Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2e69999-fe53-3592-b8f2-dd3988e2cea3.roa
File:                     c2e69999-fe53-3592-b8f2-dd3988e2cea3.roa (raw, json)
Hash identifier:          qn1rMFP5j1+CzjvdYpsbLMwh6GYp34mGYO86iegVuq4=
Subject key identifier:   40:34:9E:C0:2E:78:5B:CD:53:2B:C4:95:CA:23:30:B4:98:FB:FD:D2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF766FEBA741CF0487FB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2e69999-fe53-3592-b8f2-dd3988e2cea3.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.225.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:76:6f:eb:a7:41:cf:04:87:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=e1feeb6d-d06e-4b86-9045-b89725412869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:2a:87:6d:c6:dd:0a:7d:ff:3f:ee:18:53:
                    f4:4d:bc:07:b8:de:5c:68:1d:39:5a:7e:e1:af:14:
                    64:cd:ce:ce:06:2e:51:da:82:58:bc:df:a0:2f:da:
                    77:7f:e7:f9:f3:e7:f9:03:bd:ca:af:ce:0c:d5:e0:
                    5f:45:c9:3b:49:a0:e5:36:0e:27:63:08:69:f3:70:
                    e7:a4:15:a0:f9:cd:54:66:2e:e7:8e:e4:44:95:82:
                    b0:02:49:32:7a:25:31:59:13:38:61:42:54:44:87:
                    92:ed:72:32:8c:de:a5:cd:0b:f6:11:96:2c:bf:e9:
                    fb:df:0e:8d:45:ee:ea:2a:88:ff:c4:3f:5a:ed:7e:
                    30:e6:12:19:57:a8:81:a3:5d:d6:9a:19:e5:16:5d:
                    81:80:72:74:41:6b:b4:ae:38:dd:e0:28:18:1c:9b:
                    52:8a:43:29:99:76:e8:dd:38:61:64:4b:ce:22:47:
                    96:9a:3e:90:18:3a:b0:6e:69:4c:95:f4:2d:9b:f0:
                    28:72:d0:7b:34:82:c5:63:3b:83:24:39:cd:4c:66:
                    dc:fe:59:12:1f:78:8d:b0:6b:41:73:b1:85:4a:72:
                    c2:48:63:5b:d4:a3:18:1d:79:95:47:bb:ba:64:9c:
                    e3:5d:0f:2a:30:b9:14:fe:40:84:42:47:e7:d2:ae:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:34:9E:C0:2E:78:5B:CD:53:2B:C4:95:CA:23:30:B4:98:FB:FD:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c2e69999-fe53-3592-b8f2-dd3988e2cea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.225.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:8b:cc:20:e5:f3:5b:00:9b:61:3d:6b:79:8c:0f:79:4f:a6:
         e8:ff:b4:d3:c2:8d:82:f0:2d:92:eb:8a:90:77:d6:71:d3:d9:
         68:ce:21:c8:e8:7d:b9:e9:fb:0c:37:06:16:d8:a3:fe:e8:f1:
         44:9a:53:a6:44:e4:dd:9d:63:05:25:41:42:41:c0:ef:8f:d9:
         8b:31:de:ba:63:05:8a:b9:1f:86:aa:08:df:3d:7f:91:e0:19:
         44:de:36:a2:51:3b:68:39:e1:a7:c3:38:b2:46:25:c1:33:dd:
         41:f1:19:f5:ba:cb:dd:ab:1d:f5:f1:40:48:83:0d:d9:94:12:
         4f:f6:3f:7f:80:ad:a9:c2:08:d7:55:1f:8c:47:dd:c5:e9:e1:
         cc:91:22:3c:01:dd:99:e6:39:8e:e5:21:47:88:2c:7e:e0:de:
         4d:f1:40:9a:b4:b5:f8:11:c6:b3:36:84:05:c7:53:3f:7c:c4:
         7c:37:ff:e4:2f:e7:40:8f:a4:e9:33:3c:8e:f5:bf:2f:25:24:
         1b:03:2b:49:f9:67:4c:22:af:d9:77:06:82:7a:a4:fd:e3:52:
         8f:4f:9b:e0:33:98:4c:a5:5e:cb:d4:a0:a8:69:e6:b7:f9:25:
         19:1a:7b:74:c4:80:db:48:f4:83:c9:ef:37:98:92:6b:8c:c7:
         39:84:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:50 2026 by rpki-client