Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa
File:                     725be529-618d-3533-8b35-baa3838ecbc4.roa (raw, json)
Hash identifier:          yFR1SMTS/SdPxmlUZnR+RkRT9OSEzsBcGUiLNDp3ypI=
Subject key identifier:   F5:F7:0E:80:D2:90:FD:90:15:EB:C9:69:99:43:79:A0:7D:06:7A:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF71EEDF99225106190D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.212.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:71:ee:df:99:22:51:06:19:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=8a7c1ec9-3bd8-4e4b-9b01-31a24006385d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:b2:3b:b6:52:f5:24:96:eb:4f:1f:e3:2a:
                    6c:f3:a6:30:f0:c1:01:50:8c:17:60:5a:3a:c3:bf:
                    5a:cd:6d:74:ab:cd:a2:a4:c4:e2:31:5d:7a:cd:e7:
                    61:c4:c0:a7:52:cc:3b:a1:31:d6:2c:d5:20:9f:41:
                    69:08:1e:e8:22:92:36:d0:08:92:b5:96:ca:e1:62:
                    d7:20:09:ad:13:43:e6:87:5f:56:56:ee:f9:9c:1f:
                    d8:4d:01:60:1a:48:19:80:18:ef:56:35:f9:5a:49:
                    a8:b7:ce:5a:e8:9d:4c:93:fd:72:b3:44:e3:5d:47:
                    f9:22:92:60:39:f0:77:92:ef:2f:1a:b1:2d:be:27:
                    41:ec:02:14:3e:d5:df:69:77:b9:fa:e3:d4:be:87:
                    f4:0b:32:be:03:06:63:f4:83:5e:83:94:0a:d8:ad:
                    ea:4c:bf:23:df:2a:8c:4d:6c:e9:3f:d6:35:7f:29:
                    00:d6:f7:f0:e6:4b:54:e1:3c:84:e5:49:71:e1:50:
                    7d:60:cf:64:d3:75:18:8a:08:45:6d:fa:04:88:43:
                    d6:45:cd:d9:cd:df:39:66:56:4b:45:63:c9:3d:98:
                    67:ba:ba:30:3f:30:19:5c:13:de:ff:36:4f:a7:90:
                    b8:65:b3:27:73:36:72:b3:0c:65:b3:1a:8f:5c:ba:
                    0d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:0E:80:D2:90:FD:90:15:EB:C9:69:99:43:79:A0:7D:06:7A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/725be529-618d-3533-8b35-baa3838ecbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.212.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0a:f9:ca:7d:83:5a:c6:78:6e:50:c5:22:88:3c:03:9d:e9:
         8a:c5:36:a8:79:ac:1b:54:c7:aa:8f:06:bd:cf:41:6f:72:6b:
         fd:f5:a9:9e:78:d3:9a:e0:fd:9b:fa:67:2e:57:cd:04:03:cd:
         60:d6:f3:b8:43:c9:33:76:7b:28:b1:3a:48:f1:ad:7b:43:b4:
         13:d9:37:97:d4:53:95:65:68:1b:c1:ed:04:61:48:c0:59:7c:
         7d:ce:02:34:52:b4:ec:a4:36:e3:c0:70:e5:f8:d0:65:e0:cb:
         92:61:59:7c:ec:26:fa:aa:0f:5c:ee:b2:d8:e7:a8:92:04:1d:
         bf:b5:84:02:a9:78:09:85:8d:d5:c7:67:64:9d:29:42:f0:ec:
         1e:00:c1:6b:42:0b:1f:31:54:b8:2c:08:47:47:ed:63:18:c8:
         7b:8b:10:e6:41:9c:90:08:c8:fe:31:a2:ac:62:d1:f8:8a:7f:
         5f:af:02:66:3e:34:58:01:de:35:96:af:d2:ca:79:5b:49:fa:
         d4:d5:3a:2e:a2:72:27:53:dc:5a:48:67:e5:25:9f:19:89:a6:
         65:8c:f8:ea:f0:61:c8:49:2b:10:79:8c:53:cd:4a:3c:44:00:
         72:5a:a5:21:9e:21:1d:87:cf:f3:f0:83:b9:42:35:37:e7:c3:
         f4:a1:1b:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr3Hu35kiUQYZDUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
OGE3YzFlYzktM2JkOC00ZTRiLTliMDEtMzFhMjQwMDYzODVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzqyO7ZS9SSW608f4yps86Yw8MEBUIwXYFo6
w79azW10q82ipMTiMV16zedhxMCnUsw7oTHWLNUgn0FpCB7oIpI20AiStZbK4WLX
IAmtE0Pmh19WVu75nB/YTQFgGkgZgBjvVjX5Wkmot85a6J1Mk/1ys0TjXUf5IpJg
OfB3ku8vGrEtvidB7AIUPtXfaXe5+uPUvof0CzK+AwZj9INeg5QK2K3qTL8j3yqM
TWzpP9Y1fykA1vfw5ktU4TyE5Ulx4VB9YM9k03UYighFbfoEiEPWRc3Zzd85ZlZL
RWPJPZhnurowPzAZXBPe/zZPp5C4ZbMnczZyswxlsxqPXLoN+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPX3DoDSkP2QFevJaZlDeaB9BnoKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzI1YmU1MjktNjE4ZC0z
NTMzLThiMzUtYmFhMzgzOGVjYmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtSgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAK+cp9g1rGeG5QxSKIPAOd6YrFNqh5rBtUx6qPBr3PQW9ya/31qZ54
05rg/Zv6Zy5XzQQDzWDW87hDyTN2eyixOkjxrXtDtBPZN5fUU5VlaBvB7QRhSMBZ
fH3OAjRStOykNuPAcOX40GXgy5JhWXzsJvqqD1zustjnqJIEHb+1hAKpeAmFjdXH
Z2SdKULw7B4AwWtCCx8xVLgsCEdH7WMYyHuLEOZBnJAIyP4xoqxi0fiKf1+vAmY+
NFgB3jWWr9LKeVtJ+tTVOi6icidT3FpIZ+UlnxmJpmWM+OrwYchJKxB5jFPNSjxE
AHJapSGeIR2Hz/Pwg7lCNTfnw/ShG+E=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:54 2026 by rpki-client