Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c88fa91b-0393-3016-b5c9-ce2e0a8b370f.roa
File:                     c88fa91b-0393-3016-b5c9-ce2e0a8b370f.roa (raw, json)
Hash identifier:          mFv9xDpHwlZlCaPp/xczyrZ5mYgRhQeRFQVWa50D22g=
Subject key identifier:   3C:46:06:64:CE:62:8B:E3:02:E9:29:99:69:0D:E9:04:CA:4E:CB:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF6F679D3ED24B1B1D8A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c88fa91b-0393-3016-b5c9-ce2e0a8b370f.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.196.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:6f:67:9d:3e:d2:4b:1b:1d:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=f8153fe4-fd77-41c4-9d0f-d3af16917008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:38:17:e2:0b:2b:87:61:38:94:28:b9:17:
                    08:ea:f2:d4:9a:f1:f5:06:3f:04:46:dd:c3:66:48:
                    a8:db:b4:4f:3b:c4:b6:8d:f9:90:1b:59:9c:17:db:
                    82:bc:3b:10:f4:3a:4a:26:e2:58:e9:be:42:c2:a0:
                    3b:5c:31:15:29:b3:f1:7c:08:69:b6:13:ec:6d:9a:
                    b0:95:10:4f:d2:43:24:cd:ba:5f:0a:d7:96:f1:96:
                    cb:db:fa:2d:25:44:ab:39:10:43:b7:17:86:ea:30:
                    f0:aa:28:4b:a1:00:1d:af:c7:76:83:2d:cf:8a:20:
                    bd:a1:63:de:0b:2b:f7:d6:15:9f:d1:c8:84:3d:64:
                    c1:8e:1c:07:a9:90:cd:45:f2:d6:ae:46:65:85:6e:
                    1c:95:0c:45:71:5b:13:15:50:9c:29:08:e4:4f:58:
                    09:9e:5b:c3:4a:2b:f3:01:3b:7a:d8:66:ab:5c:ed:
                    c9:5d:99:47:99:6a:f2:90:36:9d:fe:19:7a:21:7a:
                    b4:e3:4f:5b:71:99:67:d3:83:02:68:aa:1c:b0:d9:
                    3f:d8:1d:e0:7b:6e:c4:9f:50:56:9f:e1:87:de:db:
                    1f:53:e7:90:15:54:14:15:b4:7f:2d:2d:3b:7d:88:
                    13:71:35:70:ce:7a:0d:b1:9a:31:bc:01:71:dd:62:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:46:06:64:CE:62:8B:E3:02:E9:29:99:69:0D:E9:04:CA:4E:CB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c88fa91b-0393-3016-b5c9-ce2e0a8b370f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.196.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:6f:62:27:d5:36:f8:c4:e7:42:0f:57:26:42:3a:f2:99:a8:
         14:ed:32:6e:39:a4:64:70:25:45:d5:09:3f:9f:21:60:ea:8b:
         a5:99:ad:ae:27:dc:c4:55:2a:2d:63:cc:59:88:eb:16:a8:57:
         1a:e6:04:8e:85:80:99:ad:0c:61:bc:6d:1f:85:4e:4c:7d:03:
         c2:56:e7:da:31:2d:b3:57:6f:47:61:30:fa:8b:bd:17:8d:00:
         36:48:36:7b:8c:82:58:8b:9f:c7:23:9f:40:a9:2b:b6:48:c7:
         11:64:a5:32:93:bc:1b:95:a1:e6:d0:a9:71:0a:93:04:67:19:
         89:e0:8d:2b:d1:7b:ad:5a:87:2f:43:5f:48:a2:a0:82:c0:dc:
         7f:66:f1:31:c8:69:a3:16:a3:a0:a6:61:43:1c:88:f1:42:f1:
         45:e4:c8:70:f3:c8:eb:71:c1:6b:2b:39:8d:08:72:46:b0:f3:
         8b:33:51:e4:da:95:6d:ee:41:30:a6:fd:50:85:f3:50:6d:d5:
         c1:98:16:47:42:a0:75:3a:a7:02:3e:7c:00:db:ee:7c:e3:b1:
         56:d5:c6:51:4a:5f:f1:86:96:bf:63:9d:c1:ea:42:d7:14:8d:
         16:ff:b9:d3:4c:6c:e9:f9:cf:88:19:ab:be:19:14:b0:aa:13:
         93:6a:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:38 2026 by rpki-client