Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6afe33a8-cf01-342b-8dad-4e5ce31a8dfa.roa
File:                     6afe33a8-cf01-342b-8dad-4e5ce31a8dfa.roa (raw, json)
Hash identifier:          Bnme70qvU4Ab2N7xe4QbGdsN3GZb3wlCtdt0zOKVEDc=
Subject key identifier:   52:97:F6:A6:BD:31:6F:DF:4E:8C:62:78:ED:31:0E:4B:13:DB:13:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A03E474E45DE5B99A2540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6afe33a8-cf01-342b-8dad-4e5ce31a8dfa.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        174.250.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:03:e4:74:e4:5d:e5:b9:9a:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=0458a9bc-e398-4e00-b88b-a29d6886d555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:1c:95:8e:2f:48:05:ec:95:bd:6c:3a:46:
                    0d:de:22:70:e4:b0:16:a5:07:28:d5:00:2b:a9:32:
                    ed:56:e3:90:8b:03:11:e6:3f:ba:82:62:e5:c5:31:
                    df:4c:6a:d0:9e:98:66:fe:57:07:ca:35:de:95:bd:
                    1f:cd:58:a3:b3:61:cd:a6:a4:8b:f3:3e:d4:94:cc:
                    cc:cb:50:44:20:02:62:db:c2:32:e2:46:c3:3c:50:
                    97:1b:db:8d:e8:58:fb:bf:22:81:1c:24:42:2f:c5:
                    23:0b:da:66:ba:39:e4:e6:7b:4d:1d:89:68:e1:90:
                    75:49:7a:a1:68:f1:7d:77:03:5a:82:7c:01:86:47:
                    5d:26:02:6e:66:69:45:54:65:64:8a:e1:21:20:4b:
                    13:61:ac:7f:a9:75:f7:f2:4f:f1:b6:ad:22:0d:00:
                    87:07:27:27:11:68:27:62:fa:c3:32:be:49:bf:b0:
                    1b:e0:1f:96:77:1b:cd:27:bb:12:1b:77:a6:9d:45:
                    e2:09:ef:22:c8:5d:8d:68:91:1f:a3:5c:f5:c0:69:
                    12:71:10:d0:35:cc:9b:dc:a2:5e:0c:24:cd:55:7f:
                    5d:fd:5d:a5:3c:1f:9b:8b:7c:5a:96:a9:f8:be:9d:
                    b8:39:1a:9f:ea:8e:c5:aa:7f:61:a8:9a:ef:5c:3e:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:97:F6:A6:BD:31:6F:DF:4E:8C:62:78:ED:31:0E:4B:13:DB:13:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6afe33a8-cf01-342b-8dad-4e5ce31a8dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:cb:98:19:7c:88:62:5a:91:cc:35:e8:f9:ca:c1:a3:ef:48:
         ff:e8:9c:b2:e4:ab:1e:8d:ce:aa:4b:45:1f:6b:2d:06:4f:65:
         d6:86:01:36:1b:11:ff:60:4f:21:61:5f:55:3b:de:67:d1:f9:
         b4:b5:03:2f:de:2a:4c:c7:22:86:95:97:89:ca:c0:c4:73:b8:
         88:12:c3:53:a5:7d:fc:fb:e6:9b:20:a2:50:53:1f:0d:39:55:
         f0:98:f1:f4:2e:0a:5c:44:3f:eb:a4:87:2c:fc:6c:d8:5f:63:
         f1:4b:c6:f3:5e:bb:6d:b0:58:e7:9c:ca:49:8b:a1:6c:83:8d:
         93:0e:8e:d8:d8:62:d3:15:2d:16:72:be:94:a9:f9:4f:e3:66:
         63:42:ea:9b:d6:f7:1d:8e:75:a0:c0:82:e2:15:e2:c7:b1:10:
         f3:47:f5:80:a6:b4:f2:6c:53:12:e6:c1:ad:68:bd:87:08:1b:
         05:b3:33:6f:fc:10:e0:4d:ab:7e:d7:1b:9c:b0:02:be:a4:69:
         27:59:89:e1:83:05:30:1f:a7:de:81:10:ae:41:73:8b:be:26:
         45:8b:5b:5f:52:9e:9b:46:9f:4d:b7:b9:89:db:b0:e3:07:1f:
         c0:c5:12:3b:e4:04:58:69:40:a8:1c:3f:21:ce:4d:68:ce:1f:
         83:af:3e:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSgPkdORd5bmaJUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
MDQ1OGE5YmMtZTM5OC00ZTAwLWI4OGItYTI5ZDY4ODZkNTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIcclY4vSAXslb1sOkYN3iJw5LAWpQco1QAr
qTLtVuOQiwMR5j+6gmLlxTHfTGrQnphm/lcHyjXelb0fzVijs2HNpqSL8z7UlMzM
y1BEIAJi28Iy4kbDPFCXG9uN6Fj7vyKBHCRCL8UjC9pmujnk5ntNHYlo4ZB1SXqh
aPF9dwNagnwBhkddJgJuZmlFVGVkiuEhIEsTYax/qXX38k/xtq0iDQCHBycnEWgn
YvrDMr5Jv7Ab4B+WdxvNJ7sSG3emnUXiCe8iyF2NaJEfo1z1wGkScRDQNcyb3KJe
DCTNVX9d/V2lPB+bi3xalqn4vp24ORqf6o7Fqn9hqJrvXD4wswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKX9qa9MW/fToxieO0xDksT2xO8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmFmZTMzYTgtY2YwMS0z
NDJiLThkYWQtNGU1Y2UzMWE4ZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLLmBl8iGJakcw16PnKwaPvSP/onLLkqx6NzqpLRR9rLQZPZdaGATYb
Ef9gTyFhX1U73mfR+bS1Ay/eKkzHIoaVl4nKwMRzuIgSw1Olffz75psgolBTHw05
VfCY8fQuClxEP+ukhyz8bNhfY/FLxvNeu22wWOecykmLoWyDjZMOjtjYYtMVLRZy
vpSp+U/jZmNC6pvW9x2OdaDAguIV4sexEPNH9YCmtPJsUxLmwa1ovYcIGwWzM2/8
EOBNq37XG5ywAr6kaSdZieGDBTAfp96BEK5Bc4u+JkWLW19SnptGn023uYnbsOMH
H8DFEjvkBFhpQKgcPyHOTWjOH4OvPoQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:37 2026 by rpki-client