Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558f9fb3-9c2b-30c2-9847-de32517e9d9c.roa
File:                     558f9fb3-9c2b-30c2-9847-de32517e9d9c.roa (raw, json)
Hash identifier:          /AsCmJPT7/YYXSYTec0jOaEHnSL22sGaBUYimevQ0ow=
Subject key identifier:   AE:08:3D:FE:67:1B:B3:25:0E:C7:D6:43:08:E0:5E:E4:82:D7:AD:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D49E170CFE4E5FCC32325BCA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558f9fb3-9c2b-30c2-9847-de32517e9d9c.roa
Signing time:             Wed 25 Mar 2026 19:09:49 +0000
ROA not before:           Wed 25 Mar 2026 19:09:49 +0000
ROA not after:            Tue 23 Jun 2026 19:09:49 +0000
asID:                     6167
IP address blocks:        174.250.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:e1:70:cf:e4:e5:fc:c3:23:25:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 19:09:49 2026 GMT
            Not After : Jun 23 19:09:49 2026 GMT
        Subject: CN=09b76fb1-4907-4679-b7bb-6e38616057eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:71:51:9d:40:3b:9b:d6:eb:e7:e8:67:2f:
                    4c:2b:34:4d:78:a1:5e:58:a3:fa:23:bd:e3:13:45:
                    e4:10:b2:8c:7e:c5:0a:01:7f:17:f4:d7:10:0a:fd:
                    e9:6b:af:48:6d:59:ca:8e:63:d1:bc:06:11:e4:e7:
                    07:80:17:27:87:39:55:d4:01:84:bc:ee:1f:26:ae:
                    71:5c:19:1b:59:b4:f2:3a:bb:1c:d1:68:ad:79:64:
                    05:ec:ce:7d:92:e5:58:fc:5b:04:e9:c8:63:1a:94:
                    e3:cb:f3:62:3a:e8:9b:da:7b:ad:b7:a0:44:db:56:
                    65:81:cd:d4:50:89:e9:4c:8e:d2:cf:34:1d:51:92:
                    40:b0:6b:ca:69:ec:03:f5:61:f5:e9:60:a0:60:c8:
                    f2:d5:58:3e:87:71:b9:75:c1:d3:9f:53:74:0a:79:
                    71:49:81:df:9d:19:86:33:aa:1a:a1:d1:64:ef:af:
                    c5:43:0a:04:19:d1:67:d0:ea:ff:d3:5f:4a:9f:d7:
                    e1:79:df:a9:62:5c:83:2b:25:79:68:d8:5d:5f:37:
                    d2:fc:4c:a2:5d:3a:81:52:57:e1:a5:47:fc:2d:51:
                    1c:4c:00:f3:6f:e7:92:70:b4:8e:66:4e:03:2a:6f:
                    fe:b6:a0:92:5c:bb:8d:02:b1:c4:3f:c2:28:02:8e:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:08:3D:FE:67:1B:B3:25:0E:C7:D6:43:08:E0:5E:E4:82:D7:AD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/558f9fb3-9c2b-30c2-9847-de32517e9d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:3b:b9:79:86:93:05:03:c4:a7:04:73:b3:d2:07:90:dc:8f:
         56:9c:07:9d:80:1c:0e:64:ee:ae:1c:8d:e2:5e:2f:cc:c9:b8:
         5b:ab:84:f0:fe:5f:0d:a2:0e:9e:1a:75:fc:d1:fc:a2:b2:31:
         32:de:fb:b8:99:16:ce:13:fa:c1:16:43:9f:c0:dc:33:3d:83:
         69:84:11:16:17:39:f0:1a:a3:44:1a:29:6c:d6:0b:9c:df:08:
         be:51:af:2a:a1:c7:ca:21:03:44:13:6a:b6:17:95:94:ca:57:
         f3:2f:e0:1c:8b:ef:a4:49:f3:ad:45:f1:b0:63:c3:8b:e0:4c:
         45:44:92:7f:3c:a1:6c:2a:10:61:57:80:e6:29:cb:31:22:b0:
         44:67:f6:35:74:92:f4:05:d3:41:33:b4:b7:2b:86:13:8f:0a:
         62:5f:bc:bf:d1:7f:86:35:dc:d2:d5:0f:d7:97:d4:0c:3f:41:
         28:1b:69:18:39:f0:3c:4b:36:02:48:1c:58:d9:9d:e1:49:65:
         f8:f5:5d:f4:b3:2d:5d:a1:9d:f3:a2:26:46:a5:a5:09:f6:56:
         4b:aa:19:74:32:60:51:b6:de:43:25:f4:a7:4a:d7:ab:9d:cc:
         b8:87:a0:c8:56:37:de:24:a9:77:db:fe:d0:7f:15:2e:dc:55:
         e6:d5:e2:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1J4XDP5OX8wyMlvKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMyNTE5MDk0OVoXDTI2MDYyMzE5MDk0OVowLzEtMCsGA1UEAxMk
MDliNzZmYjEtNDkwNy00Njc5LWI3YmItNmUzODYxNjA1N2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2txUZ1AO5vW6+foZy9MKzRNeKFeWKP6I73j
E0XkELKMfsUKAX8X9NcQCv3pa69IbVnKjmPRvAYR5OcHgBcnhzlV1AGEvO4fJq5x
XBkbWbTyOrsc0WiteWQF7M59kuVY/FsE6chjGpTjy/NiOuib2nutt6BE21Zlgc3U
UInpTI7SzzQdUZJAsGvKaewD9WH16WCgYMjy1Vg+h3G5dcHTn1N0CnlxSYHfnRmG
M6oaodFk76/FQwoEGdFn0Or/019Kn9fhed+pYlyDKyV5aNhdXzfS/EyiXTqBUlfh
pUf8LVEcTADzb+eScLSOZk4DKm/+tqCSXLuNArHEP8IoAo6Y0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4IPf5nG7MlDsfWQwjgXuSC162JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTU4ZjlmYjMtOWMyYi0z
MGMyLTk4NDctZGUzMjUxN2U5ZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrvp4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALQ7uXmGkwUDxKcEc7PSB5Dcj1acB52AHA5k7q4cjeJeL8zJuFurhPD+
Xw2iDp4adfzR/KKyMTLe+7iZFs4T+sEWQ5/A3DM9g2mEERYXOfAao0QaKWzWC5zf
CL5Rryqhx8ohA0QTarYXlZTKV/Mv4ByL76RJ861F8bBjw4vgTEVEkn88oWwqEGFX
gOYpyzEisERn9jV0kvQF00EztLcrhhOPCmJfvL/Rf4Y13NLVD9eX1Aw/QSgbaRg5
8DxLNgJIHFjZneFJZfj1XfSzLV2hnfOiJkalpQn2VkuqGXQyYFG23kMl9KdK16ud
zLiHoMhWN94kqXfb/tB/FS7cVebV4ok=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:12:31 2026 by rpki-client