Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29cfdca9-9433-31b6-858d-43e042075c51.roa
File:                     29cfdca9-9433-31b6-858d-43e042075c51.roa (raw, json)
Hash identifier:          zK/fj27xKG0pKvl2tYcKFMPEBum7SHVBU1wcSMgZml4=
Subject key identifier:   D5:11:69:58:D2:0B:0A:75:D7:B3:11:3E:BB:2C:C7:4C:39:49:97:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4EFE7A3B62EB271EC7640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29cfdca9-9433-31b6-858d-43e042075c51.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.226.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:ef:e7:a3:b6:2e:b2:71:ec:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=a71cfb1f-56b6-410f-b6c6-6bd0842cfdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:9e:ad:3a:b0:8a:a0:8d:e2:1a:f4:7d:76:
                    bd:0f:dc:ca:b8:a5:df:31:17:5a:e3:16:73:62:0e:
                    d0:5b:8a:d2:ea:59:b9:95:72:3e:74:ca:b2:3f:81:
                    39:5d:20:45:3a:42:b1:c7:e9:4e:e0:48:e4:69:45:
                    21:6d:c3:60:74:b3:ce:24:aa:af:67:b9:41:53:84:
                    5f:22:a5:87:74:fc:0e:29:08:4f:13:b9:ce:7d:53:
                    a8:90:5c:04:70:6b:08:f1:6a:c8:13:95:84:a9:db:
                    7d:af:f7:77:bc:00:4f:d3:16:a2:bc:e3:8b:18:ac:
                    d6:14:2f:77:9d:84:95:7c:1e:a9:54:31:c3:e5:b0:
                    97:cb:e9:ae:35:33:df:d0:00:2b:fc:81:4f:04:cf:
                    3b:3f:12:fb:af:55:d6:6c:13:41:83:28:ff:0c:db:
                    3e:60:f1:48:65:bc:84:66:5c:36:c3:ab:c2:9e:27:
                    b7:f3:15:79:d2:fe:9a:a0:14:9d:af:f4:fc:14:0c:
                    95:fe:5f:92:72:6b:fb:41:45:d2:05:42:bc:24:d2:
                    86:52:e7:aa:c3:c6:01:9e:51:f0:61:5f:2f:42:2c:
                    cf:12:ae:55:0e:7b:e8:2b:a6:da:99:0b:ca:7b:94:
                    b0:5d:df:72:40:ec:32:19:60:1d:88:50:cb:7b:11:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:69:58:D2:0B:0A:75:D7:B3:11:3E:BB:2C:C7:4C:39:49:97:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29cfdca9-9433-31b6-858d-43e042075c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8d:d3:b1:09:36:14:8c:df:93:94:e2:52:76:51:29:9a:e5:
         3c:39:28:2e:7b:97:e0:fa:79:bf:39:7c:e1:fe:56:61:c3:38:
         e8:82:2f:e9:12:b5:b6:6c:94:e2:67:57:41:24:f7:3e:89:36:
         23:b4:e4:f4:75:fc:74:44:3e:96:db:a0:3f:f2:93:63:87:d2:
         a6:1c:71:b2:76:4a:56:de:15:60:06:5f:d4:75:0f:06:07:bb:
         f4:48:8d:19:54:3f:87:2f:44:64:88:ab:c7:4e:52:09:d7:45:
         58:47:4b:2f:9a:f5:87:a2:7f:fc:e8:3b:19:fb:1c:f1:b7:f2:
         04:64:95:e9:21:9b:ec:5f:61:18:42:18:5c:9c:e3:d8:b7:ff:
         e6:1b:bb:8a:15:5e:aa:b0:5a:36:9a:b7:4b:6c:53:5a:8d:25:
         8a:02:2b:37:e1:3b:2f:7e:94:d8:46:a0:5d:69:5d:82:68:fb:
         94:10:b7:43:56:f2:f8:01:df:f3:7b:98:b6:7c:13:56:6a:58:
         d6:02:3d:8f:5f:4e:48:1c:01:b8:a7:b4:33:8b:00:91:c2:ab:
         b4:ee:5d:54:1f:14:c7:e9:37:db:6d:ca:7f:e6:98:87:94:b3:
         b0:9e:7f:25:d2:57:bf:85:a7:5b:b0:3e:2a:b8:b4:16:91:72:
         3c:4f:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:47 2026 by rpki-client