:0b:
                    3f:ff:6e:bd:59:13:73:a5:05:54:75:59:a4:05:e9:
                    bf:42:ea:7c:06:54:3e:2a:92:5c:5a:33:7c:fe:3f:
                    3a:ce:bd:5f:b7:77:a4:d2:dc:09:c9:de:d7:07:eb:
                    73:4f:60:d5:f2:34:b7:83:3f:d2:a9:32:c2:48:76:
                    25:87:e4:52:26:5d:61:a5:cd:1b:36:07:23:fb:31:
                    46:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EB:24:F5:F3:04:D3:DA:2A:FF:C7:D3:F9:2F:89:63:C4:B1:63:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0dea0d5f-fda9-3c4d-b505-8519ef24755b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:40:a4:2f:1f:6d:f5:68:00:5e:8b:12:ee:a5:8b:0f:37:f3:
         d5:83:a3:6a:55:14:d4:3c:50:66:74:6a:7c:12:e0:91:cc:44:
         5c:3c:a3:33:36:fb:a5:fe:95:69:4f:a4:fc:4c:d1:4c:57:14:
         4a:06:90:d4:e2:69:77:6d:c6:a8:bb:5a:59:88:70:9a:32:05:
         92:27:01:df:ec:db:d5:b4:5e:b5:81:d5:35:4a:52:f8:5b:d6:
         6d:ca:65:a1:9e:12:ad:ff:3c:60:03:7c:2e:d1:da:18:12:74:
         90:45:b7:19:57:00:b8:3b:93:e4:c5:06:1e:64:18:58:5f:b4:
         5e:cc:4f:1a:eb:1f:bc:07:50:c6:34:f3:1a:55:00:15:6d:c7:
         6f:18:32:d6:75:e5:c4:84:7f:eb:5b:ae:b5:94:49:a8:e5:35:
         fe:78:ef:10:0b:45:21:ed:65:37:6d:90:b6:66:c3:33:15:7a:
         3a:e3:a5:e2:57:6b:b8:f5:c0:83:78:af:ed:99:07:e7:56:82:
         ab:f5:ce:6f:64:7f:20:77:a6:f8:97:b4:fc:0d:43:cb:d6:a4:
         15:58:95:17:86:79:46:65:1d:5a:89:10:ab:20:dd:fb:ad:f5:
         1e:85:d5:a2:1e:8f:a6:3b:ba:0f:f7:67:fb:7c:db:8c:ab:c2:
         c7:03:46:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr3K25t/oO3N7bkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
OWJiMWFkZjAtMmE1Yy00YzkwLThjMzItMjM2NDRmOTdkZGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSobTO1JnwVblC5u7deCql3oze4PCkHfocjo
DHZtmoRVvBsGqmuQOK5OfYwtzqmk2JX39oYhORVRFxaanKAXePuCHFevbEXntqQq
TxLeixiam1MsL6GNwUO/yZao76JxuY+nOV/Uunvj7HNOzqAubgv2srXD0DT7FdXG
c1eg1oqt6mJXqTzb/MqsU27+AZ6BvtPS71Y8xQ1Tks3hTUPGhwHBok9JR0p4tJT1
Gd9Tu+mWeQs//269WRNzpQVUdVmkBem/Qup8BlQ+KpJcWjN8/j86zr1ft3ek0twJ
yd7XB+tzT2DV8jS3gz/SqTLCSHYlh+RSJl1hpc0bNgcj+zFGgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHrJPXzBNPaKv/H0/kviWPEsWPmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGRlYTBkNWYtZmRhOS0z
YzRkLWI1MDUtODUxOWVmMjQ3NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtUQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZApC8fbfVoAF6LEu6liw8389WDo2pVFNQ8UGZ0anwS4JHMRFw8ozM2
+6X+lWlPpPxM0UxXFEoGkNTiaXdtxqi7WlmIcJoyBZInAd/s29W0XrWB1TVKUvhb
1m3KZaGeEq3/PGADfC7R2hgSdJBFtxlXALg7k+TFBh5kGFhftF7MTxrrH7wHUMY0
8xpVABVtx28YMtZ15cSEf+tbrrWUSajlNf547xALRSHtZTdtkLZmwzMVejrjpeJX
a7j1wIN4r+2ZB+dWgqv1zm9kfyB3pviXtPwNQ8vWpBVYlReGeUZlHVqJEKsg3fut
9R6F1aIej6Y7ug/3Z/t824yrwscDRmk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:18 2026 by rpki-client