Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa
File:                     780397e2-11b6-3433-86d2-c8c2b5876efb.roa (raw, json)
Hash identifier:          3cE5D6S47lJ2bmcE+WgUL4REZT3tk2vwUIJXGGDpYzc=
Subject key identifier:   1D:8D:8A:B5:B1:5D:DA:EA:4D:9E:80:FA:12:5E:9A:79:08:07:4D:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF68161B94CDD7A376A500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.219.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:68:16:1b:94:cd:d7:a3:76:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=625556a9-cbd8-40b2-b2d9-d9c640d8c957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d8:56:8f:63:f1:96:2b:47:c7:b4:ae:3c:c0:
                    7c:39:cf:32:38:e4:ba:85:64:3e:41:97:35:fc:1d:
                    c3:3d:9f:66:0c:18:fa:d2:a4:ba:1e:16:34:3f:1f:
                    a7:0e:c2:b4:91:a4:f1:7b:73:f9:a7:d3:86:70:51:
                    2e:78:48:bf:e1:d0:4a:9d:d3:f0:80:a4:35:22:95:
                    92:82:8b:08:3c:06:2a:9c:8b:63:c4:c0:10:28:69:
                    0d:cb:81:1e:e8:01:de:40:d7:ab:07:19:71:18:13:
                    15:49:14:95:79:ae:f1:5d:08:4e:da:ee:8b:39:03:
                    54:e6:9b:1d:e0:27:d0:f6:cf:2e:d3:ef:7e:ca:56:
                    ca:bf:c6:7c:62:05:4b:8b:17:a9:55:2a:e9:d6:d2:
                    b9:e8:ff:19:ba:0e:04:be:98:a4:bb:93:3e:30:53:
                    ed:da:77:f4:91:bc:9c:32:2a:ff:55:2d:af:46:17:
                    5d:ce:34:c7:09:83:e4:2e:b2:d4:04:d7:aa:2c:c0:
                    87:8f:0e:c3:97:7f:bb:a7:6b:2a:db:0b:37:a2:19:
                    75:f3:e2:96:1b:96:b9:07:30:f2:8c:13:29:a1:19:
                    ee:5d:87:69:4f:52:24:af:b9:b9:9f:64:3e:6a:46:
                    16:61:58:77:b9:f2:0b:91:13:c3:ce:32:43:de:d5:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8D:8A:B5:B1:5D:DA:EA:4D:9E:80:FA:12:5E:9A:79:08:07:4D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/780397e2-11b6-3433-86d2-c8c2b5876efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b3:aa:b6:40:17:83:ab:d1:2d:de:ac:55:7a:f8:97:81:39:
         d8:38:ee:a7:fc:e9:f1:c4:65:95:d8:dd:56:89:74:e9:07:91:
         ce:d0:eb:95:92:5e:5e:af:2f:ed:64:db:c7:10:8b:0a:5f:dc:
         f3:8b:27:32:41:29:15:51:54:7b:b1:de:e6:67:2d:c5:81:ab:
         64:3f:b6:49:42:76:e3:d6:da:eb:ad:81:b6:2a:db:4f:dd:d8:
         20:a1:31:ea:b0:41:29:d8:d1:f3:b3:f6:1c:9b:8e:42:32:12:
         53:11:80:54:2b:67:bf:c5:04:74:ef:b0:96:a6:df:ed:49:f2:
         d1:58:8c:ee:bd:9a:e0:25:85:6f:c5:54:e8:55:38:9e:66:f4:
         97:25:d9:2e:64:c9:50:49:2b:17:be:c1:6b:e7:b7:bb:70:30:
         92:46:87:eb:20:0c:20:45:ca:cd:3b:4a:ba:a5:43:b2:bb:d2:
         7a:0f:6e:7e:5b:40:1d:50:77:42:e4:41:f1:38:09:97:9e:5d:
         c3:c8:49:30:82:19:0d:12:b0:21:ec:46:69:96:38:dd:89:e3:
         82:d4:25:62:e1:e5:99:6c:66:e5:05:b5:8d:3b:fb:5f:56:0e:
         59:a3:69:af:6c:6c:45:f8:a5:62:b0:cd:35:bf:3f:5d:83:30:
         ff:c3:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:22 2026 by rpki-client