Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6a81e2-e02f-36d6-b92e-1e4c0365ed7e.roa
File:                     4e6a81e2-e02f-36d6-b92e-1e4c0365ed7e.roa (raw, json)
Hash identifier:          T5R+4XW3xK71QEi7px6Rk8AjZ+78/WNRlAg8znrJ9n8=
Subject key identifier:   3A:27:3E:6A:BE:DC:2F:7B:56:FF:C9:57:32:42:30:CB:27:B8:1E:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D117296268A1CB8510B3D2398
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6a81e2-e02f-36d6-b92e-1e4c0365ed7e.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        174.255.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:96:26:8a:1c:b8:51:0b:3d:23:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=8b3671f8-b460-4571-ab47-75809c08d056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:35:22:85:6e:79:20:aa:c1:2d:e4:e1:a7:24:
                    72:79:8a:e4:af:1e:ac:30:38:f3:bf:9e:1a:ba:6a:
                    83:b4:94:2c:65:1a:ac:14:b9:ad:85:c1:df:1a:8c:
                    8d:ba:88:f5:59:0e:30:10:e7:87:47:c8:75:f1:11:
                    41:b1:eb:05:2f:b9:b2:22:87:5d:11:0d:3c:04:ac:
                    61:4e:80:6c:33:ee:d4:dd:18:b9:3f:38:79:92:52:
                    ec:39:1e:36:55:f2:a9:e6:d8:8a:7e:0f:5b:df:64:
                    ea:28:0f:16:e4:f9:37:c6:48:e1:c4:59:75:6f:2d:
                    f2:82:7d:22:ba:60:ba:59:0e:3c:cc:20:5d:2a:56:
                    90:9a:4b:f4:fe:5b:ea:63:ad:2f:01:69:5f:aa:22:
                    cd:4e:e9:9d:a6:b1:6e:c3:09:a7:14:c1:ef:20:c8:
                    e2:85:e7:89:0b:cd:79:9e:ad:29:63:ee:37:c7:64:
                    ec:e0:be:4d:c0:54:ad:cd:a5:c5:ba:15:8c:c7:bc:
                    30:1b:fe:ed:f1:e3:76:8d:58:c9:3d:c8:2f:a0:f2:
                    96:74:cc:d4:2c:5c:89:fc:08:09:f0:3c:06:b9:3b:
                    6c:9f:88:ac:08:c6:38:0d:13:a0:bd:3f:f0:27:75:
                    17:09:69:f4:68:01:d4:1f:30:16:f7:0c:06:a2:40:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:27:3E:6A:BE:DC:2F:7B:56:FF:C9:57:32:42:30:CB:27:B8:1E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6a81e2-e02f-36d6-b92e-1e4c0365ed7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.255.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a9:f1:f0:97:65:1c:07:69:cf:72:d6:a0:2a:09:0a:c8:4d:
         1a:1d:12:96:d6:43:c9:6e:50:b4:42:63:62:b9:ec:47:2f:21:
         d8:90:67:62:9b:08:b1:fd:2d:b5:b3:d2:0c:0a:ac:5c:6f:2e:
         84:3e:93:53:98:08:61:31:dc:1c:d8:62:b9:4f:cc:19:de:9b:
         dd:db:dc:d7:95:19:ec:4d:bf:ae:ce:68:fc:2d:b5:6d:4c:40:
         6f:e9:70:3c:32:e1:23:17:80:6a:ef:4f:f0:f5:4e:c0:21:da:
         ed:1a:c3:d2:2c:2e:4e:45:99:08:78:67:78:5e:a4:ee:0a:bf:
         cf:5f:14:ba:db:39:4e:49:a6:83:8b:ae:a9:3d:39:91:c3:f1:
         6f:ef:fa:cf:16:54:55:50:d0:44:1d:65:47:ff:de:ce:bb:40:
         6b:62:fb:4b:70:87:d5:dc:b1:2c:1f:09:dd:b1:75:8c:c4:f6:
         cc:58:00:19:73:b5:e9:bd:3e:5d:bf:6c:86:62:17:f3:22:35:
         07:fd:62:ce:88:41:1a:50:82:b6:61:09:d0:82:af:a6:cd:01:
         b2:6b:7d:29:14:72:8b:8e:83:14:b3:fe:6c:66:0e:c9:61:f8:
         a9:27:9a:14:7b:84:83:d2:e3:ff:33:cf:91:4b:08:bc:c6:8f:
         fd:4a:33:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpYmihy4UQs9I5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
OGIzNjcxZjgtYjQ2MC00NTcxLWFiNDctNzU4MDljMDhkMDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTUihW55IKrBLeThpyRyeYrkrx6sMDjzv54a
umqDtJQsZRqsFLmthcHfGoyNuoj1WQ4wEOeHR8h18RFBsesFL7myIoddEQ08BKxh
ToBsM+7U3Ri5Pzh5klLsOR42VfKp5tiKfg9b32TqKA8W5Pk3xkjhxFl1by3ygn0i
umC6WQ48zCBdKlaQmkv0/lvqY60vAWlfqiLNTumdprFuwwmnFMHvIMjiheeJC815
nq0pY+43x2Ts4L5NwFStzaXFuhWMx7wwG/7t8eN2jVjJPcgvoPKWdMzULFyJ/AgJ
8DwGuTtsn4isCMY4DROgvT/wJ3UXCWn0aAHUHzAW9wwGokBX+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDonPmq+3C97Vv/JVzJCMMsnuB6dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGU2YTgxZTItZTAyZi0z
NmQ2LWI5MmUtMWU0YzAzNjVlZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGap8fCXZRwHac9y1qAqCQrITRodEpbWQ8luULRCY2K57EcvIdiQZ2Kb
CLH9LbWz0gwKrFxvLoQ+k1OYCGEx3BzYYrlPzBnem93b3NeVGexNv67OaPwttW1M
QG/pcDwy4SMXgGrvT/D1TsAh2u0aw9IsLk5FmQh4Z3hepO4Kv89fFLrbOU5JpoOL
rqk9OZHD8W/v+s8WVFVQ0EQdZUf/3s67QGti+0twh9XcsSwfCd2xdYzE9sxYABlz
tem9Pl2/bIZiF/MiNQf9Ys6IQRpQgrZhCdCCr6bNAbJrfSkUcouOgxSz/mxmDslh
+KknmhR7hIPS4/8zz5FLCLzGj/1KMyQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:19 2026 by rpki-client