Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7a3d4ac-52b3-3533-aa75-3c5c4604aabd.roa
File:                     c7a3d4ac-52b3-3533-aa75-3c5c4604aabd.roa (raw, json)
Hash identifier:          QbnBwwqNhKoYJBGOENIvOQ2FKaBxj0j4BaV/KX21VcE=
Subject key identifier:   E5:20:4A:D2:73:E8:CF:1B:4A:49:61:AC:D6:35:4C:03:06:E5:74:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4F72C28CB5D5DDA49DC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7a3d4ac-52b3-3533-aa75-3c5c4604aabd.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.236.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:f7:2c:28:cb:5d:5d:da:49:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=56953423-6dfb-43c6-9ca5-0c7489bd84d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:fb:32:37:58:9c:dc:1d:27:96:c3:ee:9e:
                    a3:95:ea:2e:20:0f:22:ed:bb:d5:60:54:45:51:8c:
                    43:06:94:a1:98:4f:58:2e:ae:17:8b:b0:18:18:4b:
                    32:64:19:72:e5:64:49:ea:29:30:46:23:03:3a:8a:
                    7c:67:42:96:c4:1e:3a:a8:b0:a4:3b:f0:10:cc:d5:
                    f6:81:11:c8:50:79:08:e3:62:9c:50:45:2b:af:1a:
                    8b:6d:33:26:56:e0:96:98:77:8b:b6:9e:0a:21:d9:
                    e8:63:16:e5:a4:8b:c4:a6:be:a4:8f:44:c5:15:f6:
                    11:b7:d9:7b:b0:22:d3:91:65:ad:06:99:d8:e8:55:
                    1e:72:83:6b:ca:16:aa:fc:20:73:35:a5:e9:af:e2:
                    88:fe:16:02:44:68:81:b8:be:6a:63:fa:ec:61:b5:
                    1e:7d:be:e3:93:02:7f:77:b1:40:6e:c0:11:23:05:
                    72:7f:b9:94:20:a9:20:7b:e0:e9:3d:f9:d1:87:33:
                    91:60:96:1f:69:2c:a6:59:26:cd:a8:7d:62:a8:c0:
                    df:b1:94:4e:45:36:d8:fe:8d:2d:19:bd:c8:21:9a:
                    68:13:91:0c:0c:62:88:99:4f:d2:56:3b:0f:94:4b:
                    d0:9d:25:24:ea:c7:3e:38:aa:07:33:71:8c:58:2e:
                    9d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:20:4A:D2:73:E8:CF:1B:4A:49:61:AC:D6:35:4C:03:06:E5:74:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7a3d4ac-52b3-3533-aa75-3c5c4604aabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.236.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:f6:74:e4:29:8f:0f:35:aa:a3:a4:ee:b6:4d:4f:de:4d:
         af:a4:5f:3d:c5:6e:2b:d4:90:66:72:4b:64:54:68:64:39:d6:
         df:7f:99:6f:77:7b:26:fb:d0:b9:ee:6c:82:18:9f:94:68:7d:
         86:09:c9:70:3f:8d:d6:57:9d:fe:0c:eb:6e:6f:cd:f8:07:f1:
         f4:1b:9d:69:6d:d6:ab:ef:99:d8:3d:b6:24:b6:00:18:f8:9a:
         2b:3a:2f:d5:67:4c:0b:e0:9d:95:7e:01:ca:28:6f:bc:0a:0a:
         84:2c:cc:ba:04:e5:91:ac:7a:e6:ca:44:73:37:07:a4:15:82:
         ad:c3:8c:17:8d:2f:85:b3:7d:5c:d6:5c:8a:7f:07:19:c5:bc:
         3b:48:c6:71:af:07:e1:75:ba:7d:c6:cc:85:09:c9:64:1f:5a:
         62:cb:e5:2e:b3:e9:76:24:88:c4:bd:82:e3:ef:de:a2:b2:15:
         bb:ff:05:b3:39:91:78:57:0f:7d:27:77:b9:45:42:44:0c:7c:
         99:f0:a8:11:5a:a8:43:0b:7b:86:d9:92:7b:79:0e:00:eb:0b:
         3b:f2:f6:29:bb:2a:13:00:17:85:1c:64:05:4e:ab:36:bd:0f:
         84:d4:87:94:a3:8d:02:35:5c:37:2a:93:cb:54:23:47:46:08:
         97:b9:83:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:23 2026 by rpki-client