Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e564bcdd-adc7-33c2-9953-cb187e0751dd.roa
File:                     e564bcdd-adc7-33c2-9953-cb187e0751dd.roa (raw, json)
Hash identifier:          waZfhCi/R3Urj4Xm4e9rp6/ac4mX0JgictzJSL/J6eo=
Subject key identifier:   1F:1A:28:91:6E:32:9D:25:AB:2F:3C:9A:80:CD:A9:5D:BC:9E:60:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D20AF6B4572B2CA74F3D33700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e564bcdd-adc7-33c2-9953-cb187e0751dd.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.224.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:6b:45:72:b2:ca:74:f3:d3:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=a050604f-d2f5-4419-8c78-4a1de5aa8834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:7e:74:18:56:e9:8b:a0:d0:19:32:c1:63:
                    48:f6:45:64:b0:18:85:80:bb:73:79:db:38:c8:7f:
                    41:4a:07:e9:00:e5:de:b8:69:10:be:43:0f:26:da:
                    92:bf:43:56:ff:d0:ee:a6:eb:32:4d:97:c6:f2:f4:
                    66:6c:ed:cf:a9:37:b1:f9:29:ed:29:6b:9b:aa:50:
                    f3:93:76:4f:32:3a:4b:a0:57:9d:91:7c:87:7a:11:
                    7c:96:f3:88:e5:0f:95:27:10:e7:3b:34:31:b6:ba:
                    e4:8f:54:c7:91:e1:db:e8:32:3b:56:81:df:37:7b:
                    bf:27:9a:af:a7:ab:68:22:8b:3a:50:41:cc:f3:e3:
                    35:5f:d3:8f:56:fa:0d:4a:31:03:cc:45:af:1d:ae:
                    1e:d1:cf:58:1e:f6:a6:14:3f:67:e1:7c:51:76:f0:
                    40:0c:8f:b2:f2:82:ff:10:d3:d7:09:5d:95:f7:4e:
                    fa:e1:f0:0f:cf:c9:f0:17:c8:47:92:b6:42:71:fa:
                    84:c5:80:9f:d2:ae:8b:06:ca:49:e7:3b:ee:85:d6:
                    c7:f7:da:cc:ec:be:c0:a1:5e:4e:62:2f:c8:aa:83:
                    62:d4:60:a0:0f:07:bd:f9:fe:14:90:2a:54:b4:a9:
                    97:94:2b:4a:a6:4a:8a:ad:a9:d9:60:90:7f:ef:4a:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1A:28:91:6E:32:9D:25:AB:2F:3C:9A:80:CD:A9:5D:BC:9E:60:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e564bcdd-adc7-33c2-9953-cb187e0751dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.224.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:97:63:73:54:64:8f:64:35:d0:54:e3:89:f6:99:79:57:
         69:c7:37:c8:cf:8c:90:b8:35:e0:72:a9:54:03:d8:15:dc:c2:
         03:ec:ea:6a:d1:62:2e:8c:72:30:ea:c0:af:0c:1f:65:43:32:
         52:d4:35:c5:1a:9d:3e:bb:26:81:02:df:13:23:d0:9f:61:82:
         e8:77:88:f3:86:2e:e5:7d:00:46:09:e9:4f:45:95:2c:b9:5e:
         ce:22:4c:5a:c9:4b:b5:51:a9:45:74:37:75:10:22:03:34:36:
         8c:b3:ae:d9:f7:5d:84:b5:0b:b6:58:90:d9:bd:c3:fc:58:29:
         95:30:97:87:9d:d0:6b:15:e2:16:89:48:7d:b9:ff:0e:af:28:
         cc:97:5e:92:8d:4e:8d:e5:cc:08:4e:b1:39:83:c1:0e:c1:cb:
         c6:35:11:1a:27:97:bf:27:7c:7e:1e:37:46:06:bd:4f:e6:35:
         88:cf:ed:69:87:4d:75:67:42:aa:c2:1a:78:12:e0:7e:b7:d3:
         94:82:d1:47:7b:0c:7d:72:ca:42:37:7f:d0:83:26:26:6f:0d:
         7c:ac:92:67:fb:23:c3:b4:55:f8:c8:44:7c:30:26:4d:2a:01:
         8e:fc:25:07:a3:2a:1e:fd:90:ac:28:7c:43:4b:46:bc:ad:29:
         a4:e3:ea:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr2tFcrLKdPPTNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
YTA1MDYwNGYtZDJmNS00NDE5LThjNzgtNGExZGU1YWE4ODM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApql+dBhW6Yug0BkywWNI9kVksBiFgLtzeds4
yH9BSgfpAOXeuGkQvkMPJtqSv0NW/9DupusyTZfG8vRmbO3PqTex+SntKWubqlDz
k3ZPMjpLoFedkXyHehF8lvOI5Q+VJxDnOzQxtrrkj1THkeHb6DI7VoHfN3u/J5qv
p6toIos6UEHM8+M1X9OPVvoNSjEDzEWvHa4e0c9YHvamFD9n4XxRdvBADI+y8oL/
ENPXCV2V90764fAPz8nwF8hHkrZCcfqExYCf0q6LBspJ5zvuhdbH99rM7L7AoV5O
Yi/IqoNi1GCgDwe9+f4UkCpUtKmXlCtKpkqKranZYJB/70opXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB8aKJFuMp0lqy88moDNqV28nmCaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTU2NGJjZGQtYWRjNy0z
M2MyLTk5NTMtY2IxODdlMDc1MWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruAwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2Il2NzVGSPZDXQVOOJ9pl5V2nHN8jPjJC4NeByqVQD2BXcwgPs6mrR
Yi6McjDqwK8MH2VDMlLUNcUanT67JoEC3xMj0J9hguh3iPOGLuV9AEYJ6U9FlSy5
Xs4iTFrJS7VRqUV0N3UQIgM0Noyzrtn3XYS1C7ZYkNm9w/xYKZUwl4ed0GsV4haJ
SH25/w6vKMyXXpKNTo3lzAhOsTmDwQ7By8Y1ERonl78nfH4eN0YGvU/mNYjP7WmH
TXVnQqrCGngS4H6305SC0Ud7DH1yykI3f9CDJiZvDXyskmf7I8O0VfjIRHwwJk0q
AY78JQejKh79kKwofENLRrytKaTj6no=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:37 2026 by rpki-client