Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bddf4708-d05c-3193-8031-5d34f1cbeec1.roa
File:                     bddf4708-d05c-3193-8031-5d34f1cbeec1.roa (raw, json)
Hash identifier:          Vo505JsmH1og5d8eFXEQ9quVw/N6cxgLto1LSuPcti0=
Subject key identifier:   D0:33:E0:6C:16:A9:77:1C:B9:FC:83:AF:36:76:EE:1B:14:D2:4E:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D359FB1C45EBB6D878A89F980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bddf4708-d05c-3193-8031-5d34f1cbeec1.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        174.230.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:b1:c4:5e:bb:6d:87:8a:89:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=e4d841c2-3376-453d-b202-f36a643a555a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:12:53:1d:12:80:07:50:21:eb:be:83:e3:
                    2d:48:dc:2c:52:87:85:bb:41:9d:42:27:b6:67:be:
                    ad:79:71:b9:50:f0:eb:e8:a5:73:c0:70:ad:8b:6f:
                    9c:24:79:78:d5:98:1e:8e:0f:06:5f:d3:a1:e7:ba:
                    15:b5:c0:d6:e7:98:bf:83:bf:0a:fe:a4:f9:56:4d:
                    f3:2a:43:10:68:b6:03:3c:9a:71:26:1a:0a:f5:67:
                    0d:ed:d4:21:de:a2:cb:00:66:f0:5b:9a:62:42:05:
                    93:84:3b:8a:a9:58:e5:4d:85:15:37:72:2e:df:59:
                    90:73:e9:26:da:54:21:74:83:3b:06:f3:1e:6a:f9:
                    a1:70:30:67:0d:36:62:c4:86:3a:84:8f:3c:df:1e:
                    af:eb:0c:3b:72:65:33:55:ec:80:be:10:ee:16:b6:
                    a7:f6:d9:b5:3e:04:ca:d0:0b:5e:57:9f:c3:d4:e0:
                    fb:f0:51:46:2d:e6:11:40:d4:dc:aa:f5:5b:ad:64:
                    e9:20:e8:2b:1d:0f:7b:b7:db:67:c4:88:4e:82:e7:
                    23:4b:45:a4:ec:7e:89:72:dc:00:2e:f3:92:9e:34:
                    02:32:68:44:91:4b:28:12:7f:bb:7b:75:ce:90:9e:
                    e6:53:75:49:ce:f7:7d:0e:05:a2:dd:c9:a4:e7:2a:
                    cf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:33:E0:6C:16:A9:77:1C:B9:FC:83:AF:36:76:EE:1B:14:D2:4E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bddf4708-d05c-3193-8031-5d34f1cbeec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.230.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:3d:5d:9f:fd:01:0a:1f:be:f8:05:d1:05:6d:b0:c2:d0:
         b9:1e:71:02:fc:24:ca:2c:51:9b:72:2b:0b:3d:18:5e:47:e3:
         d0:da:d9:52:bd:cf:92:29:a9:cf:da:63:17:99:61:a7:fe:de:
         44:fc:8c:bb:7e:d4:f8:3e:01:94:e3:4a:3d:ff:7a:e0:71:fd:
         94:d3:56:73:ba:86:56:fd:9d:40:43:e7:65:a3:bc:6d:e5:b9:
         e7:7c:9c:b2:ed:9a:e2:b6:9e:a8:7f:26:44:17:99:ad:e3:2b:
         eb:b1:4c:a2:21:d1:58:9c:35:a7:47:59:92:93:c6:36:07:b9:
         15:11:60:bf:e4:12:53:22:6a:aa:ac:d0:aa:a0:fb:b0:b3:ed:
         2e:a6:28:2d:55:c2:9c:69:64:08:a4:84:2a:cf:69:0e:d1:59:
         b6:00:05:04:23:44:39:39:f0:75:8c:06:4a:86:93:88:ab:66:
         f0:cc:2f:e4:53:d1:be:5f:04:f5:30:da:9e:d7:f7:4c:23:3b:
         3e:5d:04:2e:5e:2b:52:2f:f6:f8:8e:60:85:18:ec:65:66:e0:
         a3:cd:d9:48:46:58:00:d8:6d:6f:23:1e:9d:45:8c:80:cc:26:
         4f:c8:cb:33:8d:ae:db:9f:9c:7f:08:10:bb:48:37:8d:32:a6:
         e7:09:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:43:39 2026 by rpki-client