Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa
File:                     3562be53-e179-3729-a3e8-c7e5ba1401c2.roa (raw, json)
Hash identifier:          mHmGIalI4xoOpl1H9s/dJbHMdo3ZUL46bv6eDtu0IHg=
Subject key identifier:   85:8D:11:52:A4:5E:F6:B7:15:F9:5D:5D:5C:9C:B3:8F:BA:5A:18:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4F0A448C5C57976A92820
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.226.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:f0:a4:48:c5:c5:79:76:a9:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=6f3468f0-3bd0-49f8-9a12-43595cbc07ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:aa:3e:48:65:c7:a3:f6:5b:ed:50:58:5e:f0:
                    c7:67:99:98:2d:ea:d8:cf:20:b5:df:65:8f:75:9b:
                    16:7f:01:24:0c:ff:02:0f:7e:fc:f6:8b:e0:d4:16:
                    54:56:65:04:43:15:28:00:4f:75:f9:a5:bf:01:c2:
                    28:1f:47:1e:61:0a:b1:69:3c:02:4e:2d:9f:e2:b5:
                    de:2f:bc:1e:25:d1:32:f0:09:ad:19:d9:8e:87:dd:
                    e8:82:e3:b9:50:90:36:88:13:19:7e:5c:e4:6d:e7:
                    2d:5f:b2:9e:f7:b4:3e:d5:03:c0:4d:0b:f3:33:ac:
                    05:5c:c4:af:20:fb:43:58:51:b0:2f:4a:dc:35:6d:
                    21:9b:9f:2d:37:d0:b8:26:56:b6:d9:ad:6d:81:66:
                    d3:f6:cf:16:d6:1d:df:7a:dc:ad:a5:ab:ac:2e:a7:
                    f1:ad:90:bb:15:20:11:6b:1d:e4:12:be:0b:46:36:
                    16:99:5a:f9:c9:0d:00:72:38:6d:f5:91:da:46:c0:
                    a6:ef:cf:87:51:45:e6:2a:f0:83:99:6b:e2:76:0a:
                    62:4a:0c:2d:9c:d7:dd:7e:45:53:02:b1:65:77:23:
                    b1:0a:26:45:17:bc:d8:64:3b:ac:ec:b4:45:75:80:
                    79:c0:69:e6:9f:de:85:b9:7b:71:1d:cf:36:ae:73:
                    b8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8D:11:52:A4:5E:F6:B7:15:F9:5D:5D:5C:9C:B3:8F:BA:5A:18:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3562be53-e179-3729-a3e8-c7e5ba1401c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.226.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:af:c4:f4:df:51:9a:d1:06:4d:b3:2f:7d:c1:45:33:a1:a9:
         9b:67:0a:50:2c:dc:35:c5:0a:94:e1:15:a5:c8:86:15:64:d3:
         eb:4a:6f:43:68:59:91:56:27:eb:27:86:f9:15:90:23:55:ef:
         bb:46:ad:3a:1e:bb:2f:5a:e0:2f:d8:cb:a5:97:17:2b:3b:d3:
         28:c0:d4:f5:7f:7f:5f:70:f2:79:3f:30:6a:1f:61:c4:ad:73:
         ca:c0:d4:0b:07:22:69:70:aa:1e:84:bf:7d:e0:6d:82:cf:e1:
         f5:14:57:a6:55:c0:82:76:22:d9:35:2d:4a:88:c6:d4:60:61:
         e1:6c:e5:62:5b:eb:0c:ac:d2:28:41:82:43:a5:5f:c3:39:6d:
         b2:31:ab:ba:ea:3e:8d:2d:8b:e4:f4:1d:f6:e1:c0:08:ee:95:
         3b:7a:64:79:8f:50:d4:dc:48:2a:94:49:ce:07:8d:dd:a3:c5:
         db:a2:e1:7a:2e:84:3a:43:f1:3a:59:93:84:c1:44:53:3f:81:
         ed:fe:c1:99:ef:5b:6d:7b:f1:47:bf:a3:72:71:f5:14:32:40:
         b2:f5:57:92:5d:1c:f4:30:c6:e5:fa:05:f3:d8:df:e1:69:28:
         a9:b2:af:ec:62:1a:15:1c:b4:0a:fb:7f:c9:13:68:70:48:47:
         23:31:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:04 2026 by rpki-client