Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35964eab-8df7-3f5b-92bd-aa1e70f54c9e.roa
File:                     35964eab-8df7-3f5b-92bd-aa1e70f54c9e.roa (raw, json)
Hash identifier:          iHbXwNtanowFtDfbDOhDXbyw3cKpCQ3+UYGngtjzy1o=
Subject key identifier:   17:7C:AF:2C:56:EF:34:4F:EF:FC:D1:80:8C:92:D6:C3:F9:6C:C3:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF7627D314DEF1CBB9CB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35964eab-8df7-3f5b-92bd-aa1e70f54c9e.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.225.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:76:27:d3:14:de:f1:cb:b9:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=f8ea3f46-1c1a-4c90-8347-66318e5491de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:73:e3:a3:8b:cd:43:3f:85:6e:f4:bd:da:
                    2b:3a:5b:38:76:44:cb:da:79:e5:e7:2e:50:49:81:
                    f1:13:20:90:12:a6:5d:1e:45:14:a4:30:ae:05:fa:
                    43:47:a8:bb:a1:78:0d:46:c6:b7:f0:11:7e:02:3e:
                    86:ba:52:03:82:8d:7c:ef:f8:b8:ec:45:4c:f2:75:
                    d2:4f:e6:c7:0f:fd:6a:28:f6:5e:45:64:b3:55:c2:
                    0c:a4:41:47:68:2d:a6:a7:55:dd:6e:a8:54:2d:50:
                    7e:6a:bd:97:dd:cb:94:21:1d:0f:fe:76:6f:e1:20:
                    5f:2f:c3:1d:92:71:41:17:e3:bc:dc:d8:77:81:52:
                    47:a3:b2:ea:79:b0:5b:09:3a:8e:a0:07:1c:2d:5a:
                    3f:4b:cc:04:c8:91:21:c3:b4:dc:84:51:aa:2c:f2:
                    4f:62:96:9a:18:dd:fb:f7:fc:52:c5:a8:ec:80:79:
                    19:ca:71:11:89:9e:ca:52:4b:ff:4b:8b:75:fb:86:
                    d7:0d:17:80:32:9f:e0:3d:f1:08:09:af:15:1d:69:
                    ec:e5:ea:1d:d5:37:41:81:82:f7:60:ae:57:ec:3c:
                    86:e6:51:c9:94:4b:ce:37:f1:64:01:0d:33:71:06:
                    e0:48:ca:e1:95:c4:ad:f6:22:77:51:59:dc:03:aa:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7C:AF:2C:56:EF:34:4F:EF:FC:D1:80:8C:92:D6:C3:F9:6C:C3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35964eab-8df7-3f5b-92bd-aa1e70f54c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.225.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:ed:cd:25:28:97:8b:18:81:b1:0f:30:0d:4d:b1:48:57:
         bc:6c:e5:6b:37:63:e9:3a:cf:0d:4a:99:38:14:0c:c9:31:9c:
         5c:fe:15:c2:fd:0f:cb:18:da:70:15:ca:8c:18:a8:4a:58:68:
         d9:7f:61:76:65:a0:dd:84:d8:39:75:0e:47:01:c2:dc:85:b1:
         ed:23:58:68:38:84:07:6f:18:e2:9a:fa:c6:06:76:48:de:70:
         24:0a:a0:fa:82:2a:85:28:ac:db:88:10:f2:74:27:00:45:c4:
         f3:9a:7e:86:c9:57:de:54:60:9a:7a:79:38:2f:5b:b2:25:89:
         7e:a4:c6:45:f6:a6:ab:3e:2b:97:92:d3:a7:2c:e4:35:b9:e7:
         11:e8:68:a0:74:9b:84:8f:c1:c7:ad:b7:2b:60:95:04:7a:6b:
         b4:74:27:71:88:bb:72:12:8d:21:c6:e9:62:2f:4b:82:1b:a6:
         50:8b:d2:70:eb:d5:7d:60:c6:6b:79:1a:6e:a0:3a:57:a8:fd:
         af:40:92:6c:93:9d:9a:d8:9f:af:dd:b4:18:11:3b:ff:67:15:
         66:5d:74:fe:bd:80:93:d1:5f:c6:ad:b3:82:59:de:41:f8:ba:
         c7:e1:f4:82:d4:99:da:07:47:9a:bc:b7:27:fe:06:a6:5a:9c:
         f2:4d:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:03 2026 by rpki-client