Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b761a739-fa82-3612-8854-8213cf2b3d24.roa
File:                     b761a739-fa82-3612-8854-8213cf2b3d24.roa (raw, json)
Hash identifier:          CyFH9QWhHA4Sdxm8IZHDin3N5tEE4fhiTBs+KQONbFM=
Subject key identifier:   68:37:8B:50:5F:D6:15:E5:B0:14:6B:45:09:E6:8C:77:47:AA:21:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF6F8D0223006B00BFC680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b761a739-fa82-3612-8854-8213cf2b3d24.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.196.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:6f:8d:02:23:00:6b:00:bf:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=4970e629-9ef8-4291-8a16-92eeab9a50ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:d8:1c:21:02:73:b2:97:f0:7d:b1:71:83:
                    a4:63:ad:03:20:4a:99:1a:01:72:bf:50:ef:8c:6c:
                    eb:2d:da:46:e9:b7:f9:ee:96:40:63:5e:d2:9d:4f:
                    31:bc:1f:ae:18:d4:59:6e:f4:c4:e4:98:f5:c1:64:
                    94:47:f7:55:e4:af:a6:22:ed:7a:90:5a:9d:b9:29:
                    26:26:9b:ec:ff:b2:fd:22:15:f9:0c:5e:88:42:3d:
                    a8:11:1a:77:dc:73:42:ab:d4:6a:16:d1:be:2d:79:
                    c5:9f:95:28:72:61:53:47:ec:0c:e3:85:e4:39:6e:
                    72:9c:09:df:ca:20:bf:de:ca:9e:c5:65:65:63:86:
                    3d:79:20:bd:f3:ab:36:40:99:b4:dc:84:6f:85:80:
                    60:a2:4c:03:99:a6:fd:c3:7c:13:ad:e4:52:df:f3:
                    6e:65:f6:cc:f4:35:d6:43:f9:e8:61:34:1b:04:19:
                    11:10:04:ee:52:15:ed:18:75:ba:14:c9:f1:03:32:
                    4d:aa:f0:3f:7d:76:26:1c:25:a2:61:4a:48:f5:03:
                    a1:34:4a:04:64:8c:37:26:d8:1c:f5:41:3b:9b:65:
                    e9:e5:93:46:f2:25:2d:e9:75:67:9c:9d:64:37:bd:
                    12:8f:85:6a:69:3b:18:cb:8d:64:35:60:99:3c:f2:
                    51:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:37:8B:50:5F:D6:15:E5:B0:14:6B:45:09:E6:8C:77:47:AA:21:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b761a739-fa82-3612-8854-8213cf2b3d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5b:fa:52:d5:60:21:49:55:c8:32:4e:69:50:b5:6d:39:a9:
         57:12:98:e2:fc:3d:ef:a8:44:c6:66:72:15:7d:80:14:19:6b:
         1a:e0:d6:51:3d:77:e6:6a:f7:18:dd:f5:ff:da:ac:c7:2d:00:
         60:02:dc:35:47:b1:f2:7a:00:57:66:60:d1:99:34:07:40:e5:
         07:29:5f:75:2a:6b:fb:ee:94:83:3d:b8:79:92:1a:aa:93:20:
         53:81:1f:ee:92:50:77:61:a1:ce:13:90:73:7a:8e:05:ee:4c:
         65:65:28:d2:3e:c8:5d:de:30:68:77:ba:89:56:bd:08:ae:3c:
         6a:8e:17:1a:15:2f:3a:68:4f:dd:64:33:20:7c:af:48:83:ee:
         0d:53:b4:69:85:08:39:9f:ba:42:6d:23:5c:71:ee:26:fa:52:
         da:5e:2f:c6:1c:37:24:e7:a7:76:ff:4f:3a:d3:9d:07:42:f9:
         8e:2d:be:4d:85:35:42:47:08:de:90:94:bd:df:a5:91:30:54:
         77:75:26:e4:ab:ec:14:88:42:13:5e:f3:c8:35:ff:bc:ac:9a:
         97:37:2b:2a:cd:30:65:5c:2e:ec:27:17:2f:26:3d:bd:ea:2e:
         1b:91:56:d7:69:47:df:d3:86:6d:f5:5a:16:35:58:7d:11:77:
         be:26:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:53 2026 by rpki-client