Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729da692-8a47-3b8c-9ac7-479b4c4a975d.roa
File:                     729da692-8a47-3b8c-9ac7-479b4c4a975d.roa (raw, json)
Hash identifier:          BwSE4EvXIhmkA25JciOZpeaFWZ5byOX2Z8ex7terR1g=
Subject key identifier:   6F:69:D3:55:B6:9C:BA:10:28:DB:B7:1E:12:58:57:74:81:FB:A7:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4FF2BA6BD6E6DCBBE86C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729da692-8a47-3b8c-9ac7-479b4c4a975d.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.245.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:ff:2b:a6:bd:6e:6d:cb:be:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=989b3596-55ff-4981-90d0-9e37246a3380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:6a:a8:ce:be:1e:d9:e4:44:b7:bb:fb:d8:
                    16:da:f5:aa:68:11:5b:16:a7:f8:c0:2c:fc:39:ea:
                    bd:70:82:6d:98:48:40:f1:5d:c8:de:50:cf:48:4a:
                    3a:d4:c4:2b:b1:85:ce:1c:4a:93:02:09:71:8e:fb:
                    55:1e:e7:26:b7:04:bb:1c:38:1b:83:3f:73:0b:24:
                    25:76:fd:ce:ed:ca:46:a2:44:c6:78:c4:15:54:8d:
                    1e:b6:20:e8:32:35:d8:a3:34:87:0d:b7:23:ef:d3:
                    4c:6d:c4:99:ea:3a:79:a6:c8:c3:51:f4:52:dd:dc:
                    cc:e9:ff:98:63:35:1d:ee:f8:67:b8:81:d5:3c:9c:
                    df:9b:1e:c1:b5:75:95:e2:98:1c:2a:42:3f:38:af:
                    72:12:fa:55:d7:01:9f:b1:ad:d7:d7:5e:62:9a:3a:
                    ea:40:56:af:45:fe:48:2d:2d:85:07:47:7b:e1:c7:
                    3c:aa:8c:d1:8d:83:af:b7:58:d1:1e:1e:8a:58:09:
                    18:ff:05:4e:4e:41:a9:e9:6c:78:a9:43:f2:c2:92:
                    c5:ae:7e:54:ea:99:7d:75:e8:61:8c:da:04:e5:1c:
                    3a:46:26:19:80:71:74:4f:a0:ca:cd:55:18:40:b8:
                    22:f9:a8:62:6d:28:b0:ee:e0:68:24:8a:83:b9:1e:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:69:D3:55:B6:9C:BA:10:28:DB:B7:1E:12:58:57:74:81:FB:A7:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729da692-8a47-3b8c-9ac7-479b4c4a975d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.245.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:db:c8:fe:33:2d:e7:03:05:5c:bb:7d:73:49:de:cd:49:
         84:89:62:37:9d:85:34:b3:6e:2a:cd:a3:c9:e6:cc:5d:f8:f8:
         74:21:70:fc:b4:a6:e9:9d:4c:dd:89:46:b5:68:ce:38:30:b4:
         dd:9f:e0:f8:37:77:2f:94:b9:8c:5e:db:9f:85:9d:9c:3f:ad:
         3d:a4:87:c4:cc:14:5e:65:a3:24:92:52:f5:75:d6:83:86:7e:
         00:6e:6e:6d:c2:d7:b0:77:e1:5b:81:fb:e7:1f:13:fb:5f:c3:
         dc:f3:a6:21:e4:47:ea:5a:30:3d:23:17:fc:ac:b9:44:15:d5:
         c4:0d:76:18:10:0f:d4:0c:bb:0f:47:b9:ab:12:83:b5:d3:8a:
         e9:12:03:22:bb:8c:c0:c6:a4:52:69:6f:62:c4:b5:19:2b:49:
         c5:db:dc:2c:54:19:fc:a4:06:60:c7:12:55:d6:eb:b4:5d:ba:
         dd:e6:90:84:82:b4:83:c0:34:09:32:da:55:71:2b:40:ff:8e:
         93:96:9f:b2:0c:0e:41:6e:04:cb:d2:68:80:cd:8f:fa:31:93:
         53:6d:06:b7:ca:da:e8:94:4a:c0:f0:01:a6:f2:db:0b:34:b0:
         9c:3b:64:63:b5:cc:28:db:69:95:c3:35:16:4a:93:11:97:36:
         aa:d1:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:49 2026 by rpki-client