Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36d48c4d-c764-38d5-9469-abbd3dcb2a46.roa
File:                     36d48c4d-c764-38d5-9469-abbd3dcb2a46.roa (raw, json)
Hash identifier:          WtBrQGsohD1Kau/0HJABwJUN2AsxEH03V+L3j/0+njk=
Subject key identifier:   67:E6:58:30:B8:32:29:7B:D5:66:92:AB:85:E7:85:8B:9E:E2:A4:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF731908026D3C610E49C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36d48c4d-c764-38d5-9469-abbd3dcb2a46.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.213.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:73:19:08:02:6d:3c:61:0e:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=6547d14b-b5f9-4003-8a7c-38071b34b343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:f0:93:10:8b:51:27:6a:50:29:28:3f:6d:
                    cc:bc:16:e0:61:04:df:43:6a:2a:fc:d8:b1:60:30:
                    d0:f7:50:63:48:58:eb:98:8f:1d:cb:16:6b:9f:76:
                    67:de:c5:5b:f5:b5:9c:84:42:c8:59:9b:15:41:07:
                    72:5e:5c:f3:d6:dd:df:cf:3e:2f:63:59:86:cd:22:
                    2d:f9:03:bc:e4:1e:2d:be:b1:29:80:42:2b:27:b4:
                    ae:0a:7f:dd:02:4e:c2:24:46:80:73:97:23:a2:44:
                    e9:dc:18:83:20:a2:3a:b4:33:e9:82:1f:b5:81:1c:
                    fc:c3:af:5b:2c:77:a7:07:5e:f9:3d:83:eb:03:ab:
                    41:59:0c:b1:d1:7d:1c:9c:bb:b8:78:e9:ef:f6:56:
                    15:7c:3b:f3:ca:0c:fb:ea:34:42:e9:aa:f6:d8:a5:
                    0b:63:78:d2:f1:d2:26:3a:81:03:77:c5:aa:54:b6:
                    2e:86:f9:ac:f9:de:82:ac:f8:2a:13:bd:52:70:7f:
                    bd:3e:41:68:fd:62:8c:c9:64:98:eb:8c:75:b4:03:
                    bc:96:73:8f:3b:a4:ce:6a:ba:47:18:11:b1:92:d3:
                    81:c0:2d:4e:c7:ec:bd:a6:d3:8a:93:48:a2:a0:64:
                    65:88:5f:0e:5e:6c:b4:89:56:d1:3e:51:a5:50:39:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:58:30:B8:32:29:7B:D5:66:92:AB:85:E7:85:8B:9E:E2:A4:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36d48c4d-c764-38d5-9469-abbd3dcb2a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.213.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:68:86:18:ca:84:b5:31:28:b1:1a:6c:97:98:28:66:84:
         b8:73:9a:c4:8e:41:76:b7:74:11:78:98:4f:92:41:44:b1:ce:
         5a:dc:39:f7:80:29:bb:df:95:6b:c7:d0:32:93:6f:d7:0d:1d:
         73:26:1c:5c:85:f5:40:4b:af:6a:29:b6:ac:42:f1:03:45:54:
         61:c6:8a:ce:f1:28:19:f0:37:86:d1:b3:8a:aa:f9:d2:59:54:
         5f:56:bb:39:3d:ec:3a:bd:52:0d:0f:62:42:1d:d0:33:37:16:
         09:d2:1b:06:27:4e:56:9e:13:47:4d:0c:9f:d0:c4:a4:65:7e:
         c5:60:f1:d1:b3:fb:43:dd:0d:11:ec:7a:e5:a2:9b:c0:13:49:
         e9:ee:ef:d4:37:56:d8:78:2b:d5:5d:fd:3d:9f:6a:49:11:78:
         b9:d8:d2:06:1d:0f:8f:1c:5c:23:7a:c6:e8:b9:77:a3:0d:76:
         e8:d4:86:c5:fc:60:3b:3e:e8:97:07:68:17:53:ba:42:e1:46:
         3f:15:bb:f1:ed:e1:ee:7f:48:f6:75:2c:3d:5a:85:74:12:dc:
         d6:62:e5:9b:26:1b:71:9b:c0:14:7d:62:56:a7:03:bf:14:55:
         f5:e4:2c:ba:ec:ce:e7:0c:31:b7:4f:cd:61:ec:80:6a:eb:2e:
         73:11:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:21 2026 by rpki-client