Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fba1f51-abfb-39f0-915b-ff304be322c4.roa
File:                     5fba1f51-abfb-39f0-915b-ff304be322c4.roa (raw, json)
Hash identifier:          kn6dBQzs9w9Vol6nMabZK12wHnNE0380XBfZnRk9o8c=
Subject key identifier:   D4:8A:D5:29:18:33:86:6B:F7:FA:30:A5:68:ED:AB:D1:56:A7:15:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF6413E7063C7346970700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fba1f51-abfb-39f0-915b-ff304be322c4.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.216.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:64:13:e7:06:3c:73:46:97:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=1c2ce6f1-21cc-415a-8b77-1a34c4f7445c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:63:ef:4c:16:82:a3:27:c7:1a:46:75:b8:
                    7c:fa:2f:74:90:c5:00:00:81:7c:f5:9b:6f:7f:c2:
                    81:00:d6:01:8f:00:b4:51:b8:95:23:8d:d1:71:8a:
                    5d:b9:cb:91:75:3c:fd:ee:ba:da:6f:03:a8:da:67:
                    25:62:39:ad:be:8d:53:21:36:3b:86:26:74:de:c1:
                    ed:4e:31:3a:54:84:16:d3:3a:c4:5d:98:82:7f:f2:
                    7a:2e:21:a4:ee:5c:72:f5:d0:81:2e:15:22:eb:7f:
                    51:7a:17:71:1c:1f:6d:45:cb:90:ee:e7:52:78:2e:
                    b7:af:92:ae:a5:4d:48:28:64:16:22:1e:aa:67:a2:
                    14:a0:c3:b1:75:83:5f:dc:78:b3:0c:62:8c:fb:80:
                    58:51:b0:1a:43:fb:21:a8:bc:ce:fa:37:5c:5e:e8:
                    7c:df:c8:e8:fe:60:cc:9d:37:8b:eb:31:70:b7:60:
                    00:72:c8:f6:70:db:55:f4:f6:c2:38:95:3d:b1:1c:
                    8d:f7:af:6b:d2:7e:30:87:99:a4:ce:02:90:85:8d:
                    b0:e0:34:99:b1:a0:bf:86:68:be:d9:03:24:69:de:
                    a7:25:95:70:b3:f9:d1:c3:6a:e5:e0:9c:ff:b6:98:
                    0b:e6:56:34:1f:cc:29:5b:dd:8f:a3:2d:80:d8:c6:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8A:D5:29:18:33:86:6B:F7:FA:30:A5:68:ED:AB:D1:56:A7:15:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5fba1f51-abfb-39f0-915b-ff304be322c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.216.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ec:f9:18:8b:93:30:c6:27:11:6c:82:6c:50:e7:c6:eb:19:
         70:40:dd:8e:29:92:80:d8:94:b3:47:e0:67:6b:fb:99:a0:ff:
         ee:3b:f3:b4:ee:04:d3:3c:1f:7d:3b:de:b2:61:54:ef:7b:19:
         57:5d:80:77:67:96:d4:49:0f:92:41:2d:4c:1f:31:04:6e:94:
         37:74:a7:df:db:2a:12:1c:a0:7d:9e:0b:bb:04:c6:e6:9f:6c:
         37:81:13:23:3f:50:d3:3b:5d:e0:20:7e:54:31:09:53:29:13:
         77:c2:34:aa:ff:73:14:a6:f9:9f:2e:98:e9:ae:b6:b0:f9:27:
         85:49:7b:54:a1:0d:c6:2d:8e:7b:62:43:ed:53:a8:4b:46:f9:
         e2:76:31:93:13:22:28:7f:99:63:c7:fd:1e:44:1c:2e:e0:18:
         ca:74:2e:cc:56:27:c7:ce:93:78:6b:5e:1a:13:66:07:85:6b:
         fd:2f:2e:ea:8c:2b:c5:51:45:cd:68:86:4a:bc:82:aa:0a:8f:
         5c:e8:4e:af:17:5b:7e:ed:a1:9b:93:a5:52:04:b3:20:0d:a1:
         5f:97:4b:91:a3:d2:df:bf:cd:cf:3a:bf:f0:97:e4:6a:ca:59:
         b3:02:4d:c9:67:7e:f5:66:f2:15:16:4f:f6:3c:3c:e1:d9:3f:
         60:87:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:14 2026 by rpki-client