Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa
File:                     5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa (raw, json)
Hash identifier:          FN2AjhB9qcksJ74sRnArnwbCvWulNFTIquWDi8Wdo+Y=
Subject key identifier:   EC:E9:BB:10:24:56:E9:F0:28:ED:D0:06:5A:F7:0D:2F:73:92:20:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF72132D8174E0911BB4A5
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.212.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:72:13:2d:81:74:e0:91:1b:b4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=9f52b3c0-71f5-4d68-a5f7-fb684c8e4f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:72:38:a7:fe:cb:d9:f0:3f:ba:6d:54:c9:
                    d3:b3:7f:59:33:e7:85:90:03:02:68:51:f1:c4:8c:
                    cb:9e:04:a0:ed:a7:25:b2:a1:f7:02:4a:fc:28:4a:
                    d3:4e:0b:cf:c2:76:46:85:11:eb:31:6e:87:1d:7c:
                    bc:5a:84:e3:61:1d:9f:a6:22:6b:33:05:25:cd:83:
                    c5:f2:b1:d0:2f:0b:4c:d7:91:86:1c:36:f1:89:77:
                    ab:c0:61:e3:42:5a:9a:f4:dc:21:2b:2d:23:c0:33:
                    6e:78:ac:73:98:76:d0:d8:00:e7:36:c3:7b:ee:07:
                    af:7a:21:b0:05:16:83:0b:31:ec:fd:49:76:3e:bb:
                    98:9c:6d:e6:f6:97:ed:8c:bf:70:44:08:79:06:0b:
                    13:aa:a3:1d:9c:ce:c6:02:a3:8d:2e:dd:53:3c:5d:
                    c3:1e:22:b4:89:86:2e:48:55:de:7e:f1:d8:f2:34:
                    c1:56:6b:23:b2:1e:e0:01:33:19:38:ba:3a:4e:5d:
                    72:e5:eb:99:65:74:78:79:e6:e4:78:53:86:dc:0f:
                    c8:70:2a:10:52:70:23:11:e6:a1:3e:42:b4:b8:6f:
                    ba:c6:9d:69:7c:db:ce:6f:fb:2b:14:77:6b:20:2e:
                    db:a6:aa:8c:cb:dd:73:8a:79:3f:99:7b:0e:06:f2:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E9:BB:10:24:56:E9:F0:28:ED:D0:06:5A:F7:0D:2F:73:92:20:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:68:ea:c8:06:58:6e:83:73:ac:6b:0a:01:77:ca:41:74:
         fd:be:51:ab:8f:d6:97:97:17:f3:51:c1:13:7e:ab:0e:d5:5e:
         55:c7:77:96:a1:95:48:a9:ae:6f:2d:56:16:3a:d7:ab:96:02:
         7e:b4:8e:7e:31:ff:13:c8:99:05:be:cf:5c:66:fb:e9:b4:00:
         c1:21:2c:34:ac:e9:74:3e:2c:e8:14:36:27:2c:42:fb:a0:4c:
         de:8f:90:f4:19:01:1f:a2:82:a4:68:ad:3b:09:3a:98:14:51:
         f8:83:e2:83:df:b9:c5:8e:c1:2a:e8:04:e5:4a:3f:dd:83:57:
         3d:8b:26:ab:a1:ba:9c:12:18:d0:49:b8:a3:a0:3b:17:8a:50:
         88:b9:3c:35:3b:d4:61:1e:cc:a9:29:a2:23:f0:3f:bc:c0:c9:
         b7:89:02:92:ec:b6:96:f9:62:b4:b8:04:5f:92:84:c2:01:25:
         79:94:9c:7f:01:6b:85:58:31:b8:bf:f9:e8:90:03:7c:80:fb:
         37:79:0a:9f:8e:db:62:79:e1:ba:1f:7c:0b:de:45:1c:96:67:
         9d:53:bd:e2:51:be:a7:2b:d8:ae:36:c2:38:21:41:c4:62:73:
         d2:8c:f0:11:10:54:1e:1f:ed:99:e9:5f:26:52:4c:b8:1d:b6:
         ce:10:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:00 2026 by rpki-client