Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9f41d8-3747-35fc-a8d7-3a130ad28c81.roa
File:                     6f9f41d8-3747-35fc-a8d7-3a130ad28c81.roa (raw, json)
Hash identifier:          le5IoifsXArP4gGj0HoNfcNSb6uFGnrXf4m3mY+OU7Q=
Subject key identifier:   E1:54:17:27:7C:2A:EC:77:20:20:24:E7:84:C2:06:2B:24:CD:B5:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4ED11C0BD82E6E4584420
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9f41d8-3747-35fc-a8d7-3a130ad28c81.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.250.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:ed:11:c0:bd:82:e6:e4:58:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=231f6f71-229f-4c21-8756-3e5a09f46608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:b7:d8:73:66:40:b3:ee:50:9a:d5:1f:6c:
                    d1:c9:45:2b:09:ad:20:8d:3a:30:f7:6b:bc:77:07:
                    e4:22:66:a0:ca:33:b0:84:50:89:b5:81:6b:55:b1:
                    15:df:c6:51:91:f6:0d:83:40:22:7d:ac:09:72:cf:
                    94:d9:59:2a:8a:37:23:07:b5:d3:1b:9d:bb:17:d5:
                    f7:16:3f:49:a0:f2:5d:22:5d:4e:21:d2:77:3f:c1:
                    9f:42:21:2a:6f:1a:e6:ee:99:22:d7:a9:d8:50:4f:
                    65:c9:4b:1d:23:cc:68:30:82:3b:3a:65:2e:c0:ab:
                    24:44:87:02:f2:3d:d9:fa:6f:85:70:e1:b9:56:91:
                    ab:41:ea:6e:ee:b1:2c:53:cd:fd:e8:d8:3d:d6:e3:
                    15:57:df:9d:05:d1:c8:67:98:83:3c:ec:d7:6a:b6:
                    35:5a:b4:db:eb:c5:e7:e4:84:20:b3:59:51:b3:3a:
                    2d:95:69:17:b1:2a:4e:74:a3:5a:f2:03:3f:41:ae:
                    9a:f1:f2:99:43:7c:1d:3a:68:07:a8:3d:97:a6:d0:
                    a5:16:97:92:ca:c4:a9:fb:5f:06:ba:4b:b8:68:a7:
                    c5:72:cd:de:61:b4:8a:7a:84:9e:84:d6:21:32:96:
                    f8:0c:cc:fd:99:8e:a5:97:5d:72:48:b2:a8:f0:09:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:17:27:7C:2A:EC:77:20:20:24:E7:84:C2:06:2B:24:CD:B5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9f41d8-3747-35fc-a8d7-3a130ad28c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:52:33:e2:49:b0:d6:c5:9e:57:54:9a:19:7c:e1:7e:47:
         b6:de:b8:3c:f1:41:60:11:ac:f0:3c:f1:49:44:29:50:fb:78:
         b0:d7:6a:4e:84:32:1e:39:75:fb:14:7d:ee:48:43:e6:64:e6:
         c0:1d:e2:3a:ba:b6:28:c5:c5:d0:8e:ad:b6:48:e2:90:c3:7c:
         a7:aa:06:ed:1b:1e:e7:58:1d:78:cd:67:ed:39:a3:65:65:97:
         cd:57:79:14:4a:38:9a:41:fb:dd:e1:75:eb:57:4a:d5:e0:dc:
         6e:9e:2b:d3:0c:4d:86:44:bb:bd:f9:9b:94:2e:67:89:84:c1:
         4c:19:a5:a9:6e:8d:58:49:b2:53:a2:f8:8d:b8:80:aa:49:47:
         20:21:74:a3:ce:c8:dc:bf:10:ac:47:be:82:6b:b2:c7:56:d1:
         e4:43:f7:fe:fa:cd:2c:58:ed:27:40:75:38:44:89:9f:0a:56:
         0a:87:1c:34:49:a1:70:1f:67:ee:1e:d2:49:53:5b:d1:c8:53:
         56:28:b4:76:ba:be:56:77:87:82:0c:04:30:ba:9c:bc:fe:25:
         55:5f:a0:49:36:3b:1b:cd:3b:0d:5e:99:c6:28:b2:21:a1:40:
         c5:d0:44:0f:fd:39:81:6b:5e:c7:2b:53:8d:ec:00:a5:43:bd:
         d8:32:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:34 2026 by rpki-client