Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240a2496-a5ea-37e7-969b-f4401f210ef5.roa
File:                     240a2496-a5ea-37e7-969b-f4401f210ef5.roa (raw, json)
Hash identifier:          9i/mxvnB0hH0oTOhV1uyLe8yn0ITR91kQLsXS1N5Xj4=
Subject key identifier:   30:B8:27:AC:BA:9C:3B:C9:36:18:12:52:32:2C:A8:73:8E:22:D2:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C501470930288A8B820980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240a2496-a5ea-37e7-969b-f4401f210ef5.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.248.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:01:47:09:30:28:8a:8b:82:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=675add8e-6300-43b6-aae2-f5d8a9ace5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:7b:34:4a:dc:8c:2c:aa:94:1d:f8:ea:9f:
                    d1:5c:cf:d9:34:9d:7c:25:fa:30:99:a8:ce:89:b1:
                    10:46:89:20:bf:98:3c:35:87:42:82:3f:f1:54:f3:
                    bc:e8:61:6a:a7:e4:92:85:56:2e:4f:6f:77:87:70:
                    f1:68:61:8c:37:52:38:8b:51:9e:99:33:0a:89:77:
                    48:98:31:54:e4:f9:33:4c:ff:6a:95:d7:dd:46:fe:
                    a1:a4:8a:95:75:8a:01:f3:b1:5a:91:4b:cf:74:56:
                    b6:ca:c6:0c:8b:44:a5:b6:fd:aa:e5:7c:b0:c9:2c:
                    cb:0b:88:b0:8b:a3:7d:8e:51:de:64:70:3f:1d:27:
                    c4:77:c9:96:39:2f:65:6e:ed:04:4f:3a:50:18:ec:
                    39:7e:e6:45:a8:7c:42:7d:c1:d7:7f:11:90:c2:8d:
                    5a:12:f0:2b:43:96:93:9a:d0:ba:65:cb:73:d3:9b:
                    2c:a8:94:44:d1:e7:62:ec:8a:64:aa:33:a3:00:be:
                    de:ba:28:85:ab:c3:e8:f9:a1:ef:56:7f:60:6c:60:
                    94:73:37:b1:fd:70:74:a9:2f:8c:9f:30:18:4c:26:
                    a9:ee:ce:68:c2:33:c1:97:4e:32:2b:18:b4:d5:bb:
                    bc:f7:9c:f0:b3:02:70:42:e8:74:45:92:8e:7e:d5:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B8:27:AC:BA:9C:3B:C9:36:18:12:52:32:2C:A8:73:8E:22:D2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/240a2496-a5ea-37e7-969b-f4401f210ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.248.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:29:8e:6a:45:f2:e8:3d:de:64:c7:48:69:a0:6c:89:88:
         43:11:41:45:6d:21:05:fa:03:cb:f6:bf:47:4f:bc:d7:e5:bf:
         cb:46:00:9a:73:4e:5d:62:11:56:e5:57:b5:bd:08:ee:a2:27:
         a2:b5:4a:c6:56:77:df:ad:7e:5d:3b:a4:15:61:50:24:ea:94:
         03:bd:9f:7a:dc:f9:4c:7d:20:a9:23:73:c9:e8:6c:35:3b:b2:
         98:bf:72:9b:94:9c:7a:ca:3f:fc:b6:8e:1a:57:95:ae:96:37:
         73:23:0c:a5:86:b0:7c:91:9a:99:a7:f0:eb:4f:cb:45:49:17:
         7f:0e:39:00:fb:06:a6:c8:76:e6:85:55:f9:06:83:59:8d:4c:
         99:77:54:01:40:f3:77:6f:8e:37:c5:c3:df:43:95:4f:dd:b0:
         c3:29:43:62:23:7b:90:3b:96:b7:27:1a:b6:8d:66:46:6b:bd:
         34:64:00:74:60:de:3f:b7:dc:52:df:3f:8b:45:c2:85:db:a1:
         04:dd:3d:4e:81:09:6d:14:cc:ef:89:3c:4e:d3:b1:5f:4a:f9:
         d9:e1:9a:49:56:a5:b4:e8:b0:59:40:50:77:88:83:bf:c9:4e:
         b3:cc:f3:e5:2b:79:14:5a:8a:0c:0b:4e:59:b6:6e:14:b0:57:
         2a:57:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:15:07 2026 by rpki-client