Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/198e6dd7-8640-3d0c-b0ff-343aa2f32fb6.roa
File:                     198e6dd7-8640-3d0c-b0ff-343aa2f32fb6.roa (raw, json)
Hash identifier:          gmzPiW1BKBeG2B/a7oOAejralCqU7nS9O96ZEaEsunY=
Subject key identifier:   7C:FA:0C:67:F8:43:1E:58:70:46:AC:4B:61:4B:2F:85:EC:23:40:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF73DEE4D5FA4221EA3E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/198e6dd7-8640-3d0c-b0ff-343aa2f32fb6.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.213.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:73:de:e4:d5:fa:42:21:ea:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=f99f4d00-03f0-4442-b080-f1831dd8abba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f7:28:e8:aa:dc:9f:27:47:3a:76:36:86:5f:
                    3c:e5:cd:d4:61:5b:98:d8:c4:e4:cd:fa:b7:4b:54:
                    c0:35:c8:e1:18:57:68:bb:72:db:f1:f6:cf:a2:62:
                    86:e4:04:e4:b8:06:42:25:9c:6d:96:f4:8b:c7:f4:
                    fd:e0:9b:4c:8e:3f:b8:c1:8f:df:ec:be:ad:1a:27:
                    d4:c4:88:6d:66:2d:01:18:9e:b0:51:3a:07:2f:aa:
                    ab:29:a5:ae:07:49:40:6d:d7:77:d0:5d:aa:26:ff:
                    93:5b:a0:b6:bc:db:6b:24:86:af:fe:d2:03:50:5c:
                    e1:39:48:6f:74:e6:ac:ee:de:db:c2:d5:99:53:37:
                    dd:b4:8a:e4:16:00:c3:d9:31:50:23:6b:24:2f:a5:
                    5c:8f:97:d0:d8:11:a2:2a:3d:69:c2:cd:0b:77:32:
                    51:62:ad:26:41:aa:11:4e:3b:db:e5:1b:31:87:7a:
                    2c:13:b6:f2:e5:f7:e4:2c:96:dc:3c:3a:f8:58:35:
                    99:66:68:ad:64:b8:c0:f4:8f:74:09:42:25:c1:78:
                    5e:45:93:96:33:37:72:e5:3a:af:8b:7c:9f:98:bb:
                    d0:2e:53:0d:7c:fd:a4:8f:70:d7:0d:74:f8:10:64:
                    57:49:98:5b:31:ae:68:b7:b2:5c:ad:e6:aa:2f:a3:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:0C:67:F8:43:1E:58:70:46:AC:4B:61:4B:2F:85:EC:23:40:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/198e6dd7-8640-3d0c-b0ff-343aa2f32fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4c:b7:d1:41:56:68:ef:a0:62:9c:03:c9:93:96:3e:55:e4:
         50:06:92:fa:0f:2c:2d:00:c4:42:bb:46:b0:0c:ce:65:52:45:
         2d:5f:1c:9c:27:f3:44:3d:35:fc:95:31:80:af:13:c7:eb:c4:
         e5:81:1c:63:62:15:b5:d0:0c:fe:62:f8:39:45:c4:ef:47:6b:
         87:16:15:3c:b9:08:c9:57:e9:d8:ae:c7:fe:72:af:7f:c8:95:
         36:9b:67:fb:a8:06:ed:00:c1:3a:20:2a:51:bd:03:eb:cc:ce:
         fc:65:8f:90:b4:09:f7:2a:d5:9b:30:12:b9:16:ab:4e:c6:e4:
         5a:4a:7e:59:8f:77:5c:f9:bc:93:eb:73:67:69:b2:f3:9c:51:
         d8:1c:43:f2:11:11:67:88:8f:ea:d9:c9:4d:19:e5:02:9e:eb:
         76:a9:d2:0a:5c:fc:de:75:ec:99:04:ee:65:5b:6b:ac:78:4c:
         93:9e:6c:cd:63:26:e9:d1:fc:51:5c:97:82:85:8c:3d:4e:b5:
         b7:da:37:90:fd:ee:98:c4:4e:40:c9:62:b7:02:91:fd:b0:c5:
         67:be:26:ef:a4:0d:63:e2:90:18:9e:34:a6:ae:9b:d5:aa:4e:
         2c:31:13:33:95:33:00:72:0f:6f:b9:a6:b1:19:6d:61:bb:37:
         f7:1c:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:35 2026 by rpki-client